如何使用失败的尝试次数使设计可锁定 [英] How to make Devise lockable with number of failed attempts

问题描述

使用 Devise 2.1.2 和 Rails 3.2.6

Using Devise 2.1.2 and Rails 3.2.6

我正在做这个问答，以防其他人遇到这个问题，因为我发现它的文档很少而且零散.

I'm doing this Q&A just in case others run into this problem because I found little and scattered documentation for it.

如果您尝试将 Devise 设置为可锁定，则可能会发生此错误.

This error may occur if you try to set up Devise as lockable.

undefined local variable or method `locked_at' for [someClass]

这意味着您的模型没有合适的属性.

It means your model doesn't have the appropriate attributes.

先决条件:在 config/initializers/devise.rb 中设置以下内容

Prerequisites: Set up the following in config/initializers/devise.rb

# ==> Configuration for :lockable
# Defines which strategy will be used to lock an account.
# :failed_attempts = Locks an account after a number of failed attempts to sign in.
# :none            = No lock strategy. You should handle locking by yourself.
config.lock_strategy = :failed_attempts

# Defines which key will be used when locking and unlocking an account
config.unlock_keys = [ :email ]

# Defines which strategy will be used to unlock an account.
# :email = Sends an unlock link to the user email
# :time  = Re-enables login after a certain amount of time (see :unlock_in below)
# :both  = Enables both strategies
# :none  = No unlock strategy. You should handle unlocking by yourself.
config.unlock_strategy = :email

# Number of authentication tries before locking an account if lock_strategy
# is failed attempts.
config.maximum_attempts = 20

# Time interval to unlock the account if :time is enabled as unlock_strategy.
# config.unlock_in = 1.hour

设置您的模型以包含 devise :lockable:

Set up your model to include devise :lockable:

class Example < ActiveRecord::Base
  # Include default devise modules. Others available are:
  # :token_authenticatable, :confirmable,
  # :lockable, :timeoutable and :omniauthable
  devise :database_authenticatable, :registerable,
         :recoverable, :rememberable, :trackable, :validatable, :lockable

推荐答案

只需在设计迁移中取消注释此字符串:

Simply uncomment this strings in devise migration:

  ## Lockable
  # t.integer  :failed_attempts, :default => 0 # Only if lock strategy is :failed_attempts
  # t.string   :unlock_token # Only if unlock strategy is :email or :both
  # t.datetime :locked_at

这篇关于如何使用失败的尝试次数使设计可锁定的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！