WEB 和 API 的多重设备身份验证

Question

问题陈述

我是 Rails 新手，正在按照 本教程 在 API 中设置基于 JWT 的身份验证，并处理使用 Devise 的现有 Web 应用程序。我目前的任务是向应用程序添加 JSON API。

这个 Rails 项目非常适合 Web 应用程序。然而，如果有 API，我会变得空虚

resource

，而我仍然有价值

params

。

---

环境

rails

(6.1.4)

devise

(4.8.0)

devise-jwt

（0.9.0）

warden

(1.2.9)

warden-jwt_auth

（0.6.0）

---

控制器与路线

app/controllers/api/v1/users/registrations_controller.rb

class Api::V1::Users::RegistrationsController < Devise::RegistrationsController
    respond_to :json
    skip_before_action :verify_authenticity_token
  
    # POST /resource
    def create
      super
    end
  
    private
    def respond_with(resource, _opts = {})
    if resource.persisted?
        render json: {
        status: { code: 200, message: "Signed up sucessfully." },
        data: UserSerializer.new(resource).serializable_hash[:data][:attributes]
        }
    else
        render json: {
        status: { message: "User couldn't be created successfully. #{resource.errors.full_messages.to_sentence}" }
        }, status: :unprocessable_entity
    end
    end
end

config/routes.rb

# For Web 
devise_for :users, controllers: { registrations: "registrations" }
# Authentication  
devise_scope :user do
    get "/login" => "devise/sessions#new", as: :login
    get "/logout" => "sessions#destroy", :as => :logout
    get "/signup" => "registrations#new", :as => :signup
    scope "my" do
      get "profile", to: "registrations#edit"
      put "profile/update", to: "registrations#update"
    end
end

authenticated :user do
    resources :dashboard, only: [:index] do
      collection do
        get :home
      end
    end
end

unauthenticated do
    as :user do
      root to: "devise/sessions#new", as: :unauthenticated_root
    end
end

# For API 
namespace :api do
    namespace :v1 do

      devise_for :users, path: '', path_names: {
        sign_in: 'login',
        sign_out: 'logout',
        registration: 'signup'
      },
      controllers: {
        sessions: 'api/v1/users/sessions',
        registrations: 'api/v1/users/registrations'
      }
    end
end

---

调试信息

app/controllers/api/v1/users/registrations_controller.rb

|    66:   private
|    67:     def respond_with(resource, _opts = {})
|    68:       byebug
| => 69:       if resource.persisted?
|    70:         render json: {
|    71:           status: { code: 200, message: "Signed up sucessfully." },
|    72:           data: UserSerializer.new(resource).serializable_hash[:data][:attributes]
|    73:         }
| (byebug) resource
| #<User 
    id: nil, 
    email: "", 
    first_name: "", 
    last_name: "", 
    role: "member", 
    created_at: nil, 
    updated_at: nil, 
    jti: nil
>

| (byebug) params
| #<ActionController::Parameters 
    {
        "email"=>"[email protected]", 
        "first_name"=>"John", 
        "last_name"=>"Wick", 
        "password"=>"password", 
        "controller"=>"api/v1/users/registrations", 
        "action"=>"create", 
        "registration"=>{
            "email"=>"[email protected]", 
            "first_name"=>"John", 
            "last_name"=>"Wick", 
            "password"=>"password"
        }
    } permitted: false>

---

• 请求

curl -X POST \
http://127.0.0.1:3000/api/v1/signup \
-H 'Cache-Control: no-cache' \
-H 'Content-Type: application/json' \
-d '{
    "email": "[email protected]",
    "first_name": "John",
    "last_name": "Wick",
    "password": "password"
}'

• 回应

{
    "status": {
        "message": "User couldn't be created successfully. Email can't be blank and Password can't be blank"
    }
}

Answer 1

{ “地位”： { "message": "用户无法创建成功。邮箱不能为空，密码不能为空" } }