Turn on mass assignment protection

[rails.git] / app / models / request_token.rb

diff --git a/app/models/request_token.rb b/app/models/request_token.rb
index 1ac502bc7659e747f2b37ddf7342276533ea9c2d..6e4ec40c357aa46ccbb2a23cb87b5b8f1168f7e2 100644 (file)
--- a/app/models/request_token.rb
+++ b/app/models/request_token.rb
@@ -21,7 +21,7 @@ class RequestToken < OauthToken
         params[p] = read_attribute(p)
       }
 
-      access_token = AccessToken.create(params)
+      access_token = AccessToken.create(params, :without_protection => true)
       invalidate!
       access_token
     end