如何阻止 devise 尝试重定向到 /users/sign_in 以获取 API 请求？

Question

在我的反应前端，我有一个 API 请求，该请求通过 axios 库发送到我在 rails 后端的 ruby：

        Axios({
            url: "/terms",
            headers: {
                'Authorization': token
            }
        }).then((response) => {
            console.log(response.request)
            setActiveSet(response.data)
            setActiveSetIndex(0)
        }).catch((error) => {
            console.log(error)
        })

执行上述请求时，我在后端日志（ruby on rails）中看到以下响应链：

Started GET "/terms" for 192.168.1.119 at 2021-01-05 13:54:02 -0700
Cannot render console from 192.168.1.119! Allowed networks: 127.0.0.0/127.255.255.255, ::1
Processing by TermsController#index as HTML
Completed 401 Unauthorized in 0ms (ActiveRecord: 0.0ms | Allocations: 491)


Started GET "/users/sign_in" for 192.168.1.119 at 2021-01-05 13:54:02 -0700
Cannot render console from 192.168.1.119! Allowed networks: 127.0.0.0/127.255.255.255, ::1
Processing by Devise::SessionsController#new as JSON
Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.0ms | Allocations: 907)


Started GET "/terms" for 192.168.1.119 at 2021-01-05 13:54:02 -0700
Cannot render console from 192.168.1.119! Allowed networks: 127.0.0.0/127.255.255.255, ::1
Processing by TermsController#index as HTML
Completed 401 Unauthorized in 1ms (ActiveRecord: 0.0ms | Allocations: 491)


Started GET "/users/sign_in" for 192.168.1.119 at 2021-01-05 13:54:02 -0700
Cannot render console from 192.168.1.119! Allowed networks: 127.0.0.0/127.255.255.255, ::1
Processing by Devise::SessionsController#new as JSON
Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.0ms | Allocations: 905)

.catch块永远不会被调用。 当我查看响应时，我看到 2 个成功的 200 个响应。 401 响应不会显示在前端。

我正在尝试捕获 401 状态代码，然后通过我的反应前端向用户显示登录表单。 后端（设计 gem）试图将我重定向到 /users/sign_in，这不是我想要发生的。 我只想要一个 401，以便我的 react 应用程序可以显示自己的登录表单，但由于我不知道的原因，axios 仅显示具有 200 个状态的响应。

Answer 1

您可以通过更改失败应用程序来修改身份验证失败时的响应：

module MyNamespace
  class FailureApp < Devise::FailureApp
    def respond
      request.format.json? ? api_response : super
    end

    private
    def api_response
      self.status = 401
      self.content_type = 'application/json'
      # optional - send a message in the response body
      # response.body = { error: i18n_message }.to_json
    end
  end
end

# add to config/initializers/devise.rb
config.warden do |manager|
  manager.failure_app = MyNamespace::FailureApp
end

失败应用程序只是一个基于ActionController::Metal构建的基本 Rack 应用程序，当 Warden 抛出时（当用户身份验证失败时）被调用。