Is omniauth-rails_csrf_protection still required for OmniAuth 2.0?

[nathan-gusto]

Hi there!

I read through the upgrade guide to 2.0 and would appreciate some clarification on whether omniauth-rails_csrf_protection is still required after upgrading omniauth.

The update section noted that if we're already using omniauth-rails_csrf_protection then we'd be able to upgrade to 2.0. What happens if we're not using it? Do we need to add the gem or the custom implementation for omniauth 2.0 to work properly?

Thanks!

[BobbyMcWho]

Hi Nathan!

The gem you linked is indeed the easiest way to set the authenticity token callback to match Rails. Whether you use that gem or implement your own, you will have to do something as omniauth tries to not include rails specific code in the gem.

[nathan-gusto]

Thanks so much @BobbyMcWho for the reply and all of your work for maintaining this gem!