使用Rails 5 API获取错误OmniAuth :: NoSessionError

Question

我创建了一个新的Rails 5应用程序rails new appname --api,看起来很棒!我想将它用作React前端的后端,并及时使用Chrome应用程序.现在我想创建一个API.

我使用了以下宝石

• 宝石'omniauth'
• 宝石'omniauth-oauth2'
• 宝石'设计'
• gem'devise_token_auth',git:'git://github.com/lynndylanhurley/devise_token_auth.git'
• 宝石'omniauth-twitter'
• 宝石'omniauth-facebook'
• 宝石'omniauth-google-oauth2'

我按照他们的Github上的指示进行设置:http://www.developingandrails.com/2015/02/api-authentication-with-devisetokenauth.html

现在,当我运行应用程序时,我得到:

Started GET "/" for 14.144.15.10 at 2016-07-17 17:21:46 +0000
  ActiveRecord::SchemaMigration Load (0.1ms)  SELECT "schema_migrations".* FROM "schema_migrations"
OmniAuth::NoSessionError (You must provide a session to use OmniAuth.):

我在Github和StackOverflow上寻找答案,但似乎没有人有解决方案.

唯一似乎"解决"问题的是添加这个:

 # config/application.rb
 config.middleware.use Rack::Session::Cookie

但是这个"解决方案"在控制台中给了我这个错误:

SECURITY WARNING: No secret option provided to Rack::Session::Cookie.
        This poses a security threat. It is strongly recommended that you
        provide a secret to prevent exploits that may be possible from crafted
        cookies. This will not be supported in future versions of Rack, and
        future versions will even invalidate your existing user cookies.

请帮忙!谢谢.

Answer 1

虽然config.middleware.insert_after为我工作,相同的中间件没有加载,所以我不得不插入选择其他东西插入后.我在http://stackoverflow.com/questions/15342710/adding-cookie-session-store-back-to-rails-api-app中找到了类似的答案,并简单地添加了:

config.middleware.use ActionDispatch::Cookies
config.middleware.use ActionDispatch::Session::CookieStore

在application.rb.

Answer 2

遗憾的是,omniauth要求rack.session在提供者请求和回调请求之间保留一些数据.

https://github.com/omniauth/omniauth/blob/master/lib/omniauth/strategy.rb#L173

对于带有Rails API的Omniauth,需要将会话返回到中间件堆栈:

config.middleware.insert_after ActiveRecord::Migration::CheckPending, ActionDispatch::Cookies
config.middleware.insert_after ActionDispatch::Cookies, ActionDispatch::Session::CookieStore

Answer 3

不完全确定,但在项目中对我有用的东西是:

  #config/application.rb
  config.middleware.insert_after(ActiveRecord::QueryCache, ActionDispatch::Cookies)
  config.middleware.insert_after(ActionDispatch::Cookies, ActionDispatch::Session::CookieStore)