嵌套has_one关联的强参数

时间:2014-12-19 16:10:03

标签: ruby-on-rails ruby ruby-on-rails-4 strong-parameters

我似乎遗漏了一些明显的东西,但我无法允许嵌套has_one关联的属性。

控制器:

def create
  @crossword = Crossword.new(crossword_params)

  if @crossword.save
    render :show, status: :created, location: [:api, @crossword]
  else
    render json: @crossword.errors, status: :unprocessable_entity 
  end
end

def crossword_params
  params.require(:crossword).permit(:title, :grid_size, grid_size_attributes: [:rows, :columns])
end

型号:

validates :title, :grid_size, presence: true
validates_associated :grid_size
has_one :grid_size
accepts_nested_attributes_for :grid_size

请求:

POST /api/crosswords.json HTTP/1.1
X-Accept: application/crosswords.v1
Content-Type: application/json
Host: localhost:3000
Connection: close
User-Agent: Paw/2.1 (Macintosh; OS X/10.10.0) GCDHTTPRequest
Content-Length: 83

{"crossword":{"title":"My Aweosme Crossword","grid_size":{"rows":15,"columns":15}}}

Rails控制台输出:

Started POST "/api/crosswords.json" for 127.0.0.1 at 2014-12-19 11:05:13 -0500
Processing by Api::V1::CrosswordsController#create as JSON
Parameters: {"crossword"=>{"title"=>"My Aweosme Crossword", "grid_size"=>{"rows"=>15, "columns"=>15}}}
Can't verify CSRF token authenticity
Unpermitted parameters: grid_size
   (0.1ms)  BEGIN
   (0.1ms)  ROLLBACK
Completed 422 Unprocessable Entity in 2ms (Views: 0.1ms | ActiveRecord: 0.2ms)

我错过了一些微不足道的事情吗?这似乎就是每个人都这样说的。

1 个答案:

答案 0 :(得分:3)

更改" grid_size" to" grid_size_attributes"在你的邮局中。

如果您想继续使用" grid_size",请更新您的crossword_params方法:

def crossword_params
    params[:crossword][:grid_size_attributes] = params[:crossword][:grid_size] if params[:crossword][:grid_size]
    # NOTE :grid_size removed!
    params.require(:crossword).permit(:title, grid_size_attributes: [:rows, :columns])
end