lynndylanhurley / lynndylanhurley/devise_token_auth
Unpermitted parameters | configure_permitted_parameters
Open
Nobody has claimed this yet.
- Dominant language
- Ruby
- Stars
- 3.6k
- Forks
- 1.1k
- PR merge metrics
- No merged PRs in 30d
Description
+1 https://github.com/lynndylanhurley/devise_token_auth/issues/897
devise (4.3.0)
devise_token_auth (0.1.42)
class ApplicationController < ActionController::API
include DeviseTokenAuth::Concerns::SetUserByToken
before_action :configure_permitted_parameters, if: :devise_controller?
respond_to :json
protected
def configure_permitted_parameters
devise_parameter_sanitizer.permit(:sign_up, keys: [:name])
end
end
It's still not working here.
Any solution?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no repository file or test; begin by reproducing the provided ApplicationController configuration with devise 4.3.0 and devise_token_auth 0.1.42. Trace the signup parameter-sanitization path and existing authentication tests, then verify that the submitted name is accepted during signup without permitting unrelated parameters.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rails, ruby
- Domain
- api, authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100