CSRF attacks by raising an exception. # For APIs, you may want to use :null_session instead. - protect_from_forgery with: :exception + protect_from_forgery with: :null_session end •index.json.jbuilder、show.json.jbuilderに:id追加 json.array!(@todos) do |todo| - json.extract! todo, :title, :order, :done + json.extract! todo, :id, :title, :order, :done json.url todo_url(todo, format: :json) end