My facebook is just approved today. However,when I clicked on “Go to app”, it returns Rail 422 ” The change you wanted was rejected. error” I set my Canvas URL to my site url and I am using Omniauth, so I am just wondering what did I miss.
Share
Try removing
In the application_controller, or
Facebook uses signed_request that you can decode and use to verify that the request actually comes from facebook, so protect_from_forgery is unnecessary for applications that are accessible through the facebook canvas only.
More here: Canvas Authentication & ActionController::RequestForgeryProtection