How do I know that the ajax request definitely came from my site, and not someone is trying to call it from their own machine?

Question

Ruby on Rails

How do I know that the ajax request definitely came from my site, and not someone is trying to call it from their own machine?
Those. I suppose somewhere in the request you can check, but will this be a normal way?

Answer 1

• Cross Site Request Forgery
  
• Cross-Site Request Forgery (CSRF) in RoR
  
• https://samuelmullen.com/articles/csrf-protection-...
  
• CSRF vulnerabilities are still relevant