设计根据 AJAX 请求注销用户。轨道3.1

发布于 2024-12-02 22:31:51 字数 1173 浏览 1 评论 0原文

我有一个使用 AJAX 进行 CRUD 的控制器，但是每当我单击远程链接之一（例如删除）时，我都会看到 Rails 服务器已决定将我注销并重定向我。检查服务器日志表明它无法验证 CSRF 真实性。如何在我的请求中包含 CSRF 令牌？

跑步： - 轨道 3.1 - 设计1.4.4 - jquery-rails 1.0.13

相关控制器操作：

 def destroy
     @article = Article.find(params[:id])
      if @article.destroy
        flash[:notice] = "Article deleted."
        respond_to do |format|
        format.html{redirect_to articles_path}
        format.js{}
      end
      else
        flash[:error] = "Try Again."
        redirect_to :back
      end

Layouts/application.html.erb

      <head>
    <title><%= content_for?(:title) ? yield(:title) : "Untitled" %></title>
<link rel="stylesheet" href="http://twitter.github.com/bootstrap/assets/css/bootstrap-1.1.1.min.css>
    <%= stylesheet_link_tag "application" %>
    <%= javascript_include_tag :defaults %>
   <script type="text/javascript">jQuery.ajaxSetup({ beforeSend: function (xhr) { xhr.setRequestHeader("Accept", "text/javascript"); } });</script>
    <%= csrf_meta_tag %>
    <%= yield(:head) %>
  </head>

提前致谢。

原文

I have a controller which uses AJAX for CRUD, however whenever I click on one of my remote links (Delete for example) I see the rails server has decided to log me out and redirect me. Inspection of the server logs state that it cannot verify CSRF Authenticity. How do I include the CSRF token in my request?

Running:
- Rails 3.1
- Devise 1.4.4
- jquery-rails 1.0.13

Relevant Controller Action:

 def destroy
     @article = Article.find(params[:id])
      if @article.destroy
        flash[:notice] = "Article deleted."
        respond_to do |format|
        format.html{redirect_to articles_path}
        format.js{}
      end
      else
        flash[:error] = "Try Again."
        redirect_to :back
      end

Layouts/application.html.erb

      <head>
    <title><%= content_for?(:title) ? yield(:title) : "Untitled" %></title>
<link rel="stylesheet" href="http://twitter.github.com/bootstrap/assets/css/bootstrap-1.1.1.min.css>
    <%= stylesheet_link_tag "application" %>
    <%= javascript_include_tag :defaults %>
   <script type="text/javascript">jQuery.ajaxSetup({ beforeSend: function (xhr) { xhr.setRequestHeader("Accept", "text/javascript"); } });</script>
    <%= csrf_meta_tag %>
    <%= yield(:head) %>
  </head>

Thanks in advance.

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

一刻暧昧 2024-12-09 22:31:51

Rails 3.1 使用 gem 'jquery-rails'，它希望您在 application.js 文件中包含此内容：

//= require jquery
//= require jquery_ujs

我忘记了 jquery_ujs 并且遇到了与您相同的问题。

Rails 3.1 uses the gem 'jquery-rails', which wants you to have this in your application.js file:

//= require jquery
//= require jquery_ujs

I had forgotten the jquery_ujs and was getting the same problem as you.

回复收藏 0 原文

允世 2024-12-09 22:31:51

你应该在你的 html 页面中包含这个：

<%= csrf_meta_tag %>

它会生成以下内容：

<meta name="csrf-param" content="authenticity_token"/>
<meta name="csrf-token" content="the token comes here"/>

每当你执行 POST（DELETE、PUT 实际上是 POST，但 _method 独立设置）时，你应该包含 {authenticity_token: "the token comes here"} 在您发布的数据中。

You should have this in your html page:

<%= csrf_meta_tag %>

which generates the following:

<meta name="csrf-param" content="authenticity_token"/>
<meta name="csrf-token" content="the token comes here"/>

Whenever you do POST (DELETE, PUT are actually POST but with _method set dependently), you should get include the {authenticity_token: "the token comes here"} in the data your post together with.

回复收藏 0 原文

~没有更多了~