我开始使用 React 在 Rails 中设置用户身份验证系统，但发生了两件奇怪的事情：

1) 我的 POST 请求包括一个user参数，我很确定我没有配置我自己（我正在遵循 Rails 指南书）。这个user参数与我所有的其他参数重复，如下所示：

Started POST "/api/user" for 127.0.0.1 at 2018-01-29 21:54:42 -0800
Processing by Api::UserController#create as JSON
   Parameters: {"email"=>"test@test.com", "password"=>"[FILTERED]",
       "first_name"=>"test", "last_name"=>"test", "groupname"=>"test", 
       "admin"=>"true", "user"=>{"email"=>"test@test.com", 
       "first_name"=>"test", "last_name"=>"test", "groupname"=>"test", "admin"=>"true"}}
Can't verify CSRF token authenticity.
No template found for Api::UserController#create, rendering head :no_content
Completed 204 No Content in 39ms (ActiveRecord: 0.0ms)

2）如果你还没有注意到，我的password参数是唯一没有包含在我的user参数中的参数（可能是因为我调用has_secure_password了我的users模型？），我不知道如何将它添加到我的private变量中.

我只是尝试使用Users.new(). 这是我正在使用的内容：

索引.js

class Signup extends React.Component {
  constructor(props) {
    super(props)
    this. state = {
      email: '',
      password: '',
      first_name: '',
      last_name: '',
      groupname: '',
      admin: false
    }

   this.handleChange = this.handleChange.bind(this)
   this.handleSubmit = this.handleSubmit.bind(this)
  }


 handleChange(e) {
    const { name, value } = e.target
    this.setState({
      [name]: value
    })
  }


 handleSubmit(e) {
    e.preventDefault()
    axios.post('/api/user', {
      email: this.state.email,
      password: this.state.password,
      first_name: this.state.first_name,
      last_name: this.state.last_name,
      groupname: this.state.groupname,
      admin: this.state.admin
    })
    .then(res => {
      console.log(res.data)
    })
 }



render() {
    return (
      <div>
        <h3>Sign Up!</h3>



        <section>
          <div>
                <div className='box'>
                  <p className="subtitle has-text-grey">Create Account</p>
                  <hr />

                  <form onSubmit={this.handleSubmit}>

                    <div className="field">
                      <div className="control">
                        <label>E-mail

                          <input name="email" type="text" className="form-control" onChange={this.handleChange} defaultValue={this.state.email}></input>

                        </label>
                      </div>
                    </div>


                    <div className="field">
                      <div className="control">
                        <label>Password

                          <input name="password" type="password" className="form-control" onChange={this.handleChange} defaultValue={this.state.password}></input>

                        </label>
                      </div>
                    </div>

                    <div className="field">
                      <div className="control">

                        <label >First Name

                          <input type="text" className="form-control" name="first_name" onChange={this.handleChange} defaultValue={this.state.first_name}></input>
                        </label>
                      </div>
                    </div>

                    <div className="field">
                      <div className="control">
                        <label>Last Name
                          <input type="text" className="form-control" name="last_name" onChange={this.handleChange} defaultValue={this.state.last_name}></input>
                        </label>
                      </div>
                    </div>

                    <div className="field">
                      <div className="control">
                        <label>Group


                          <input name="groupname" type="text" className="form-control" onChange={this.handleChange} defaultValue={this.state.groupname}></input>

                          <hr />

                          <span className='adminLabel' style={styles.adminLabelStyle}>Are you registerting as an admin?</span> <span>     </span>



                          <input type="checkbox" id="groupadmin" name="admin" onChange={this.handleChange} value='true'></input>

                        </label>
                      </div>
                    </div>

                    <div className="field is-grouped">
                      <div className="control">
                          <input type="submit" value='Submit' className="button is-normal is-info"></input>
                      </div>
                    </div>
                  </form>

                  <hr />

                  <form >
                    <div className="feild">
                      <div className="control">
                        <div>Already a Member?
                          <input type="submit" value='Login' className="" onClick={ this.props.action }></input>
                        </div>
                      </div>
                    </div>
                  </form>
            </div>
          </div>

        </section>


      </div>
    )
  }

index.html.erb

<%= react_component('Index') %>

应用程序/控制器/api/user_controller.rb

class Api::UserController < ApplicationController
    respond_to :json
    protect_from_forgery with: :null_session

    def create
        user_params[:password] = params[:password]
        puts user_params
        @user = Users.new(user_params)
    end


    private
        def user_params
            params.require(:user).permit(:email, :password, :first_name, :last_name, :groupname, :admin)
        end


end

应用程序/模型/user.rb

class User < ApplicationRecord
    before_save { self.email = email.downcase }
    VALID_EMAIL_REGEX = /\A[\w+\-.]+@[a-z\d\-.]+\.[a-z]+\z/i
    validates :email, presence: true, length: { maximum: 255 }, format: { with: VALID_EMAIL_REGEX }, uniqueness: { case_sensitive: false }
    validates :first_name, presence: true, length: { maximum: 51 }
    validates :groupname, presence: true, length: { maximum: 51 }
    validates :password, presence: true, length: { minimum: 6 }
    has_secure_password
end

数据库模式

  create_table "users", force: :cascade do |t|
    t.string "email"
    t.string "password_digest"
    t.string "first_name"
    t.string "last_name"
    t.integer "groupid"
    t.string "groupname"
    t.datetime "created_at", null: false
    t.datetime "updated_at", null: false
    t.boolean "admin"
    t.index ["email"], name: "index_users_on_email", unique: true
  end

总而言之，我的实际问题是：为什么我得到一个单独的users参数，为什么它不包含我的密码，为什么我不能将密码添加到我的user_params??