The project uses the Devise gem.

When recovering the password, the letter is generated normally, the link with the token, as far as I can tell, also. But, if you follow this link, I see:

Started GET "/ service / password / edit? Reset_password_token = [FILTERED]" for 127.0.0.1 at 2016-05-13 01:38:12 +0300 Processing by Service :: PasswordsController # edit as HTML Parameters: {"reset_password_token" = > "[FILTERED]", "subdomain" => ""} Completed 401 Unauthorized in 1ms

in passwords_controller.rb there is:

prepend_before_action :require_no_authentication append_before_action :assert_reset_token_passed, only: :edit

Where to dig?

  • In flash[:alert] . - D-side

1 answer 1

The class in PasswordsController was incorrectly specified.

Was: class User::PasswordsController < ::Devise::RegistrationsController

Changed to: class User::PasswordsController < ::Devise::PasswordsController