Rails 5.1强参数问题中存在未知参数

Question

所以我的“对账”模型如下所示：

class Reconciliation < ApplicationRecord
  belongs_to :location
  belongs_to :company
  has_and_belongs_to_many :inventory_items
  accepts_nested_attributes_for :inventory_items, allow_destroy: true
end

我的InventoryItem模型如下所示：

class InventoryItem < ApplicationRecord
  belongs_to :product
  belongs_to :location, inverse_of: :inventory_items
  has_and_belongs_to_many :reconciliations
end

在我的ReconciliationsController中，这是我的reconciliation_params的样子：

  def new
    @location = Location.find(params[:location_id])
    @reconciliation = @location.reconciliations.new
    @inventory_items = @location.inventory_items
    @start_index = 0
    @next_index = @start_index + 1
  end

def reconciliation_params
  params.require(:reconciliation).permit(:inventory_item_id, :location_id, :display_id, :inventory_items,
        inventory_items_attributes: [:id, :quantity_left, :quantity_delivered, :_destroy]
  )
end

这是我routes.rb文件的相关部分：

  resources :locations, shallow: true do
    resources :inventory_items
    resources :reconciliations
  end

这是我的views/reconciliations/_form.html.erb文件：

<%= simple_form_for @reconciliation, url: :location_reconciliations do |f| %>
  <%= f.error_notification %>

  <div class="form-inputs">
    <%= f.input :location_id, as: :hidden %>
    <%= f.simple_fields_for :inventory_item do |inventory| %>
      <%= inventory.input :quantity_left %>
      <%= inventory.input :quantity_delivered %>
    <% end %>
  </div>

  <div class="form-actions">
      <%= f.button :submit, "Update", class: "btn btn-primary" %>
  </div>
<% end %>

这是我的app/views/reconciliations/new.html.erb文件：

<% if params[:next].nil? %>
  <%= render 'form', reconciliation: @reconciliation, inventory_item: @inventory_items[@start_index] %>
<% else %>
  <%= render 'form', reconciliation: @reconciliation, inventory_item: @inventory_items[@next_index] %>
<% end %>

当我尝试创建一个reconciliation对象时，这是我的日志记录：

Started POST "/locations/2/reconciliations" for 127.0.0.1 at 2018-03-24 23:16:33 -0500
Processing by ReconciliationsController#create as HTML
  Parameters: {"utf8"=>"✓", "authenticity_token"=>"JZvhwloo0+XM9bmptxXGfnDw==", "reconciliation"=>{"location_id"=>"2", "inventory_item"=>{"quantity_left"=>"1", "quantity_delivered"=>"170"}}, "commit"=>"Update", "location_id"=>"2"}
Unpermitted parameter: :inventory_item
  Location Load (0.9ms)  SELECT  "locations".* FROM "locations" WHERE "locations"."id" = $1 LIMIT $2  [["id", 2], ["LIMIT", 1]]
   (0.6ms)  BEGIN
   (0.7ms)  ROLLBACK
  Rendering reconciliations/new.html.erb within layouts/application
  InventoryItem Load (1.0ms)  SELECT "inventory_items".* FROM "inventory_items" WHERE "inventory_items"."location_id" = $1  [["location_id", 2]]
  Product Load (1.0ms)  SELECT  "products".* FROM "products" WHERE "products"."id" = $1 LIMIT $2  [["id", 2], ["LIMIT", 1]]
  Rendered reconciliations/_form.html.erb (45.9ms)
  Rendered reconciliations/new.html.erb within layouts/application (66.8ms)
  Rendered shared/_navbar.html.erb (1.3ms)
Completed 200 OK in 202ms (Views: 115.1ms | ActiveRecord: 29.1ms)

我尝试简单地在params.require(:reconciliation).permit(..)中添加:inventory_item，但这并不起作用。

我错过了什么吗？ 编辑1 当我检查表单中输入的HTML时，在simple_fields_for中，HTML似乎没有问题：

<input class="string required" type="text" name="reconciliation[inventory_item][quantity_left]" id="reconciliation_inventory_item_quantity_left">

编辑2

当我将simple_fields_for的调用改为复数形式，即:inventory_items，而不是像这样的:inventory_item：

整个表单部分就会消失。

HTML代码如下：

<div class="form-inputs">
    <div class="input hidden reconciliation_location_id"><input class="hidden" type="hidden" value="2" name="reconciliation[location_id]" id="reconciliation_location_id"></div>
</div>

这是在单数情况下使用 simple_field_for :inventory_item 时 HTML 的呈现方式：

<div class="form-inputs">
    <div class="input hidden reconciliation_location_id"><input class="hidden" type="hidden" value="2" name="reconciliation[location_id]" id="reconciliation_location_id"></div>

      <div class="input string required reconciliation_inventory_item_quantity_left"><label class="string required" for="reconciliation_inventory_item_quantity_left"><abbr title="required">*</abbr> Quantity left</label><input class="string required" type="text" name="reconciliation[inventory_item][quantity_left]" id="reconciliation_inventory_item_quantity_left"></div>
      <div class="input string required reconciliation_inventory_item_quantity_delivered"><label class="string required" for="reconciliation_inventory_item_quantity_delivered"><abbr title="required">*</abbr> Quantity delivered</label><input class="string required" type="text" name="reconciliation[inventory_item][quantity_delivered]" id="reconciliation_inventory_item_quantity_delivered"></div>
  </div>

- marcamillion

---

请将此代码<%= f.simple_fields_for :inventory_item do |inventory| %>更新为<%= f.simple_fields_for :inventory_items do |inventory| %>。 - uzaif

@uzaif 那也是我尝试过的另一种方法。但当我这样做时，由于某种奇怪的原因 simple_fields_for 中的整个表单都消失了。我已经更新了问题并附上了那次尝试中的 HTML 代码。 - marcamillion

事实是，我正在尝试在每次呈现new.html.erb视图时仅解析1个inventory_item。这就是为什么它被设置成那样的原因。 - marcamillion

你能和我分享代码库吗？这样我就可以查看它了。 - uzaif

好的，给我你的电子邮件。这是一个私有仓库在 GH 上，所以我需要像那样添加你。 - marcamillion

Answer 1

我尝试过将 :inventory_item 添加到我的 params.require(:reconciliation).permit(..) 中，但这并不起作用。

如果您想允许 inventory_item，请指定它的结构，因为它不是一个简单的字段，而是一个哈希值：

def reconciliation_params
  params.require(:reconciliation).permit(:location_id, :display_id, inventory_item: [:id, :quantity_left, :quantity_delivered] )
end

根据您的日志，您没有传递inventory_item_id，这可能需要更新特定的物品：

Parameters: {"utf8"=>"✓", "authenticity_token"=>"JZvhwloo0+XM9bmptxXGfnDw==", 
"reconciliation"=>{"location_id"=>"2", "inventory_item"=>
{"quantity_left"=>"1", "quantity_delivered"=>"170"}},
"commit"=>"Update", "location_id"=>"2"}

您可以将其添加为嵌套表单中的隐藏字段。

- Pablo

Answer 2

关联表单应该使用复数形式 f.simple_fields_for :inventory_items。 在新建控制器的操作中，您应该初始化一个新的 inventory_item 对象。

def new
  @reconciliation = Reconciliation.new
  # you can create as many new items as you want
  @reconciliation.inventory_items.build
end

如果您想要动态添加表单项，我建议您使用 https://github.com/nathanvda/cocoon。

但是，看起来您想将现有的库存项目添加到新的对账中，最好使用 has_many through 关联 http://guides.rubyonrails.org/association_basics.html#choosing-between-has-many-through-and-has-and-belongs-to-many。

这样更容易添加具有必要字段和关联的连接模型对象。

另一个建议：如果在 partial 中使用实例变量，请不要发送局部变量到该 partial。

# render partial
render 'form', reconciliation: @reconciliation
# partial with form for local variable
simple_form_for reconciliation

我认为您的表单局部视图在编辑操作中不起作用，因为URL是硬编码的，您可以将URL传递给变量：

# new html
render 'form', reconciliation: @reconciliation, url_var: location_reconciliations(@location)
# edit
render 'form', reconciliation: @reconciliation, url_var: reconciliations(@reconciliation)
# form
simple_form_for reconciliation, url: url_var

- kolas