所有用户的 Salt 字段为零 [英] Salt field is nil for all users

问题描述

(ruby 1.9.2, rails 3.1) 遵循 Michael Hartl 的教程.花了一天多的时间试图找出问题，重新阅读本章，浏览SO，到目前为止没有解决方案.当我创建用户时，它们都是在 DB 的 salt 字段中使用 nil 创建的.像这样:

(ruby 1.9.2, rails 3.1) Following Michael Hartl's tutorial. Spent more than a day trying to figure out the issue, re-read the chapter, browsed SO, no solution so far. When I create users they are all created with nil in salt field in DB. Like that:

=> #<User id: 19, name: "John Doe Fourth", email: "[e-mail]", created_at: "2011-12-10 16:36:09", updated_at: "2011-
12-10 16:36:09", encrypted_password: "5534438b422e928e80479756608b87d33881b5196a28be230c2...", salt: nil>

这(恕我直言)是我尝试登录时收到无效的用户/电子邮件组合"的原因.

This (imho) the reason I get "invalid user/email combination" when I try to login.

任何指针将不胜感激.

这里是您可能需要的信息，希望不会太多.

Here is the info that you might need, hope it's not too much.

users_controller.rb

def new
    @user = User.new
    @title = "Sign up"
  end

  def create
    @user = User.new(params[:user])
    if @user.save
            sign_in @user
            flash[:success] = "Welcome to the Blue Bird Microblog!"
            redirect_to @user
      else
      @title = "Sign up"
      render 'new'
    end
  end

user.rb

require 'digest' class User < ActiveRecord::Base

attr_accessible :name, :email, :password, :password_confirmation
attr_accessor :password, :salt

 before_save :encrypt_password

 def has_password?(submitted_password)
    encrypted_password == encrypt(submitted_password)   
 end

 def self.authenticate(email, submitted_password)
     user = find_by_email(email)
     puts user.inspect
     return nil  if user.nil?
     return user if user.has_password?(submitted_password)   
 end

  def self.authenticate_with_salt(id, cookie_salt)
     user = find_by_id(id)
     (user && user.salt == cookie_salt) ? user : nil   
  end

 private

 def encrypt_password 
       self.salt = make_salt unless has_password?(password)
       self.encrypted_password = encrypt(password) 
     end

  def encrypt(string)
       secure_hash("#{salt}--#{string}")
     end

     def make_salt
       secure_hash("#{Time.now.utc}--#{password}")
     end

     def secure_hash(string)
       Digest::SHA2.hexdigest(string)
     end

推荐答案

您需要删除

attr_accessor :salt

attr_accessor 是实例变量，因为 salt 在数据库中；你需要摆脱它的存取器线.

attr_accessor is for instance variables, and since salt is in the database; you need to get rid of that accessor line for it.

这篇关于所有用户的 Salt 字段为零的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！