不能大規模指派保護的屬性：令牌

Question

我們收到此錯誤

ActiveModel::MassAssignmentSecurity::Error in AuthenticationsController#create 
Can't mass-assign protected attributes: token 

在此之前，我們有令牌期滿，阻止我們的Web應用程序發佈，所以爲了解決這個問題，我們正在努力每次用戶使用提供者進行身份驗證時更新令牌和祕密屬性。

下面的代碼：

class AuthenticationsController < InheritedResources::Base 
def create 
    omniauth = request.env['omniauth.auth'] 
    authentication = Authentication.find_by_provider_and_uid(omniauth['provider'], omniauth['uid']) 
    if authentication 
    user = User.find(authentication.user_id) 
    user.update_attributes(:token => omniauth["credentials"]["token"]) 
    user.update_attributes(:secret => omniauth["credentials"]["secret"]) 
    flash[:success] = "Signed in successfully" 
    sign_in_and_redirect user 
    elsif current_user 
     #rest of the code here# 

這裏的架構

create_table "authentications", :force => true do |t| 
    t.integer "user_id" 
    t.string "provider" 
    t.string "uid" 
    t.datetime "created_at", :null => false 
    t.datetime "updated_at", :null => false 
    t.string "secret" 
    t.string "token" 
    end 

    create_table "users", :force => true do |t| 
    t.string "name" 
    t.string "email" 
    t.timestamp "created_at",       :null => false 
    t.timestamp "updated_at",       :null => false 
    t.string "password_digest" 
    t.string "remember_token" 
    end 

這裏的身份驗證模式

class Authentication < ActiveRecord::Base 
    belongs_to :user 
    attr_accessible :provider, :uid, :token, :secret 
end 

Answer 1

你試圖分配令牌和祕密用戶模型VS做它用於身份驗證模型。

authentication.update_attributes(:token => omniauth["credentials"]["token"], :secret => omniauth["credentials"]["secret"]) 

應該工作。