fix(confirmation): make strong params match

Fixes #1558
lynndylanhurley · Oct 6, 2022 · aee533d · aee533d
1 parent ec68e47
commit aee533d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/app/controllers/devise_token_auth/confirmations_controller.rb b/app/controllers/devise_token_auth/confirmations_controller.rb
@@ -71,7 +71,7 @@ def render_not_found_error
     private
 
     def resource_params
-      params.permit(:email, :confirmation_token, :config_name)
+      params.permit(:confirmation_token, :config_name, :redirect_url)
     end
 
     # give redirect value from params priority or fall back to default value if provided

diff --git a/app/views/devise/mailer/confirmation_instructions.html.erb b/app/views/devise/mailer/confirmation_instructions.html.erb
@@ -2,4 +2,4 @@
 
 <p><%= t '.confirm_link_msg' %> </p>
 
-<p><%= link_to t('.confirm_account_link'), confirmation_url(@resource, {confirmation_token: @token, config: message['client-config'].to_s, redirect_url: message['redirect-url']}).html_safe %></p>
+<p><%= link_to t('.confirm_account_link'), confirmation_url(@resource, {confirmation_token: @token, config_name: message['client-config'].to_s, redirect_url: message['redirect-url']}).html_safe %></p>
Original file line number	Diff line number	Diff line change
Expand Up		@@ -2,4 +2,4 @@

		<p><%= t '.confirm_link_msg' %> </p>

		<p><%= link_to t('.confirm_account_link'), confirmation_url(@resource, {confirmation_token: @token, config: message['client-config'].to_s, redirect_url: message['redirect-url']}).html_safe %></p>
		<p><%= link_to t('.confirm_account_link'), confirmation_url(@resource, {confirmation_token: @token, config_name: message['client-config'].to_s, redirect_url: message['redirect-url']}).html_safe %></p>