Invalid authenticity token Rails CSRF
ActionController::InvalidAuthenticityTokenQuick Answer
The CSRF token is missing or invalid.
Why This Happens
In Ruby on Rails, the csrf token is missing or invalid. This is one of the most common Ruby on Rails errors developers encounter. Understanding the root cause helps you fix it quickly and prevent it from recurring.
The Problem
<form method='post'>
<button>Submit</button>
</form>The Fix
<%= form_with do |f| %>
<%= f.submit %>
<% end %>Step-by-Step Fix
- 1
Identify the error
Look at the error message: ActionController::InvalidAuthenticityToken. This tells you exactly what went wrong.
- 2
Find the cause
Check the stack trace to find which line of your Ruby on Rails code triggered this error.
- 3
Apply the fix
Use the corrected code pattern shown above. Test to confirm the error is resolved.
Bugsly catches this automatically
Bugsly's AI analyzes this error pattern in real-time, explains what went wrong in plain English, and suggests the exact fix — before your users even report it.
Try Bugsly free