Fix session creation warning

2026-04-22 13:27:14 +02:00
parent 29de2235c6
commit 6aba5547f2
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/sessions_controller.rb
+++ b/app/controllers/sessions_controller.rb
@@ -8,7 +8,7 @@ class SessionsController < ApplicationController
  end

  def create
-    if user = User.authenticate_by(params.permit(:email_address, :password))
+    if user = User.authenticate_by(params.except(:authenticity_token, :commit).permit(:email_address, :password))
      start_new_session_for user
      redirect_to after_authentication_url, notice: t("sessions.new.notice")
    else