我正在尝试使用 devise和 devise_token_auth用于在我的应用中进行身份验证。

我正在重写注册 Controller ，如下所示:

module Overrides
  class RegistrationsController < DeviseTokenAuth::RegistrationsController

    ## I am doing these to go around the `Can't verify CSRF token authenticity` Error.
    # skip_before_action :valid_authenticity_token, only: :create
    protect_from_forgery :except => :create


    def sign_up_params
      params.require(:user).permit(:email, :password, :password_confirmation, :name, :nickname)
    end

  end
end

我还使用 swagger docs api 发送我的参数如下:

swagger_api :create do
  summary "Sign up a new user"
  param :form, "user[email]", :string, :required, "Email of the new user"
  param :form, "user[password]", :string, :required, "Password of the new user"
  param :form, "user[password_confirmation]", :string, :required, "Retype Password of the new user"
  param :form, "user[name]", :string, :optional, "Name of the new user"
  param :form, "user[nickname]", :string, :optional, "Nick-Name of the new user"
  response :not_acceptable
  response :success
end

这会在我的终端上产生如下参数:

Processing by Overrides::RegistrationsController#create as JSON
  Parameters: {"user"=>{"email"=>"sadf@fsd.fgs", "password"=>"[FILTERED]", "password_confirmation"=>"[FILTERED]", "name"=>"rgefsrfgrfdfsd", "nickname"=>"rgefsrfgrfdfsd"}}

但是，这个请求从来没有达到我的模型，(没有创建新用户的话题)。但是，在页面上，我遇到以下错误:

并且 Completed 403 Forbidden in 93ms (Views: 0.3ms | ActiveRecord: 0.0ms) 在终端上。

我该如何解决这个问题？谢谢

更新:

#route.rb: 
namespace :api do
    namespace :v1 do


      mount_devise_token_auth_for 'User', at: 'auth', controllers: {
                                          confirmations:      'overrides/confirmations',
                                          passwords:          'overrides/passwords',
                                          registrations:      'overrides/registrations',
                                          sessions:           'overrides/sessions',
                                        }
      ...

    end
  end


#Countroller:
class ApiController < ApplicationController
  include DeviseTokenAuth::Concerns::SetUserByToken
  protect_from_forgery with: :null_session
end

class ApplicationController < ActionController::Base
  protect_from_forgery with: :exception
  protect_from_forgery with: :null_session, if: Proc.new { |c| c.request.format == 'application/json' }
end

#user.rb:
class User < ActiveRecord::Base
  # Include default devise modules.
  devise :database_authenticatable, :registerable,
          :recoverable, :rememberable, :trackable, :validatable,
          :confirmable, :omniauthable
  include DeviseTokenAuth::Concerns::User

最佳答案

confirm_success_url 参数用于支持多个客户端应用程序。如果不需要此参数，则 API 无法知道在电子邮件确认后重定向到哪里。

但是对于您的 devise_token_auth，您的 application_controller.rb 应该是:

  protect_from_forgery with: :null_session
  include DeviseTokenAuth::Concerns::SetUserByToken

在你的routes.rb

mount_devise_token_auth_for 'User', at: 'auth'

删除 user.rb 中的 confirmable 标签，如下所示

 devise :database_authenticatable, :recoverable,
         :trackable, :validatable, :registerable,
         :omniauthable

  include DeviseTokenAuth::Concerns::User

关于ruby-on-rails - 测试 Rails API 以使用 devise 进行注册。错误 : "Missing ' confirm_success_url' parameter.“，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/35284854/