public
Last active

Devise configuration to allow username or email address for sign_in, confirmation, unlock, forgot password instructions.

  • Download Gist
devise.rb
Ruby
1 2 3 4 5 6 7 8 9 10
################################################################
# For views/migrations etc. check http://tinyurl.com/3xfx3zm #
################################################################
 
# File : RAILS_APP/config/initializers/devise.rb
# Change the following only. Rest can stay same
# NOTE : You must use devise master or any version released after Mar 13, 2011 to get everything mentioned here working.
config.authentication_keys = [ :login ]
config.confirmation_keys = [ :login ]
config.unlock_keys = [ :login ]
user.rb
Ruby
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56
###############################################################
# IMPORTANT: You need meta_where gem for where clause to work #
# Tinker accordingly if you don't want to use meta_where #
###############################################################
 
# File : RAILS_APP/app/models/user.rb
# Your user model. Select appropriate model depending on your devise config
 
# To facilitate username or email login
attr_accessor :login
 
# Setup accessible (or protected) attributes for your model
# NOTE the :login here.
attr_accessible :login, :username, :email, :password, :password_confirmation, :remember_me
 
 
# Essential functions
protected
 
def self.find_for_database_authentication(conditions)
login = conditions.delete(:login)
u = self.arel_table
where(conditions).where(u[:username].eq(login).or(u[:email].eq(login))).first
end
 
def self.find_or_initialize_with_errors(required_attributes, attributes, error=:invalid)
case_insensitive_keys.each { |k| attributes[k].try(:downcase!) }
 
attributes = attributes.slice(*required_attributes)
attributes.delete_if { |key, value| value.blank? }
 
if attributes.size == required_attributes.size
if attributes.has_key?(:login)
login = attributes.delete(:login)
record = find_record(login)
else
record = where(attributes).first
end
end
 
unless record
record = new
 
required_attributes.each do |key|
value = attributes[key]
record.send("#{key}=", value)
record.errors.add(key, value.present? ? error : :blank)
end
end
record
end
 
def self.find_record(login)
u = self.arel_table
where(u[:username].eq(login).or(u[:email].eq(login))).first
end

Started POST "/admins/sign_in" for 127.0.0.1 at 2012-02-08 19:06:43 +0800
Processing by Devise::SessionsController#create as HTML
Parameters: {"utf8"=>"✓", "authenticity_token"=>"djp14XxKzmx/nNMMRsd/NAYJCdu+dAlyjJgNTfCeDAQ=", "admin"=>{"login"=>"geekontheway", "password"=>"[FILTERED]"}}
Completed 401 Unauthorized in 1ms
Processing by Devise::SessionsController#new as HTML
Parameters: {"utf8"=>"✓", "authenticity_token"=>"djp14XxKzmx/nNMMRsd/NAYJCdu+dAlyjJgNTfCeDAQ=", "admin"=>{"login"=>"geekontheway", "password"=>"[FILTERED]"}}
Completed 500 Internal Server Error in 121ms

ActiveModel::MassAssignmentSecurity::Error (Can't mass-assign protected attributes: login)

what to config In the view? thanks

In your User (or corresponding) model, check that database field login is in the list of accessible attributes.
Example:

In file app/model/user.rb
attr_accessible :login, :password, :blah, :foo, :bar

line 22

where(conditions).where({:username => login} | { :email => login}).first

should be

where(conditions).where({:username => login} || { :email => login}).first

and you're the best

@paatsinsuwan I was actually using meta_where ruby gem and that syntax worked. The syntax you suggested will not work. Just check the generated sql for your query

User.where(conditions).where({:username => login} || { :email => login}).to_sql

I have made the modification so that things work properly without meta_where.

Please sign in to comment on this gist.

Something went wrong with that request. Please try again.