Strong parameters with Rails and Devise -

i using rails 4.0 branch of devise along ruby 2.0.0p0 , rails 4.0.0.beta1.

this kind of question checking if i'm doing right way, or if there other things should doing. i'm sure lot of people moving rails 4.0 facing same problems (after googling similar things).

i have read following links:

• devise , strong parameters
• https://gist.github.com/kazpsp/3350730
• https://github.com/plataformatec/devise/tree/rails4#strong-parameters

now using devise created user model, created following controller using above gists (and made sure include in routes file). parameters first_name , last_name.

class users::registrationscontroller < devise::registrationscontroller   def sign_up_params     params.require(:user).permit(:first_name, :last_name, :email, :password, :password_confirmation)   end   def account_update_params     params.require(:user).permit(:first_name, :last_name, :email, :password, :password_confirmation, :current_password)   end   private :sign_up_params   private :account_update_params end 

is there else should doing? best way of doing things on (since dropping attr_accessor). forms seem working fine (both new , update). gists said use "resource_params" gave "unpermitted parameters" error in server log.

thanks latest updates on rails4 branch of devise, doesn't need insert 'resource_params'.

i've created brand new rails4 app , followed basic devise installation steps , app works properly, think, you've done well.

but there modified gist gives details in terms of permitted parameters if need:

source: https://gist.github.com/bluemont/e304e65e7e15d77d3cb9

# controllers/users/registrations_controller.rb class users::registrationscontroller < devise::registrationscontroller    before_filter :configure_permitted_parameters    protected    # custom fields :name, :heard_how   def configure_permitted_parameters     devise_parameter_sanitizer.for(:sign_up) |u|       u.permit(:name, :heard_how,         :email, :password, :password_confirmation)     end     devise_parameter_sanitizer.for(:account_update) |u|       u.permit(:name,         :email, :password, :password_confirmation, :current_password)     end   end end