ruby-on-rails – HTTP状态码302

我在 Ruby上运行我的Rails后端,我想将数据发布到此服务器.但如果我用PAW做一个Post-request,我会被重定向.我是Http Requests的新手.有人可以解释我的功能以及如何使用http post请求吗？

我想在我的服务器的datanase(sqlite3)上发布信息.

这是一个截图,应该解释一切：

这是如何运作的？请解释 ：)
谢谢.
问候约翰

这是代码：

OwnersController：

#app/controllers/owners_controller.rb
class OwnersController < SessionsController
     respond_to :html
     before_action :owner_find,only: [:show,:edit,:update,:destroy]

     def index
        @owners = Owner.all
     end

     def show
     end  

    def update
       @owner = Owner.find(params[:id])

       if @owner.update(owner_params)
          redirect_to @owner
       else
          render 'edit'
       end
    end

    def new
       @owner = Owner.new
    end

    def destroy 
       @owner.destroy
       redirect_to owners_path
    end

    def edit
    end

    def create
        @owner = Owner.new owner_params
        if @owner.save!
           flash[:notice] = 'You signed up successfully'
           flash[:color]= 'valid'
           redirect_to owners_path
        else
           flash[:notice] = 'Form is invalid'
           flash[:color]= 'invalid'
          render 'new'
        end
    end

  private 

  def owner_find 
     @owner = Owner.find(params[:id])
  end  

  def owner_params
     params.require(:owner).permit(:name,:password,:password_confirmation,:token)
  end
end

SessionController：

class SessionsController < ApplicationController
  before_filter :authenticate_user,:except => [:login,:login_attempt]

  def login
    #goes to Login Form
  end

  def logout
    session[:owner_id] = nil
    redirect_to :action => 'login'
  end

  def login_attempt
    authorized_user = Owner.authenticate_by_name(params[:login_name],params[:login_password])
    if authorized_user
      session[:owner_id] = authorized_user.id
      flash[:notice] = "Wow Welcome again,you logged in as #{authorized_user.name}"
      redirect_to welcome_index_path
    else
      flash[:notice] = 'Invalid Username or Password'
      flash[:color]= 'invalid'
      render 'login'
    end
  end
end

控制台日志：

来自网络请求(http://192.168.2.144:3000/owners?name=hans&password=hans321&password_confirmation=hans321)

Started GET “/owners?name=hans&password=[FILTERED]&password_confirmation=[FILTERED]” for 192.168.2.144 at 2015-10-01 12:12:18 +0200
Cannot render console from 192.168.2.144! Allowed networks: 127.0.0.1,::1,127.0.0.0/127.255.255.255
Processing by OwnersController#index as HTML
Parameters: {“name”=>”hans”,“password”=>”[FILTERED]”,“password_confirmation”=>”[FILTERED]”}
Owner Load (0.1ms) SELECT “owners”.* FROM “owners” WHERE “owners”.”id” = ? LIMIT 1 [[“id”,2]]
Owner Load (0.1ms) SELECT “owners”.* FROM “owners”
Rendered owners/index.html.erb within layouts/application (1.8ms)
Completed 200 OK in 60ms (Views: 58.9ms | ActiveRecord: 0.2ms)

它告诉200确定但数据库中没有任何反应.

来自Paw-Request(所以我可以使用post.顺便说一下.我如何在浏览器请求中使用post？

Started POST
“/owners?name=hans&password=[FILTERED]&password_confirmation=[FILTERED]”
for 192.168.2.144 at 2015-10-01 12:12:45 +0200 Cannot render console
from 192.168.2.144! Allowed networks: 127.0.0.1,
127.0.0.0/127.255.255.255 Processing by OwnersController#create as HTML Parameters: {“name”=>”hans”,
“password_confirmation”=>”[FILTERED]”} Can’t verify CSRF token
authenticity Redirected to 07002 Filter chain
halted as :authenticate_user rendered or redirected Completed 302
Found in 1ms (ActiveRecord: 0.0ms)

似乎CRSF认证失败了..

编辑：

首先：
来到Rich Peck！这对我帮助很大.谢谢！！我非常感谢你的努力.

我接近解决方案..我的问题是：我不能把正确的参数放在网址中. token-auth被禁用以进行测试.所以它不重要.

参数应该是这样的：
?参数：{“utf8”=>“?”,“authenticity_token”=>“q9JvFhoSUgfydFTvh18JHbIIdKNDjnOS9m / trVBu9EHPP04xGsO69zPh1BFZBI1Ev1YcnOTiPmaAiPWOSkm5Xg ==”,“owner”=> {“name”=>“Hubert”,“password”=> “[FILTERED]”,“password_confirmation”=>“[FILTERED]”},“commit”=>“创建所有者”}

而不是在我的要求中：
参数：{“name”=>“Hubert”,“password”=>“[FILTERED]”,“password_confirmation”=>“[FILTERED]”,“owner”=> {}}

if @owner.save!
   flash[:notice] = ...
   redirect_to owners_path

lvh.me:3000/orders

#app/controllers/owners_controller.rb
class OwnersController < ApplicationController
   ...
   def create
      @owner = Owner.new owner_params
   end

   private

   def owner_params
      params.require(:owner).permit(:name,:password_confirmation)
   end
end

#app/views/orders/new.html.erb
<%= form_for @order do |f| %>
   <%= f.text_field :name %>
   <%= f.password_field :password %>
   <%= f.password_field :password_confirmation %>
   <%= f.submit %>
<% end %>