AngujarJS with Rails 4: CSRF token

base_controller.rb

# app/controllers/api/base_controller.rb

class Api::BaseController < ApplicationController
  after_action :set_csrf_cookie_for_ng
  
  respond_to :json
  
  def set_csrf_cookie_for_ng
    cookies['XSRF-TOKEN'] = form_authenticity_token if protect_against_forgery?
  end

  protected
    def verified_request?
      super || form_authenticity_token == request.headers['X-XSRF-TOKEN']
    end
end