我嘗試使用Rails API發佈json文件。我有嘗試解決，但不能運行這是我的問題：無法驗證CSRF令牌的真實性！使用POST的RAILS API

Sever的日誌：

Started POST "/students/" for 127.0.0.1 at 2016-09-17 17:45:33 +0700 
    ActiveRecord::SchemaMigration Load (0.0ms) SELECT "schema_migrations".* FROM "schema_migrations" 
Processing by Devise::RegistrationsController#create as */* 
    Parameters: {"student"=>{"name"=>"Duong", "score"=>"10"}, "registration"=>{"student"=>{"name"=>"Duong", "score"=>"10"}}} 
Can't verify CSRF token authenticity. 
Unpermitted parameters: name, score 
    (0.0ms) begin transaction 
    (0.0ms) rollback transaction 
    Rendering C:/RailsInstaller/Ruby2.2.0/lib/ruby/gems/2.2.0/gems/devise-4.2.0/app/views/devise/registrations/new.html.erb within layouts/application 
    Rendered C:/RailsInstaller/Ruby2.2.0/lib/ruby/gems/2.2.0/gems/devise-4.2.0/app/views/devise/shared/_links.html.erb (10.0ms) 
    Rendered C:/RailsInstaller/Ruby2.2.0/lib/ruby/gems/2.2.0/gems/devise-4.2.0/app/views/devise/registrations/new.html.erb within layouts/application (60.0ms) 
Completed 500 Internal Server Error in 442ms (ActiveRecord: 0.0ms)

Student.rb

這是我的學生模型

class Student < ApplicationRecord 
    # Include default devise modules. Others available are: 
    # :confirmable, :lockable, :timeoutable and :omniauthable 
    devise :database_authenticatable, :registerable, 
     :recoverable, :rememberable, :trackable, :validatable 
end

Application_controller

我已修復excetion => null_se裂變

class ApplicationController < ActionController::Base 

    protect_from_forgery with: :null_session 

end

Student_controller

class Api::StudentsController < ApplicationController 
    def index 
    students = Student.all 
    render json: students, status: 200 
    end 
    def show 
    response_with Student.find(params[:id]) 
    end 
    def create 
    student = Student.new(student_params) 
    #if you save successfully than response with json data and status code 201 
    if student.save 
     render json: user, status: 201, location: student 
    else 
     render json: {error: user.errors}, status: 422 
    end 
    end 
    private 
    def student_params 
    params.require(:student).permit(:name, :score) 
    end 
end

router.rb

Rails.application.routes.draw do 
    devise_for :students 
    namespace :api, path: '/',constraints: {subdomain: 'api'} do 
    resources :students, only: [:index, :show, :create] 
    end 
end

但是，當我發個帖子api.1312100.com/students/

{"student": {"name": "Duong", "score": "10"}}

有錯誤：

500 internal server error

來源

2016-09-17 Bùi Văn Dương

你有 <％= csrf_meta_tags％>在您的？ – luissimo

哪裏在？ –

我不能多說CSRF錯誤。但你必須解決'未經許可的參數：名稱，分數'錯誤。嘗試白名單這些參數，即名稱和分數 – Sajan

在Api::StudentsController附加：

skip_before_action :verify_authenticity_token

來源

2016-09-17 12:51:17 Tejas

很多，但仍有：'未經許可的參數：名稱，得分' –

你調用''學生/''使用Post方法，對於API你可以使用你的API調用' '/ api/students /''使用post方法 – Tejas

非常感謝！ –

冰壺：

curl -i -H "Accept: application/json" -H "Content-type:application/json" -X POST -d '{"student": {"name": "Duong", "score": "10"}}' http://api.1312100.com/students/

應用控制器

class ApplicationController < ActionController::Base 
    protect_from_forgery with: :exception, if: Proc.new { |c| c.request.format != 'application/json' } 
    protect_from_forgery with: :null_session, if: Proc.new { |c| c.request.format == 'application/json' } 
end

來源

2016-09-17 12:24:52 7urkm3n

無法驗證CSRF令牌的真實性！使用POST的RAILS API

Sever的日誌：

Student.rb

Application_controller

Student_controller

router.rb

回答

相關問題