Signed out and redirected to login after selecting chart display

[carlosbislip]

I reinstalled wesabe/pfc & wesabe/brcm to make sure. Since the last wesabe commit, when I select a different chart display (1m, 3m, 6m, 1y), nothing else responds and Im signed out. This is the line/bar chart either on the dashboard or in transaction view.

Started PUT "/preferences" for 127.0.0.1 at Thu Jun 16 20:58:04 -0500 2011
Processing by UserPreferencesController#update as
Parameters: {"charts.line.range"=>"3"}
*** [check_authentication] no current user; current_user: nil
Redirected to http://localhost:3000/login
Completed 302 Found in 199ms

Started GET "/login" for 127.0.0.1 at Thu Jun 16 20:58:04 -0500 2011
Processing by SessionsController#new as
Rendered layouts/_header.html.erb (27.1ms)
Rendered layouts/_footer_nav.html.erb (0.7ms)
Rendered sessions/new.html.erb within layouts/public (34.3ms)
Completed 200 OK in 399ms (Views: 176.2ms | ActiveRecord: 0.0ms)

Started GET "/session" for 127.0.0.1 at Thu Jun 16 20:58:41 -0500 2011
Processing by SessionsController#show as JS
*** session timed out for 43bc201b53c2faca8a1c28ef3e83f082; time_left: 0; session[:expires_at]:
Completed 200 OK in 345ms (Views: 1.1ms | ActiveRecord: 0.0ms)

[lthill]

Same thing showed up for me with several different operations

log from pfc when clicking on an account group:

Started PUT "/preferences" for 127.0.0.1 at Sat Aug 20 18:49:47 -0600 2011
Processing by UserPreferencesController#update as
Parameters: {"accounts.groups.savings.expanded"=>"true"}
*** [check_authentication] no current user; current_user: nil
Redirected to http://localhost:3000/login
Completed 302 Found in 462ms

[lthill]

Additional observations from the problem I reported above.

using a fresh install here is what I found:
new signup -> no problems
add savings account -> selecting savings group brings up summary graphs as expected.
delete savings account ->
1. Balance remains in savings group & savings group remains w/o any accounts.
2. clicking savings group header kicks user out to sign in page.
shutdown server in pfc
restart pfc
click on savings group -> No route matches "/account-groups/savings"
sign in again
add new savings account -> 1st savings account is back + new account.

[Onager]

I've had a look through, and worked this one out. The problem is that the anti-CSRF token isn't being sent when Wesabe does HTTP PUT requests.

To work around this, comment out the "protect_from_forgery" line in application_controller.rb.

The fix is probably an update to jquery.