From 6ae6f65bbcd0352812c118802044263cca167103 Mon Sep 17 00:00:00 2001
From: Tom Hughes <tom@compton.nu>
Date: Tue, 21 Jul 2026 08:44:12 +0100
Subject: [PATCH] Don't verify the CSRF token for the auth deletion callback

---
 app/controllers/accounts/deletions_controller.rb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/app/controllers/accounts/deletions_controller.rb b/app/controllers/accounts/deletions_controller.rb
index da73b0093..4fde6252a 100644
--- a/app/controllers/accounts/deletions_controller.rb
+++ b/app/controllers/accounts/deletions_controller.rb
@@ -4,6 +4,8 @@ module Accounts
   class DeletionsController < ApplicationController
     layout :site_layout
 
+    skip_before_action :verify_authenticity_token
+
     before_action :authorize_web
     before_action :set_locale
 
-- 
2.47.3