ruby-on-rails - 设计和认证

Question

我一整天都在尝试通过简单的 get 来进行身份验证。

class ApiController < ApplicationController
  def signin
    warden.authenticate(params[:email], params[:password])
    render :json => current_user.to_json
  end
end

当我用类似 http://localhost:3000/api/signin?email=theemailaddress&password=thepassword 的东西点击它时

我收到消息:“无效策略 theemailaddress”，堆栈如下:

warden (1.0.4) lib/warden/proxy.rb:323:in `_fetch_strategy'
warden (1.0.4) lib/warden/proxy.rb:307:in `block in _run_strategies_for'
warden (1.0.4) lib/warden/proxy.rb:306:in `each'
warden (1.0.4) lib/warden/proxy.rb:306:in `_run_strategies_for'
warden (1.0.4) lib/warden/proxy.rb:279:in `_perform_authentication'
warden (1.0.4) lib/warden/proxy.rb:90:in `authenticate'
actionpack (3.0.7) lib/action_controller/metal/implicit_render.rb:5:in `send_action'

我需要什么才能让这样的事情发生？

Answer 1

您需要定义自定义守望者策略并检查请求 header 。看什么I did here .