diff --git a/engines/dfc_provider/app/controllers/dfc_provider/base_controller.rb b/engines/dfc_provider/app/controllers/dfc_provider/base_controller.rb
index 48b4d0e53c..bcee581836 100644
--- a/engines/dfc_provider/app/controllers/dfc_provider/base_controller.rb
+++ b/engines/dfc_provider/app/controllers/dfc_provider/base_controller.rb
@@ -3,6 +3,8 @@
 # Controller used to provide the API products for the DFC application
 module DfcProvider
   class BaseController < ActionController::Base
+    protect_from_forgery with: :null_session
+
     rescue_from ActiveRecord::RecordNotFound, with: :not_found
 
     before_action :check_authorization