Yesod.Auth.Email设置密码始终返回"密码不匹配,请再试一次"

时间:2016-12-21 02:34:11

标签: haskell yesod

目前正在尝试设置Yesod.Auth.Email,但在获取验证网址后遇到了一些问题。

在"设置密码"页面(使用"新密码"和"确认"),在输入密码并在确认框中输入密码后,它始终返回"密码不匹配,请再试一次& #34;

这是记录的请求,

POST /auth/page/email/set-password
  Params: [("_token","wcpv0LhJfy"),("new","1234"),("confirm","1234")]
  Request Body: _token=wcpv0LhJfy&new=1234&confirm=1234
  Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  Status: 303 See Other 0.002459s

表明他们确实应该匹配。

查看处理程序postPasswordR的源代码,我并不完全清楚它为什么失败,因为这不是你在instance YesodAuthEmail App中覆盖的东西?

最小示例

直接从the email-auth section in the Yesod book开始,保存为Main.hs

{-# LANGUAGE DeriveDataTypeable #-}
{-# LANGUAGE FlexibleContexts #-}
{-# LANGUAGE GADTs #-}
{-# LANGUAGE GeneralizedNewtypeDeriving #-}
{-# LANGUAGE MultiParamTypeClasses #-}
{-# LANGUAGE OverloadedStrings #-}
{-# LANGUAGE QuasiQuotes #-}
{-# LANGUAGE TemplateHaskell #-}
{-# LANGUAGE TypeFamilies #-}

import Control.Monad (join)
import Control.Monad.Logger (runNoLoggingT)
import Data.Maybe (isJust)
import Data.Text (Text, unpack)
import qualified Data.Text.Lazy.Encoding
import Data.Typeable (Typeable)
import Database.Persist.Sqlite
import Database.Persist.TH
import Network.Mail.Mime
import Text.Blaze.Html.Renderer.Utf8 (renderHtml)
import Text.Hamlet (shamlet)
import Text.Shakespeare.Text (stext)
import Yesod
import Yesod.Auth
import Yesod.Auth.Email

share
  [ mkPersist
      sqlSettings
      { mpsGeneric = False
      }
  , mkMigrate "migrateAll"
  ]
  [persistLowerCase|
User
    email Text
    password Text Maybe -- Password may not be set yet
    verkey Text Maybe -- Used for resetting passwords
    verified Bool
    UniqueUser email
    deriving Typeable
|]

data App =
  App SqlBackend

mkYesod
  "App"
  [parseRoutes|
/ HomeR GET
/auth AuthR Auth getAuth
|]

instance Yesod App
         -- Emails will include links, so be sure to include an approot so that
         -- the links are valid!
                                 where
  approot = ApprootStatic "http://localhost:3000"

instance RenderMessage App FormMessage where
  renderMessage _ _ = defaultFormMessage

-- Set up Persistent
instance YesodPersist App where
  type YesodPersistBackend App = SqlBackend
  runDB f = do
    App conn <- getYesod
    runSqlConn f conn

instance YesodAuth App where
  type AuthId App = UserId
  loginDest _ = HomeR
  logoutDest _ = HomeR
  authPlugins _ = [authEmail]
  -- Need to find the UserId for the given email address.
  getAuthId creds =
    runDB $
    do x <- insertBy $ User (credsIdent creds) Nothing Nothing False
       return $
         Just $
         case x of
           Left (Entity userid _) -> userid -- newly added user
           Right userid -> userid -- existing user
  authHttpManager = error "Email doesn't need an HTTP manager"

instance YesodAuthPersist App

-- Here's all of the email-specific code
instance YesodAuthEmail App where
  type AuthEmailId App = UserId
  afterPasswordRoute _ = HomeR
  addUnverified email verkey =
    runDB $ insert $ User email Nothing (Just verkey) False
  sendVerifyEmail email _ verurl
                          -- Print out to the console the verification email, for easier
                          -- debugging.
   = do
    liftIO $ putStrLn $ "Copy/ Paste this URL in your browser:" ++ unpack verurl
    -- Send email.
    liftIO $
      renderSendMail
        (emptyMail $ Address Nothing "noreply")
        { mailTo = [Address Nothing email]
        , mailHeaders = [("Subject", "Verify your email address")]
        , mailParts = [[textPart, htmlPart]]
        }
    where
      textPart =
        Part
        { partType = "text/plain; charset=utf-8"
        , partEncoding = None
        , partFilename = Nothing
        , partContent =
          Data.Text.Lazy.Encoding.encodeUtf8
            [stext|
                    Please confirm your email address by clicking on the link below.

                    #{verurl}

                    Thank you
                |]
        , partHeaders = []
        }
      htmlPart =
        Part
        { partType = "text/html; charset=utf-8"
        , partEncoding = None
        , partFilename = Nothing
        , partContent =
          renderHtml
            [shamlet|
                    <p>Please confirm your email address by clicking on the link below.
                    <p>
                        <a href=#{verurl}>#{verurl}
                    <p>Thank you
                |]
        , partHeaders = []
        }
  getVerifyKey = runDB . fmap (join . fmap userVerkey) . get
  setVerifyKey uid key = runDB $ update uid [UserVerkey =. Just key]
  verifyAccount uid =
    runDB $
    do mu <- get uid
       case mu of
         Nothing -> return Nothing
         Just u -> do
           update uid [UserVerified =. True]
           return $ Just uid
  getPassword = runDB . fmap (join . fmap userPassword) . get
  setPassword uid pass = runDB $ update uid [UserPassword =. Just pass]
  getEmailCreds email =
    runDB $
    do mu <- getBy $ UniqueUser email
       case mu of
         Nothing -> return Nothing
         Just (Entity uid u) ->
           return $
           Just
             EmailCreds
             { emailCredsId = uid
             , emailCredsAuthId = Just uid
             , emailCredsStatus = isJust $ userPassword u
             , emailCredsVerkey = userVerkey u
             , emailCredsEmail = email
             }
  getEmail = runDB . fmap (fmap userEmail) . get

getHomeR :: Handler Html
getHomeR = do
  maid <- maybeAuthId
  defaultLayout
    [whamlet|
            <p>Your current auth ID: #{show maid}
            $maybe _ <- maid
                <p>
                    <a href=@{AuthR LogoutR}>Logout
            $nothing
                <p>
                    <a href=@{AuthR LoginR}>Go to the login page
        |]

main :: IO ()
main =
  runNoLoggingT $
  withSqliteConn "email.db3" $
  \conn ->
     liftIO $
     do runSqlConn (runMigration migrateAll) conn
        warp 3000 $ App conn

安装stack runghc Main.hs后,它会以stack install yesod persistent-sqlite运行。

我的stackage LTS版本为lts-7.14,我正在运行GHC版本8.0.1.20161117

仍然得到相同的结果。

1 个答案:

答案 0 :(得分:1)

您必须启用CSRF中间件才能使其正常运行。我会相应地更新这本书的例子。错误信息显然不好,应该改进。要使代码正常工作,请在使用基础类型创建Yesod类型类的实例时添加此代码:

yesodMiddleware = defaultCsrfMiddleware . defaultYesodMiddleware