ruby-on-rails - Rails - 如何禁用对本地主机 :3000/users/sign_in on Devise gem? 的访问

Question

我在 route.rb 上这样设置:

devise_scope :user do
  get "/login" => "devise/sessions#new"
end

现在我可以在 localhost:3000/login 上输入并在 sign_in 上输入。

但如果我在 localhost:3000/users/sign_in 上输入仍然有效...如何禁用它？

Answer 1

来自设计documentation :

Note that you can skip all sessions routes and define only your own using the skip option as below:

  devise_for :users, :skip => [:sessions]
  as :user do
    get 'signin' => 'devise/sessions#new', :as => :new_user_session
    post 'signin' => 'devise/sessions#create', :as => :user_session
    delete 'signout' => 'devise/sessions#destroy', :as => :destroy_user_session
  end

This way :authenticate_user! and other helpers will be redirecting the user to the proper custom pages you defined.