How to make Devise lockable with number of failed

2019-06-26 23:19发布

使用设计2.1.2和Rails 3.2.6

我这样做Q&A,以防万一别人遇到这个问题,因为我发现小而分散的文档了。

如果您尝试设置可能会出现此错误Devise为可锁定。

undefined local variable or method `locked_at' for [someClass]

这意味着你的模型没有相应的属性。

先决条件:设置在配置/初始化/ devise.rb以下

# ==> Configuration for :lockable
# Defines which strategy will be used to lock an account.
# :failed_attempts = Locks an account after a number of failed attempts to sign in.
# :none            = No lock strategy. You should handle locking by yourself.
config.lock_strategy = :failed_attempts

# Defines which key will be used when locking and unlocking an account
config.unlock_keys = [ :email ]

# Defines which strategy will be used to unlock an account.
# :email = Sends an unlock link to the user email
# :time  = Re-enables login after a certain amount of time (see :unlock_in below)
# :both  = Enables both strategies
# :none  = No unlock strategy. You should handle unlocking by yourself.
config.unlock_strategy = :email

# Number of authentication tries before locking an account if lock_strategy
# is failed attempts.
config.maximum_attempts = 20

# Time interval to unlock the account if :time is enabled as unlock_strategy.
# config.unlock_in = 1.hour

建立你的模型,包括devise :lockable

class Example < ActiveRecord::Base
  # Include default devise modules. Others available are:
  # :token_authenticatable, :confirmable,
  # :lockable, :timeoutable and :omniauthable
  devise :database_authenticatable, :registerable,
         :recoverable, :rememberable, :trackable, :validatable, :lockable

Answer 1:

只需取消其注释中色器件迁移这个字符串:

  ## Lockable
  # t.integer  :failed_attempts, :default => 0 # Only if lock strategy is :failed_attempts
  # t.string   :unlock_token # Only if unlock strategy is :email or :both
  # t.datetime :locked_at


Answer 2:

Devise需要在模型中这三个属性。 因此,产生以下迁移并运行它。

class AddLockableToExamples < ActiveRecord::Migration
  def change
    add_column :examples, :failed_attempts, :integer, default: 0
    add_column :examples, :unlock_token, :string # Only if unlock strategy is :email or :both
    add_column :examples, :locked_at, :datetime
  end
end

希望这节省了谷歌福别人小时。



文章来源: How to make Devise lockable with number of failed attempts