如何访问iOS Stripe创建的令牌？

Question

i successfully got generating tokens working on the ios side, and i have a heroku rails app set up. How do i retrieve this token on the server side?

getting the error `Completed 500 Internal Server Error in 1ms (ActiveRecord: 0.0ms)

NoMethodError (undefined method []' for nil:NilClass): app/controllers/login_controller.rb:11:in 'log_in'

here is my controller code:

class LoginController < ApplicationController
  def index

  end
  def log_in
    puts params

    headers = {"X-Parse-Application-Id" => "APIKEY", 
                         "X-Parse-REST-API-Key" => "APIKEY"}
    query = {:username => params[:user][:username], 
                     :password => params[:user][:password]}

            @response = HTTParty.get('https://api.parse.com/1/login', 
        :query => query,
            :headers => headers)

        session[:session_token] = @response["sessionToken"]
        session[:object_id] = @response["objectId"]
        @object_id = session[:object_id]
            @test = HTTParty.get("https://api.parse.com/1/classes/_User/#{@object_id}", 
                :headers => {"X-Parse-Application-Id" => "APIKEY", 
                             "X-Parse-REST-API-Key" =>"APIKEY"} )

        session[:stripe_acct_id] = @test["uid"]


end
    def logout
        logout = HTTParty.post('https://api.parse.com/1/logout',
          :headers => {"X-Parse-Application-Id" => "APIKEY", 
                       "X-Parse-REST-API-Key" => "APIKEY",
                       "X-Parse-Session-Token" => session[:session_token]})
        reset_session
                redirect_to :controller => "login"

end

    def deauthorize

      @object_id = session[:object_id]

           HTTParty.post("https://connect.stripe.com/oauth/deauthorize",
                    :basic_auth => { :username => ENV['STRIPE_SECRET'] },
                    :query => { client_id: ENV['STRIPE_CONNECT_CLIENT_ID'],
                                stripe_user_id: session[:stripe_acct_id]})

    end
end

Answer 1

In your controller add:

protect_from_forgery: :null, only: :log_in

For your error, it's because you don't send user object in your post request.