CODEWITHSUNDEEP
ruby-on-railsdevisevirusdevise-recoverable
Pierre
Pierre

Reputation: 21

Spectre and Meltdown

Recoverable function of Devise 3.4.1 on Ubuntu 14.xx generates invalid token. Impossible to change the forgotten password. I use vmware and came back to a snapshot without the security update patch of Spectre and Meltdown and I was able to change a test user password. I didn't installed anything new, no new gem.. I'm quite sure the problem comes from the security patch. There is a lot of answers about invalid token I tried them all, but why should I change a configuration that worked so fine month after month? Did someone experienced the same? I know the biggest Virus is myself but here in this case..

Here is the app/models/user.rb

class User < ActiveRecord::Base

# Include default devise modules. Others available are: # :confirmable, :lockable, :timeoutable and :omniauthable devise :database_authenticatable, :registerable, :recoverable, :rememberable, :trackable, :validatable, :confirmable

def send_devise_notification(notification, *args)
  devise_mailer.send(notification, self, *args).deliver_later
end

end

I tried devise_mailer.send(notification, self, *args).deliver_now but I still get non-matching token

Upvotes: 2

Views: 203

Answers (0)

Related Questions