Merge pull request #1027 from jkowens/patch-1

Allow OmniAuthAuthenticityTokenProtection options to be configured

lib/omniauth/authenticity_token_protection.rb

@@ -18,6 +18,8 @@ def call!(env)
       react env
     end
 
+    alias_method :call, :call!
+
   private
 
     def deny(_env)

spec/omniauth/strategy_spec.rb

@@ -973,6 +973,19 @@ def make_env(path = '/auth/test', props = {})
         end
       end
 
+      context 'with custom allow_if proc' do
+        before do
+          OmniAuth.config.request_validation_phase = OmniAuth::AuthenticityTokenProtection.new(allow_if: ->(env) { true })
+        end
+
+        it 'allows a valid request' do
+          expect(strategy).to receive(:fail!).with('Request Phase', kind_of(StandardError))
+
+          post_env = make_env('/auth/test')
+          strategy.call(post_env)
+        end
+      end
+
       after do
         OmniAuth.config.request_validation_phase = nil
       end