Rails 4 Api 返回所有用户数据

Question

我有一个正在为手机构建的 api，当我发出 get 请求时，我试图只为当前用户返回数据：

API 控制器：

**Shows me one specific user -- which is what I want**
respond_with Mibox.where(:user_id  => 19 ).load

**Shows me all user boxes**
respond_with Mibox.all
respond_with Mibox.where(:user_id  => session[:user_id]).load
respond_with Mibox.where(:user_id  => session[:current_user] ).load

如何将范围限制为当前用户或当前会话用户 ID？由于某种原因，它说它找不到 current_user，即使 Devise 应该使它可用于所有控制器和视图。我正在使用带有内置 api for rails 的设计。我正在使用旧的授权令牌方法（一旦完成，我将更新）。

respond_with Mibox.where(user: current_user).load

Started GET "/api/v1/miboxes.json" for 127.0.0.1 at 2014-03-21 13:23:08 -0500
Processing by Api::V1::MiboxesController#index as JSON
  Parameters: {"mibox"=>{}}
  User Exists (0.1ms)  SELECT 1 AS one FROM "users" WHERE "users"."authentication_token" = 'vNpqxmNcy8oP1V8BYzmF' LIMIT 1
  Mibox Load (0.2ms)  SELECT "miboxes".* FROM "miboxes" WHERE "miboxes"."user" IS NULL
SQLite3::SQLException: no such column: miboxes.user: SELECT "miboxes".* FROM "miboxes"  WHERE "miboxes"."user" IS NULL
Completed 500 Internal Server Error in 7ms

ActiveRecord::StatementInvalid (SQLite3::SQLException: no such column: miboxes.user: SELECT "miboxes".* FROM "miboxes"  WHERE "miboxes"."user" IS NULL):
  app/controllers/api/v1/miboxes_controller.rb:52:in `index'

respond_with Mibox.where(user_id: current_user.id).load

`Started GET "/api/v1/miboxes.json" for 127.0.0.1 at 2014-03-21 13:19:44 -0500
Processing by Api::V1::MiboxesController#index as JSON
  Parameters: {"mibox"=>{}}
  User Exists (0.1ms)  SELECT 1 AS one FROM "users" WHERE "users"."authentication_token" = 'vNpqxmNcy8oP1V8BYzmF' LIMIT 1
Completed 500 Internal Server Error in 6ms

NoMethodError (undefined method `id' for nil:NilClass):
  app/controllers/api/v1/miboxes_controller.rb:52:in `index'`

这是 mibox 架构：

create_table "miboxes", force: true do |t|
    t.text     "content"
    t.integer  "user_id"
    t.datetime "created_at"
    t.datetime "updated_at"
    t.string   "myboximages"
    t.text     "name"
    t.string   "qrcode"
    t.text     "location"
  end

  add_index "miboxes", ["user_id", "created_at"], name: "index_miboxes_on_user_id_and_created_at"

控制器

   class Api::V1::MiboxesController < ApplicationController
  before_filter :restrict_access
  skip_before_filter :verify_authenticity_token,
                     :if => Proc.new { |c| c.request.format == 'application/json' }
  after_filter :cors_access

  respond_to :json

  def cors_access
    headers['Access-Control-Allow-Origin'] = '*'
    headers['Access-Control-Allow-Methods'] = 'POST, PUT, DELETE, GET, OPTIONS'
    headers['Access-Control-Request-Method'] = '*'
    headers['Access-Control-Allow-Headers'] = 'Origin, X-Requested-With, Content-Type, Accept, Authorization'
    headers['Access-Control-Max-Age'] = "1728000"
  end


  rescue_from(ActionController::ParameterMissing) do |parameter_missing_exception|
    error = {}
    error[parameter_missing_exception.param] = ['parameter is required']
    response = { errors: [error] }
    respond_to do |format|
      format.json { render json: response, status: :unprocessable_entity }
    end
  end




  def index
    respond_with Mibox.where(user_id: current_user).load
  end






  def show
    respond_with Mibox.find(params[:id])
    #@mibox = current_user.miboxes.find(params[:id])
  end

  def create
    respond_with Mibox.create(mibox_params)
  end

  def update
    respond_with Mibox.update(params[:id], mibox_params)
  end

  def destroy
    respond_with Mibox.destroy(params[:id])
  end

  private
  def set_mibox
    @mibox = Mibox.find(params[:id])
  end

  # Never trust parameters from the scary internet, only allow the white list through.
  def mibox_params
    #params.require(:mibox).permit!
    params.require(:mibox).permit(:content, :location, :myboximages, :myboximages_cache, :remove_myboximages, :name, :user_id, tag_list: [])
  end


  def restrict_access
    authenticate_or_request_with_http_token do |token, options|
      User.exists?(authentication_token: token)
      #User.find_by(params[:user_id])
    end
  end
end

Answer 1

参考Devise documentation，可以看到正确的helper方法是#current_user。

即：

respond_with Mibox.where(user: current_user).load

或

respond_with Mibox.where(user_id: current_user.id).load

当然，这假设您已经对用户进行了身份验证。