Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>Which version of devise are you using? If you're on <code>3.1.0</code> or higher, this behavior is expected:</p> <p><a href="https://github.com/plataformatec/devise/blob/master/CHANGELOG.md" rel="noreferrer">CHANGELOG.md</a></p> <p>The tokens that are stored in the database are not supposed to match the tokens that you send in the confirmation e-mails. See <a href="https://github.com/plataformatec/devise/blob/master/lib/devise/models/confirmable.rb" rel="noreferrer">devise/lib/devise/models/confirmable.rb</a>, which now contains the following:</p> <pre><code>def confirm_by_token(confirmation_token) original_token = confirmation_token confirmation_token = Devise.token_generator.digest(self, :confirmation_token, confirmation_token) confirmable = find_or_initialize_with_error_by(:confirmation_token, confirmation_token) </code></pre> <p>As you can see, the token that you pass in via query string params is consumed by the <code>Devise.token_generator</code>, and the result of that operation is what's compared with the token in the database to discover the user record.</p> <p>It looks like it's temporarily possible (in 3.1 but not 3.2) to turn this off by setting</p> <pre><code>config.allow_insecure_token_lookup = true </code></pre> <p>in your devise initializer. But the default behavior has been changed to make devise more secure. See <a href="http://blog.plataformatec.com.br/2013/08/devise-3-1-now-with-more-secure-defaults/" rel="noreferrer">this blog post</a> for a complete rundown of the security improvements in devise 3.1, including this change.</p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    3. VO
      singulars
      1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload