# Random InvalidAuthenticityToken errors

**URL:** <https://www.ruby-forum.com/t/random-invalidauthenticitytoken-errors/141016>\
**Category:** Rails\
**Created:** [June 20, 2008, 8:20pm UTC](https://www.ruby-forum.com/t/random-invalidauthenticitytoken-errors/141016 "2008-06-20T20:20:21Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![tekhne](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/t/90ced4/32.png) [@tekhne](https://www.ruby-forum.com/u/tekhne)\
**Post date:** [June 20, 2008, 8:20pm UTC](https://www.ruby-forum.com/t/random-invalidauthenticitytoken-errors/141016/1 "2008-06-20T20:20:21Z")

</div>

My login controller seems to be randomly raising  
InvalidAuthenticityToken errors. I’m using exception\_notifier so I’ve  
got pretty solid debug output, but I can’t see any pattern to it. They  
are real users with different IPs and different who sometimes try  
repeatedly to join or log in and mail me when they can’t, so I don’t  
think it’s any kind of bot. And it’s only these two actions on this  
controller; I use protect\_from\_forgery on my create/update/destroy  
actions and have never had an exception.

Can anyone offer troubleshooting ideas?