cirandas.net

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

class FbAppPluginController < PublicController

  no_design_blocks

  def index
  end

  def myprofile_config
    if logged_in?
      redirect_to controller: :fb_app_plugin_myprofile, profile: user.identifier
    else
      redirect_to controller: :account, action: :login, return_to: url_for(controller: :fb_app_plugin, action: :myprofile_config)
    end
  end

  protected

  # prevent session reset because X-CSRF not being passed by FB
  # see also https://gist.github.com/toretore/911886
  def handle_unverified_request
  end

end