Devise doesn't login in Google Chrome

后端 未结 1 1075
醉酒成梦
醉酒成梦 2021-01-22 09:16

I\'m working on user authentication in a Ruby on Rails web app using Devise gem. The process with very straight forward.

However, after adding Nginx and ssl certificate,

相关标签:
1条回答
  • 2021-01-22 09:32

    I temporarly modified actionpack gem.

    In lib/action_controller/metal/request_forgery_protection.rb inside actionpack gem directory I updated:

    def valid_request_origin? # :doc:
        if forgery_protection_origin_check
          # We accept blank origin headers because some user agents don't send it.
          request.origin.nil? || request.origin == request.base_url
        else
          true
        end
      end
    

    to be:

    def valid_request_origin? # :doc:
        if forgery_protection_origin_check
          # We accept blank origin headers because some user agents don't send it.
          request.origin.nil? || request.origin == request.base_url || request.base_url == ": https://<domain name>:80"
        else
          true
        end
      end
    
    0 讨论(0)
提交回复
热议问题