Use expect params wrapper for more "auth" and "2FA" "controllers" (#33717)

2025-01-24 09:40:20 -05:00
parent e44b78413a
commit a1d9c3fb99
8 changed files with 77 additions and 10 deletions
--- a/app/controllers/auth/sessions_controller.rb
+++ b/app/controllers/auth/sessions_controller.rb
@@ -73,7 +73,7 @@ class Auth::SessionsController < Devise::SessionsController
  end

  def user_params
-    params.require(:user).permit(:email, :password, :otp_attempt, credential: {})
+    params.expect(user: [:email, :password, :otp_attempt, credential: {}])
  end

  def after_sign_in_path_for(resource)