Ruby on Rails 中的密码恢复答案

【问题标题】：Password recovery in Ruby on RailsRuby on Rails 中的密码恢复
【发布时间】：2012-11-08 14:17:25
【问题描述】：

您好，当我尝试重设密码时出现此错误：

PasswordResetsController#create 中的参数错误

参数数量错误（1 比 0）

app/models/user.rb:48:in create_remember_token app/models/user.rb:40:insend_password_reset app/controllers/password_resets_controller.rb:7:in `create'

class PasswordResetsController < ApplicationController
  def new
  end

  def create
    user = User.find_by_email(params[:email])
    user.send_password_reset if user
    redirect_to root_url
  end

  def edit
    @user = User.find_by_password_reset_token!(params[:id])
  end

  def update
    @user = User.find_by_password_reset_token!(params[:id])
    if @user.password_reset_sent_at < 2.hours.ago
      redirect_to new_password_reset_path, :alert => "Password &crarr; 
        reset has expired."
    elsif @user.update_attributes(params[:user])
      redirect_to root_url, :notice => "Password has been reset."
    else
      render :edit
    end
end
end



class User < ActiveRecord::Base
  attr_accessible :email, :lname, :name, :password, :password_confirmation
  has_secure_password
  before_save { |user| user.email = email.downcase }
  before_save :create_remember_token

  validates :name, presence: true, length: { maximum: 50 }
  validates :lname, presence: true, length: { maximum: 50 }
  VALID_EMAIL_REGEX = /\A[\w+\-.]+@[a-z\d\-.]+\.[a-z]+\z/i
  validates :email, presence: true, format: { with: VALID_EMAIL_REGEX },
                    uniqueness: { case_sensitive: false }
  validates :password, presence: true, :on => :create
  validates :password, length: { minimum: 6 }, :allow_blank => true
  validates :password_confirmation, presence: true, :on => :create



  def send_password_reset
    create_remember_token(:password_reset_token)
    self.password_reset_sent_at = Time.zone.now
    save!
    UserMailer.password_reset(self).deliver
  end

  private

    def create_remember_token
      self.remember_token = SecureRandom.urlsafe_base64
    end
end

有人知道为什么吗？

【问题讨论】：

标签： ruby-on-rails password-recovery

【解决方案1】：

当 create_remember_token 的方法定义不接受任何参数时，您正在调用 create_remember_token(:password_reset_token)。

换句话说，改变

create_remember_token(:password_reset_token)

到

create_remember_token

在您的 send_password_reset 方法中

【讨论】：

现在我有模板错误，因为crete_remember_token 是私有方法password_reset.text.erb <%= edit_password_reset_url(@user.create_remember_token) %>
为什么不让它成为一个公共方法？
好的，我公开了，现在我有undefined method find_by_create_remember_token！'对于#<0x007fca97926210>

【解决方案2】：

在railscasts找到解决方案

添加到 before_save remember_token 并更改了 create_remember_token

不知道对不对？但它有效

    class User < ActiveRecord::Base
  attr_accessible :email, :lname, :name, :password, :password_confirmation
  has_secure_password

  before_save { |user| user.email = email.downcase }
  before_save { create_remember_token(:remember_token) }

  validates :name, presence: true, length: { maximum: 50 }
  validates :lname, presence: true, length: { maximum: 50 }
  VALID_EMAIL_REGEX = /\A[\w+\-.]+@[a-z\d\-.]+\.[a-z]+\z/i
  validates :email, presence: true, format: { with: VALID_EMAIL_REGEX },
                    uniqueness: { case_sensitive: false }
  validates :password, presence: true, :on => :create
  validates :password, length: { minimum: 6 }, :allow_blank => true
  validates :password_confirmation, presence: true, :on => :create

  def send_password_reset
    create_remember_token(:password_reset_token)
    self.password_reset_sent_at = Time.zone.now
    save!
    UserMailer.password_reset(self).deliver
  end



    def create_remember_token(column)
     begin
      self[column] = SecureRandom.urlsafe_base64
     end while User.exists?(column => self[column])
    end
end

【讨论】：