merb_auth_password_slice不维护会话

Question

根据自述文件集成了merb_auth_password_slice后，虽然session.authenticated?返回false，但当redirect_after_login被触发时，我可以成功登录。

现在只是尝试基本的身份验证策略(密码表单)，似乎不能让它工作，有什么想法吗？

我的初始化文件：

require 'dm-validations'

dependencies "merb-more", "merb_helpers", "merb-slices", "merb_auth_password_slice"


Merb::BootLoader.before_app_loads do
  DataMapper.setup(:default, "sqlite3://config/dev.db")
end

Merb::BootLoader.after_app_loads do
    # have already done this
    # raise "You must specify a valid openid in Merb.root/config/open_id to use this example app" unless File.exists?(Merb.root / "config" / "open_id")
    # # DataMapper.auto_migrate!
    # User.create(:login => "admin", 
    #             :password => "password", :password_confirmation => "password", 
    #             :email => "admin@example.com", 
    #             :identity_url => File.read(Merb.root / "config" / "open_id"))
end

Merb::Config.use do |c|
  c[:session_secret_key]  = 'my key'
  c[:session_store] = 'cookie'
end

Setup.rb

class Authentication

  def store_user(user)
    return nil unless user
    user.id
  end

  def fetch_user(session_info)
    User.get(session_info)
  end

end # Authentication

Answer 1

  # before(nil, :only => [:update, :destroy]) { session.abandon! }

这是片的会话控制器中的罪魁祸首