Question

I m 患有雷克特加伊病症 5. 铁路: 当我试图在服务器上担任这样一个职位时:

NSArray *topicsList=[self.topicsTV.text componentsSeparatedByString:@","]; 
RKParams *params = [NSDictionary dictionaryWithObjectsAndKeys: self.questionTV.text,@"question[text]", 
                                                               self.descriptionTV.text,@"question[detail]",                       
                                                                topicsList,@"topics[]", nil
                    ];
[[RKClient sharedClient] post:@"/questions.json" params:params delegate:self];

标识如下:

2012-01-11 17:24:21.725 APP[29087:fb03] I restkit.network:RKRequest.m:562 Status Code: 401
2012-01-11 17:24:21.725 APP[29087:fb03] I restkit.network:RKRequest.m:563 Body: {"error":"You have to register or login."}

请注意,在张贴我之前,由于我可以接触某些私人内容,而且如果我恢复私人内容(向服务器发送的目标),那就给我这个错误:

2012-01-11 17:35:51.337 APP[29087:fb03] D restkit.network.queue:RKRequestQueue.m:455 Request <RKObjectLoader: 0x811c360> failed loading in queue <RKRequestQueue: 0xc60ea10 name=(null) suspended=NO requestCount=0 loadingCount=0/5> with error: The operation couldn’t be completed. (org.restkit.RestKit.ErrorDomain error 1004.).(Now loading 0 of 5).

这一运行的标志是我的吗? 如何活下来保留标识会议?

Answer 1

可能发生的情况是,铁路机能在贵航海空局提出要求时,能够证实欧洲铁路运输组织。当你提出GET的请求时,它不需要检查被打脚石(因为GET的请求没有改变任何内容)。因此,你能够用用户名和密码来信通贸总协定,但能够引出《发展权利宣言》。 http://blog.technopathllc.com/09/rails-31-csrf-token-authenticity-for.html” rel=“nofollow”有一些更多的信息。

我发现帮助的是,我打消了任何JSON要求的检查。

# In your application_controller.rb
skip_before_filter :verify_authenticity_token, :if => Proc.new { |c| 
  c.request.format ==  application/json  }

Of course, you could also do this:

# Or this in your application_controller.rb
def verified_request?
  if request.content_type == "application/json"
    true
  else
    super()
  end
end

Either of these allow JSON requests to ignore the token, and you can CRUD appropriately. Just know what you re doing if you choose to ignore the check.

Also: https://github.com/rails/rails/issues/3041

友情链接