Rails: ActiveModel::ForbiddenAttributesError

问题:

I'm trying to use OmniAuth to integrate Facebook with my website, and I think I'm getting a few errors here. Right now when I click "Sign in with Facebook" it does bring me to Facebook, but soon as I sign in I get an error saying ActiveModel::ForbiddenAttributesError. Also, I think there might be an issue my routes as well but I'm not sure.

Also, I followed this RailsCasts tutorial: http://railscasts.com/episodes/360-facebook-authentication?autoplay=true

Edit: The error is on this line here, where(auth.slice(:provider, :uid)).first_or_initialize.tap do |user|

omniauth.rb

OmniAuth.config.logger = Rails.logger  Rails.application.config.middleware.use OmniAuth::Builder do   provider :facebook, ENV['FACEBOOK_APP_ID'], ENV['FACEBOOK_SECRET'] end 

user.rb

class User < ActiveRecord::Base   def self.from_omniauth(auth)     where(auth.slice(:provider, :uid)).first_or_initialize.tap do |user|       user.provider = auth.provider       user.uid = auth.uid       user.name = auth.info.name       user.oauth_token = auth.credentials.token       user.oauth_expires_at = Time.at(auth.credentials.expires_at)       user.save!     end   end end 

routes.rb

Rails.application.routes.draw do    get 'auth/:provider/callback', to: 'sessions#create'   get 'auth/failure',  ('/posts/index')   get 'signout', to: 'sessions#destroy', as: 'signout'    resources :welcome   resources :posts    root "welcome#index" 

sessions_controller.rb

class SessionsController < ApplicationController   def create     user = User.from_omniauth(env["omniauth.auth"])     session[:user_id] = user.id     redirect_to root_url   end    def destroy     session[:user_id] = nil     redirect_to root_url   end end 

application_controller.rb

class ApplicationController < ActionController::Base   # Prevent CSRF attacks by raising an exception.   # For APIs, you may want to use :null_session instead.   protect_from_forgery with: :exception    private    def current_user     @current_user ||= User.find(session[:user_id]) if session[:user_id]   end   helper_method :current_user end 

回答1:

Modify your finder like so:

class User < ActiveRecord::Base   def self.from_omniauth(auth)     where(provider: auth.provider, uid: auth.uid).first_or_initialize do |user|       user.provider = auth.provider       user.uid = auth.uid       user.name = auth.info.name       user.oauth_token = auth.credentials.token       user.oauth_expires_at = Time.at(auth.credentials.expires_at)       user.save!     end   end end 

文章来源: Rails: ActiveModel::ForbiddenAttributesError