# What is InvalidAuthenticityToken?

**URL:** <https://www.ruby-forum.com/t/what-is-invalidauthenticitytoken/184432>\
**Category:** Rails\
**Created:** [March 2, 2010, 3:21pm UTC](https://www.ruby-forum.com/t/what-is-invalidauthenticitytoken/184432 "2010-03-02T15:21:29Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![rubyernewbie](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/9dc877/32.png) [@rubyernewbie](https://www.ruby-forum.com/u/rubyernewbie)\
**Post date:** [March 2, 2010, 3:21pm UTC](https://www.ruby-forum.com/t/what-is-invalidauthenticitytoken/184432/1 "2010-03-02T15:21:29Z")

</div>

## I create a ruby script to submit a post to my local rails application, but doesn’t return a data. so I open a log file, saw this.

## ActionController::InvalidAuthenticityToken (ActionController::InvalidAuthenticityToken): /usr/lib/ruby/1.8/webrick/httpserver.rb:104:in `service' /usr/lib/ruby/1.8/webrick/httpserver.rb:65:in`run’ /usr/lib/ruby/1.8/webrick/server.rb:173:in `start_thread' /usr/lib/ruby/1.8/webrick/server.rb:162:in`start’ /usr/lib/ruby/1.8/webrick/server.rb:162:in `start_thread' /usr/lib/ruby/1.8/webrick/server.rb:95:in`start’ /usr/lib/ruby/1.8/webrick/server.rb:92:in `each' /usr/lib/ruby/1.8/webrick/server.rb:92:in`start’ /usr/lib/ruby/1.8/webrick/server.rb:23:in `start' /usr/lib/ruby/1.8/webrick/server.rb:82:in`start’

I want to submit a post, How can I ?

---

<div class="post-metadata">

**Author:** ![rubyernewbie](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/9dc877/32.png) [@rubyernewbie](https://www.ruby-forum.com/u/rubyernewbie)\
**Post date:** [March 2, 2010, 5:36pm UTC](https://www.ruby-forum.com/t/what-is-invalidauthenticitytoken/184432/2 "2010-03-02T17:36:23Z")

</div>

> **[Securing Rails Applications — Ruby on Rails Guides](https://guides.rubyonrails.org/security.html#cross-site-request-forgery-csrf)**
>
> Securing Rails ApplicationsThis manual describes common security problems in web applications and how to avoid them with Rails.After reading this guide, you will know: All countermeasures that are highlighted. The concept of sessions in Rails, what...

You can use:

[http://apidock.com/rails/ActionController/RequestForgeryProtection/form\_authenticity\_token](http://apidock.com/rails/ActionController/RequestForgeryProtection/form_authenticity_token)

To get the value (or use form\_for, which automatically handles it).

Cheers,

Andy

–  
Andy J.  
[http://andyjeffries.co.uk/](http://andyjeffries.co.uk/)#rubyonrails #mysql #jquery  
Registered address: 64 Sish Lane, Stevenage, Herts, SG1 3LS  
Company number: 5452840