Rails 3.2 + Facebook auth + CSRF FAILURE

facebook-oauth, heroku, ruby-on-rails

Solution

I found that the problem was the gem was too new and passing a STATE header to facebook, which fb didn't want. I rolled the omniauth-facebook gem version back and it worked

Problem

This is the error that I see when trying to login via facebook, I always see that error. Can't seem to get rid of it: Could not authorize you from Facebook because "Csrf detected". I put a skip: ``` skip_before_filter :verify_authenticity_token ``` on the Omniauth callback, but still I get the error. This is in both local and prod (heroku) environments. I have set the heroku environment variables. Any idea?

Original source