ruby-on-rails - 设计确认 token 无效

Question

我向应用程序中的表添加了新的迁移，然后进行迁移。由于它有错误，我放弃并迁移了它。当我注册一个用户并尝试使用电子邮件(设计，可确认)确认它时，它只是不会确认。它说确认 token 无效。我已尝试重新启动服务器。再次掉落和迁移，据我所知一切皆有可能。我正在使用 Rails 3.2.9 和 Ruby 1.9.3。设计版本是3.1.0。 Devise 也包含在我添加的其他 gem 中，例如 Rails-messaging 和 active-admin。

Started POST "/users/confirmation" for 127.0.0.1 at 2013-09-16 19:42:47 +0530
Processing by Devise::ConfirmationsController#create as HTML
  Parameters: {"utf8"=>"✓", "authenticity_token"=>"4lMxdlsMqRCJB1doxt/hTCQhUPvAoGPiSbr9wQA/ZAQ=", "user"=>{"email"=>"<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="bacac8d594dbc8dbccd3d4defaddd7dbd3d694d9d5d7" rel="noreferrer noopener nofollow">[email protected]</a>"}, "commit"=>"Resend confirmation instructions"}

User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."unconfirmed_email" = '<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="a1d1d3ce8fc0d3c0d7c8cfc5e1c6ccc0c8cd8fc2cecc" rel="noreferrer noopener nofollow">[email protected]</a>' LIMIT 1

User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."email" = '<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="2757554809465546514e494367404a464e4b0944484a" rel="noreferrer noopener nofollow">[email protected]</a>' LIMIT 1
  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."confirmation_token" = 'cc47150f51ec476aa40ea1d546e27c0dafc37ffc8bb82272a9f2377c863daed1' LIMIT 1
   (0.1ms)  begin transaction
   (0.3ms)  UPDATE "users" SET "confirmation_token"='cc47150f51ec476aa40ea1d546e27c0dafc37ffc8bb82272a9f2377c863daed1', "confirmation_sent_at" = '2013-09-16 14:12:47.174313', "updated_at" = '2013-09-16 14:12:47.175384' WHERE "users"."id" = 1
   (175.3ms)  commit transaction
  Rendered devise/mailer/confirmation_instructions.html.erb (0.6ms)

Sent mail to <a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="fd8d8f92d39c8f9c8b949399bd9a909c9491d39e9290" rel="noreferrer noopener nofollow">[email protected]</a> (5099ms)
Date: Mon, 16 Sep 2013 19:42:47 +0530
From: <a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="a5d5c9c0c4d6c088c6cdc4cbc2c088c8c088c4d188c6cacbc3ccc288cccbccd1ccc4c9ccdfc0d7d688c1c0d3ccd6c0e5c0ddc4c8d5c9c08bc6cac8" rel="noreferrer noopener nofollow">[email protected]</a>
Reply-To: <a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="77071b121604125a141f161910125a1a125a16035a141819111e105a1e191e031e161b1e0d1205045a1312011e041237120f161a071b125914181a" rel="noreferrer noopener nofollow">[email protected]</a>
To: <a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="4737352869263526312e292307202a262e2b6924282a" rel="noreferrer noopener nofollow">[email protected]</a>
Message-ID: <<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="d1e4e3e2e6e0e0b5b7e7b3b3e4e78ee2b0e1e3e8e7e4e6b7e9e9e3e9e3b391b0a3b0a7b8bfb5fc8781929493e5e7979693ffbcb0b8bd" rel="noreferrer noopener nofollow">[email protected]</a>>
Subject: Confirmation instructions
Mime-Version: 1.0
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

<p>Welcome <a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="2f5f5d40014e5d4e5946414b6f48424e4643014c4042" rel="noreferrer noopener nofollow">[email protected]</a>!</p>

<p>You can confirm your account email through the link below:</p>

<p><a href="http://localhost:3000/users/confirmation?confirmation_token=cc47150f51ec476aa40ea1d546e27c0dafc37ffc8bb82272a9f2377c863daed1">Confirm my account</a></p>

Redirected to http://localhost:3000/users/sign_in
Completed 302 Found in 5387ms (ActiveRecord: 0.0ms)

Answer 1

在这里添加我的经验，以防对其他人有所帮助。正如 BillyMFH 所说，设备 3.1 的升级改变了代币的创建方式。博文中信息量很大，本回答中的问题解决方案是临时解决方案。

如果 config.allow_insecure_token_lookup 设置为 false(并且一旦弃用此选项)，我的解决方案是更新 Devise 用于发送包含 token 的链接的电子邮件 View 。

旧的 Devise 电子邮件 View 包含如下行:

<p><%= link_to 'Change my password', edit_password_url(@resource, :reset_password_token => @resource.reset_password_token) %></p>

这使用存储在数据库中的旧 token 。现在您只需执行以下操作:

<p><%= link_to 'Change my password', edit_password_url(@resource, :reset_password_token => @token) %></p>

只需用新的实例变量 @token 替换资源中的旧 token

博客文章中指向此更改的链接在此处突出显示:Devise email view token change