Question

我是rails + angular的新手。对于我的应用程序，我想在5次密码尝试失败后锁定用户。我决定这样做： How to make Devise lockable with number of failed attempts

但是当我尝试在5次尝试失败后登录时，它让我通过

我将：locked模块添加到我的user.rb（如下所示）文件中，以便锁定的功能出现在devise.rb中

User.rb

class User < ActiveRecord::Base
  include TokenAuthenticatable

  TYPE = { 
    :admin => 1,
    :member => 2
  }  

  devise :database_authenticatable, :registerable, :recoverable, 
         :rememberable, :trackable, :validatable, :token_authenticatable,
         :timeoutable, :lockable ##this was added

  has_and_belongs_to_many :clients
end

在我的迁移中，我没有注释掉它的可锁定部分：

class DeviseCreateUsers < ActiveRecord::Migration
  def change
    create_table(:users) do |t|
      t.string :first_name
      t.string :last_name
      t.string :type

      ## Database authenticatable
      t.string :email,              :null => false, :default => ""
      t.string :encrypted_password, :null => false, :default => ""

      ## Recoverable
      t.string   :reset_password_token
      t.datetime :reset_password_sent_at

      ## Rememberable
      t.datetime :remember_created_at

      ## Trackable
      t.integer  :sign_in_count, :default => 0
      t.datetime :current_sign_in_at
      t.datetime :last_sign_in_at
      t.string   :current_sign_in_ip
      t.string   :last_sign_in_ip

      ## Confirmable
      # t.string   :confirmation_token
      # t.datetime :confirmed_at
      # t.datetime :confirmation_sent_at
      # t.string   :unconfirmed_email # Only if using reconfirmable

      ## Lockable
       t.integer  :failed_attempts, :default => 0 # Only if lock strategy is :failed_attempts
       t.string   :unlock_token # Only if unlock strategy is :email or :both
       t.datetime :locked_at

      ## Token authenticatable
      # t.string :authentication_token


      t.timestamps
    end

    add_index :users, :email,                :unique => true
    add_index :users, :reset_password_token, :unique => true
    # add_index :users, :confirmation_token,   :unique => true
    # add_index :users, :unlock_token,         :unique => true
    # add_index :users, :authentication_token, :unique => true
      end
    end

要解决此问题，我还尝试添加:locked, :failed_attempts => 5并取消注释初始化程序/设计中的所有可锁定功能。我不确定如何继续 - 帮助将不胜感激。

无法将可锁定的失败尝试数集成到Rails应用

0 个答案: