Files
osem/app/controllers/api/v1/events_controller.rb
Rob Smith de4563ddb1 Remote forgery protection for json requests to the api/v1 endpoints
Due to my testing, I incorrectly removed the forgery protection
skip action from the controllers in the api. This fixes that and allows jsonp
calls to work correctly
2016-09-17 19:31:22 -07:00

22 lines
580 B
Ruby

module Api
module V1
class EventsController < Api::BaseController
load_resource :conference, find_by: :short_title
respond_to :json
# Disable forgery protection for any json requests. This is required for jsonp support
skip_before_action :verify_authenticity_token
def index
events = Event.includes(:track, :event_type, event_users: :user)
if @conference
events = events.where(program: @conference.program)
end
respond_with events.confirmed, callback: params[:callback]
end
end
end
end