ruby-on-rails – 设计如何更改reset_password_token错误

此验证发生在devise/passwords_controller#update方法中.
代码包括：

# PUT /resource/password
def update
  self.resource = resource_class.reset_password_by_token(resource_params)
  yield resource if block_given?

  if resource.errors.empty?
    resource.unlock_access! if unlockable?(resource)
    flash_message = resource.active_for_authentication? ? :updated : :updated_not_active
    set_flash_message(:notice,flash_message) if is_flashing_format?
    sign_in(resource_name,resource)
    respond_with resource,location: after_resetting_password_path_for(resource)
  else
    respond_with resource
  end
end

self.resource = resource_class.reset_password_by_token(resource_params)行设置resource.errors对象,其中与reset_password_token相关的错误消息无效.

在此行之后检查resource.errors的值将显示以…结尾的大哈希值@messages = {：reset_password_token => [“无效”]}

devise_error_messages method重新格式化为“重置密码令牌无效”.

要更改此消息,应自定义密码控制器,并将更新方法更改为具有不同的错误消息哈希.

步骤如下：

1)自定义密码控制器的路由

# config/routes.rb
devise_for :users,:controllers => { :passwords  => "passwords" }

2)创建自定义密码控制器

# app/controllers/passwords_controller.rb
class PasswordsController < Devise::PasswordsController

end

3)自定义更新方法以更改错误消息：

# app/controllers/passwords_controller.rb 
# Include the update method as it is fully,with the following changes in the else block:

def update
  ...

  if resource.errors.empty?
    ...
  else
    if resource.errors.messages[:reset_password_token]
      resource.errors.messages.delete(:reset_password_token)
      resource.errors.messages[:password_reset_link] = ["has already been used"]
    end
    respond_with resource
  end

更多关于Customizing Devise controllers