设计完成401在应用强参数后1ms未授权

我刚刚在我的应用程序中配置了强参数，似乎都很好。但我的设计登录失败。我仍然可以注册一个用户，这将登录用户在我对色器件3.1.1设计完成401在应用强参数后1ms未授权

我加入application_controller：

before_filter :configure_permitted_parameters, if: :devise_controller? 

    protected 
     def configure_permitted_parameters 
     devise_parameter_sanitizer.for(:sign_in) { |u| u.permit(:email, :password, :remember_me) } 
     devise_parameter_sanitizer.for(:sign_up) { |u| u.permit(:username, :email, :password) } 
     end

在我的模型

devise :database_authenticatable, :registerable, 
    :recoverable, :rememberable, :trackable, :validatable, :token_authenticatable, :invitable, :invite_for => 2.weeks, :authentication_keys => [:username]

我的日志，有一个DEPRECATION WARNING：devise：token_authenticatable已被弃用，不确定这是否是问题所在？

 Started POST "https://stackoverflow.com/users/login" for 127.0.0.1 at 2013-10-09 21:54:13 +1300 
     DEPRECATION WARNING: devise :token_authenticatable is deprecated. Please check Devise 3.1 release notes for more information on how to upgrade. (called from <class:User> at /home/jcui/Desktop/workspace/iv/app/models/user.rb:6) 
     Configuration Load (0.4ms) SELECT "configurations".* FROM "configurations" 
     Processing by Devise::SessionsController#create as HTML 
     Parameters: {"utf8"=>"✓", "authenticity_token"=>"G1aVfzHcwHAI7ao6sBLF9WtgJAWlQ8c5KlKzEHpZzTo=", "user"=>{"email"=>"[email protected]", "password"=>"[FILTERED]", "remember_me"=>"0"}, "commit"=>"Sign in"} 
     Completed 401 Unauthorized in 1ms 
     Processing by Devise::SessionsController#new as HTML 
     Parameters: {"utf8"=>"✓", "authenticity_token"=>"G1aVfzHcwHAI7ao6sBLF9WtgJAWlQ8c5KlKzEHpZzTo=", "user"=>{"email"=>"[email protected]", "password"=>"[FILTERED]", "remember_me"=>"0"}, "commit"=>"Sign in"} 
     Rendered devise/shared/_links.erb (0.6ms) 
     Rendered devise/sessions/new.html.erb within layouts/application (6.8ms) 
     Completed 200 OK in 169ms (Views: 83.0ms | ActiveRecord: 0.0ms | Solr: 0.0ms)

我试图在会话新视图中输出资源错误对象，但没有错误！

#<ActiveModel::Errors:0xe911424 @base=#<User id: nil, email: "[email protected]", encrypted_password: "$2a$10$j6lAQhBNgsO01HuBjxbgCOdvd0biRehWhQct50ee8cAo...", reset_password_token: nil, reset_password_sent_at: nil, remember_created_at: nil, 
    sign_in_count: 0, current_sign_in_at: nil, last_sign_in_at: nil, current_sign_in_ip: nil, last_sign_in_ip: nil, created_at: nil, updated_at: nil, api_key: nil, avatar: nil, deleted_at: nil, roles_mask: nil, subdomain_id: nil, 
    invitation_token: nil, invitation_sent_at: nil, invitation_accepted_at: nil, invitation_limit: nil, invited_by_id: nil, invited_by_type: nil, username: nil, avatar_processing: nil, lang: nil>, @messages={}>

来源

2013-10-09 user1883793

你能保证t你的配置被调用了吗？ – phoet

也可以配置强参数，以便在使用错误密钥访问时引发错误。这可能有助于解决问题 – phoet

控制器的外观如何。具体是创建方法 – bobbdelsol

您正在使用的用户名，身份验证的模式，你的色器件模型

:authentication_keys => [:username]

其中作为您的登录，您的电子邮件进行身份验证。尝试从

devise_parameter_sanitizer.for(:sign_in) { |u| u.permit(:email, :password, :remember_me) }

改变你的允许参数以

devise_parameter_sanitizer.for(:sign_in) { |u| u.permit(:username, :password, :remember_me) }

还可以修改配置/初始化/ devise.rb有：

config.case_insensitive_keys = [ :email, :username ] 
config.strip_whitespace_keys = [ :email, :username ]

看看这个链接，如果你希望用用户名或密码登录： https://github.com/plataformatec/devise/wiki/How-To:-Allow-users-to-sign-in-using-their-username-or-email-address

来源

2015-06-20 08:17:14 James

设计完成401在应用强参数后1ms未授权

回答

相关问题