在Rails上启用Bcrypt 5

时间:2016-09-19 23:50:23

标签: ruby-on-rails ruby bcrypt ruby-on-rails-5 bcrypt-ruby

我在Rails 5.0.0上启动了一个新应用,并试图使用bcrypt。我已按照bcrypt回购中的说明进行操作,但由于我获得了ActiveModel::ForbiddenAttributesError

以下是user.rb

require 'bcrypt'

class User < ActiveRecord::Base
 include BCrypt

 def password
    @password ||= Password.new(password_hash)
 end

 def password=(new_password)
    @password = Password.create(new_password)
    self.password_hash = @password
 end

 has_many :trips
end

迁移详情:

class CreateUsers < ActiveRecord::Migration[5.0]
  def change
    create_table :users do |t|
        t.string  :first_name,    null: false
        t.string  :last_name,     null: false
        t.string  :email,         null: false
        t.string  :password_hash, null: false

        t.timestamps
    end
  end
end

users_controller.rb

class UsersController < ApplicationController

  def create
    user = User.new(params[:user])
    user.password = params[:password]
    user.save!
  end

  def new
   @user = User.new
  end

  private

  def user_params
   params.require(:user).permit(:first_name, :last_name, :email, :password, :password_confirmation)
  end
end

这是堆栈跟踪的开始:

Started POST "/users" for ::1 at 2016-09-19 16:44:20 -0700
Processing by UsersController#create as HTML
  Parameters: {"utf8"=>"✓",     "authenticity_token"=>"GWJXon2Y914Y7m2NGPAj8wz+9O6EBO1OnrIcBBRis/ATMkaGMCRh6uE4PAxJOIE7mVrornt5PqOvxBjoOBo9ag==", "user"=>{"first_name"=>"test", "last_name"=>"test2", "email"=>"123@gmail.com", "password"=>"[FILTERED]", "password_confirmation"=>"[FILTERED]"}, "commit"=>"Create User"}
Completed 500 Internal Server Error in 1ms (ActiveRecord: 0.0ms)


ActiveModel::ForbiddenAttributesError (ActiveModel::ForbiddenAttributesError):

app/controllers/users_controller.rb:4:in `create'
  Rendering /Users/.rvm/gems/ruby-2.3.0/gems/actionpack-5.0.0.1/lib/action_dispatch/middleware/templates/rescues/diagnostics.html.erb within rescues/layout

1 个答案:

答案 0 :(得分:0)

我觉得你收到错误的原因是因为这行

user = User.new(params[:user])

您正试图通过参数:user。在您的user_params方法中,

params.require(:user).permit(:first_name, :last_name, :email, :password, :password_confirmation)

:user不是允许的参数之一。

您需要做的是改变

user = User.new(params[:user])

user = User.new(user_params)

您需要调用user_params函数并将其作为User.new的参数传递。