Validation 外部模型参数未验证?

Validation 外部模型参数未验证?,validation,elixir,ecto,Validation,Elixir,Ecto,可能是我遗漏了什么,但它觉得这应该是一个无效的记录: pry(1)> project_params %{"name" => ""} pry(2)> changeset %Ecto.Changeset{action: nil, changes: %{name: ""}, constraints: [], errors: [], filters: %{}, model: %Elix.Project{__meta__: #Ecto.Schema.Metadata<:buil

可能是我遗漏了什么,但它觉得这应该是一个无效的记录:

pry(1)> project_params
%{"name" => ""}
pry(2)> changeset
%Ecto.Changeset{action: nil, changes: %{name: ""}, constraints: [], errors: [],
 filters: %{},
 model: %Elix.Project{__meta__: #Ecto.Schema.Metadata<:built>, id: nil,
  inserted_at: nil, name: nil, updated_at: nil,
  user: #Ecto.Association.NotLoaded<association :user is not loaded>,
  user_id: 2}, optional: [], opts: [], params: %{"name" => ""}, prepare: [],
 repo: nil, required: [:name, :user_id],
 types: %{id: :id, inserted_at: Ecto.DateTime, name: :string,
   updated_at: Ecto.DateTime, user_id: :id}, valid?: true, validations: []}
pry(3)> changeset.valid?
true
用户

defmodule Elix.User do
  use Elix.Web, :model

  schema "users" do
    field :email, :string
    field :password, :string, virtual: true
    field :crypted_password, :string
    has_many :projects, Elix.Project

    timestamps
  end

  @required_fields ~w(email password)
  @optional_fields ~w()

  @doc """
  Creates a changeset based on the `model` and `params`.

  If no params are provided, an invalid changeset is returned
  with no validation performed.
  """
  def changeset(model, params \\ :empty) do
    model
    |> cast(params, @required_fields, @optional_fields)
    |> unique_constraint(:email)
    |> validate_format(:email, ~r/@/)
    |> validate_length(:password, min: 5)
  end
end
这是控制器创建操作的代码:

def create(conn, %{"project" => project_params}) do
    changeset =
      Ecto.build_assoc(conn.assigns.current_user, :projects) |>
      Project.changeset(project_params)
IEx.pry
    case Repo.insert(changeset) do
      {:ok, project} ->
        conn
        |> put_flash(:info, "Project #{project.name} created succesfully")
        |> redirect(to: project_path(conn, :index))
      {:error, changeset} ->
        render(conn, "new.html", project: changeset)
    end
  end

我提交表单时没有故意输入任何内容,以便测试表单显示错误。这里我缺少了什么?

如果
name
的值为
nil
,则
变更集有效?
将仅为
false
。由于案例中
name
的值为空字符串,因此变更集将有效

处理将空字符串作为值传递的表单的最佳位置是在控制器中添加
scrub_params
插件,如下所示:

plug:scrub_参数,在[:create,:update]中执行操作时“项目”


查看查看更多有关
scrub_params

的信息,在控制器中[:create,:update]中执行操作时是否有
插件:scrub_params,“project”?我没有。所以一个空字符串被认为是有效的?是的,一个空字符串是有效的。这就是“擦洗”参数的目的。它会将空字符串变为
nil
您能添加一个答案吗?我会标记它吗?如果名称不为空是您业务逻辑的一部分,我肯定会添加一个验证程序来验证它的长度,就像您对密码所做的那样
scrub_params
很好,但很容易在将来的某个控制器中意外忘记执行此操作。插入长度验证器更安全,您仍然可以插入
scrub_参数。您是对的。我当时的印象是,默认情况下,埃克托会处理它:)
def create(conn, %{"project" => project_params}) do
    changeset =
      Ecto.build_assoc(conn.assigns.current_user, :projects) |>
      Project.changeset(project_params)
IEx.pry
    case Repo.insert(changeset) do
      {:ok, project} ->
        conn
        |> put_flash(:info, "Project #{project.name} created succesfully")
        |> redirect(to: project_path(conn, :index))
      {:error, changeset} ->
        render(conn, "new.html", project: changeset)
    end
  end