session - Rails : Devise with config.session_store :disabled -


i building restful api stateless rails 3 , gem devise.

since don't want store session, have disabled them defining in config/initializers/session_store.rb :

myapp::application.config.session_store :disabled

all warden strategies (http basic auth, token auth) don't store information (stored? returns false).

i using in controllers helper authenticate_user! before_filter. obtain following error during authentication:

nomethoderror (undefined method `[]' nil:nilclass) : warden (1.2.1) lib/warden/session_serializer.rb:32:in `fetch' warden (1.2.1) lib/warden/proxy.rb:212:in `user' warden (1.2.1) lib/warden/proxy.rb:318:in `_perform_authentication'     warden (1.2.1) lib/warden/proxy.rb:127:in `authenticate!' devise (2.2.3) lib/devise/controllers/helpers.rb:48:in `authenticate_user!'

the code in session_serializer @ line 32 following method:

def fetch(scope)   key = session[key_for(scope)] # crashes here   return nil unless key    method_name = "#{scope}_deserialize"   user = respond_to?(method_name) ? send(method_name, key) : deserialize(key)   delete(scope) unless user   user end

it crashes because session (ie @env['rack.sessions']) equals nil (session_store indeed disabled). default call, strategies have not been called yet.

since don't want monkey patch, looking way achieve session_store disabled.

thanks

if open dropping devise, i'd suggest authenticating token. token authentication can set-up in rails , validate requests passing token each request header.

authorization : token token="xxx"

i've tacked on default rails api token authentication code if interested.

class applicationcontroller < actioncontroller::base   protect_from_forgery     private   def restrict_access     authenticate_with_http_token |token, options|       user.exists?(authentication_token: token)     end   end    private   def api_user     authenticate_with_http_token |token, options|       user.find_by_authentication_token(token)     end   end end  class userscontroller < applicationcontroller   before_filter :restrict_access, :except => ['create']    def create     user=user.create(:email=>params[:email],                      :password=>params[:password],                      :password_confirmation=>params[:password_confirmation])    end end  class tokenscontroller < applicationcontroller   respond_to :json    def create   user = user.authenticate(params[:email],params[:password])   if user     render :json => user.find_by_email(params[:email])   else     render :json => "#{params[:email]} not authorized.", :status => 401   end end  class user < activerecord::base    attr_accessible :email, :authentication_token   attr_accessor :password, :password_confirmation    def self.authenticate(email, password)     user= find_by_email(email)     user && user.password_hash == bcrypt::engine.hash_secret(password, user.password_salt) ? user : nil   end   private   def generate_authentication_token     begin       self.authentication_token = securerandom.hex     end while self.class.exists?(authentication_token: authentication_token)     self.last_sign_in_at=datetime.now     self.sign_in_count=self.sign_in_count+1   end    private   def encrypt_password     if password.present?       self.password_salt = bcrypt::engine.generate_salt       self.password_hash = bcrypt::engine.hash_secret(password,password_salt)     end   end end

Comments

Post a Comment

Popular posts from this blog

jquery - How can I dynamically add a browser tab? -

since using iframes house external pages are, accounts "not preferred method" , disallowed sites (flickr, one), want dynamically generate browser tabs. e.g., when user submits form, want dynamically generate tab on browser in response submitted. e.g., might want add new tab url like: http://www.bigsurgarrapata.com/contact how in jquery? you want form target attribute action attribute. http://www.w3schools.com/tags/att_form_target.asp browsers have ultimate control on result of target attribute open new tab value of _blank. <form action="contact_submit.php" target="_blank" method="post">
Read more

keyboard - C++ GetAsyncKeyState alternative -

i using windows.h library's getasynckeystate function define key pushed on keyboard . here program returns int value of pushed key example. #include <iostream> #include <windows.h> using namespace std; int main (){ char i; for(i=8;i<190;i++){ if(getasynckeystate(i)== -32767){ cout<<int (i)<<endl; } } return 0; } but trying make opengl simple game , function appeared slow . there function not need cycle 180 times , if statement . thanks you're trying make opengl game, you're going use glfw. if that's case can away using glfwgetkey() such: if (glfwgetkey(glfw_key_up) == glfw_press) {...} if (glfwgetkey(glfw_key_down) == glfw_press) {...} that method nicely explained in tutorial 6 opengl-tutorial.org . should start first tutorial of beginners tutorials , later intermediate tutorials . if you're going make win32 window can listen wm_keydown or wm_keyup messages , virtua...
Read more

android - java.net.UnknownHostException(Unable to resolve host “URL”: No address associated with hostname) -

i developing app testing asp.net webservice in android.for simple webservice adding 2 numbers used.where numbers passed parameters.the result in dialogue.the webserver works in local. when application runs following result exception.i provided internet permission in manifest. java.net.unknownhostexception(unable resolve host “ http://url.com/ ”: no address associated hostname) my code given below main activity public static string rslt=""; /** called when activity first created. */ @override public void oncreate(bundle savedinstancestate) { super.oncreate(savedinstancestate); setcontentview(r.layout.activity_main); button b1=(button)findviewbyid(r.id.button1); final alertdialog ad=new alertdialog.builder(this).create(); b1.setonclicklistener(new onclicklistener() { @override public void onclick(view arg0) { // todo auto-generated method stub try { ...
Read more