0

我正在 Rails 5.0.0 上启动一个新应用程序并尝试使用 bcrypt。我已经按照 bcrypt repo 上的说明进行操作，但是我得到的时候缺少一些东西ActiveModel::ForbiddenAttributesError

这是user.rb：

require 'bcrypt'

class User < ActiveRecord::Base
 include BCrypt

 def password
    @password ||= Password.new(password_hash)
 end

 def password=(new_password)
    @password = Password.create(new_password)
    self.password_hash = @password
 end

 has_many :trips
end

迁移详情：

class CreateUsers < ActiveRecord::Migration[5.0]
  def change
    create_table :users do |t|
        t.string  :first_name,    null: false
        t.string  :last_name,     null: false
        t.string  :email,         null: false
        t.string  :password_hash, null: false

        t.timestamps
    end
  end
end

users_controller.rb：

class UsersController < ApplicationController

  def create
    user = User.new(params[:user])
    user.password = params[:password]
    user.save!
  end

  def new
   @user = User.new
  end

  private

  def user_params
   params.require(:user).permit(:first_name, :last_name, :email, :password, :password_confirmation)
  end
end

这是堆栈跟踪的开头：

Started POST "/users" for ::1 at 2016-09-19 16:44:20 -0700
Processing by UsersController#create as HTML
  Parameters: {"utf8"=>"✓",     "authenticity_token"=>"GWJXon2Y914Y7m2NGPAj8wz+9O6EBO1OnrIcBBRis/ATMkaGMCRh6uE4PAxJOIE7mVrornt5PqOvxBjoOBo9ag==", "user"=>{"first_name"=>"test", "last_name"=>"test2", "email"=>"123@gmail.com", "password"=>"[FILTERED]", "password_confirmation"=>"[FILTERED]"}, "commit"=>"Create User"}
Completed 500 Internal Server Error in 1ms (ActiveRecord: 0.0ms)


ActiveModel::ForbiddenAttributesError (ActiveModel::ForbiddenAttributesError):

app/controllers/users_controller.rb:4:in `create'
  Rendering /Users/.rvm/gems/ruby-2.3.0/gems/actionpack-5.0.0.1/lib/action_dispatch/middleware/templates/rescues/diagnostics.html.erb within rescues/layout
4

1 回答 1

0

在我看来，您收到错误的原因是因为这条线

user = User.new(params[:user])

您正在尝试传递 params :user。在你的user_params方法中，

params.require(:user).permit(:first_name, :last_name, :email, :password, :password_confirmation)

:user不是允许的参数之一。

你需要做的就是改变

user = User.new(params[:user])

到

user = User.new(user_params)

您需要调用该user_params函数并将其作为User.new.

于 2016-09-19T23:54:46.143 回答