Different invitation token -> invitation token is invalid

[belgoros]

I can"t figure out the reason of the error "The invitation token provided is not valid!" when a User clicked on the linked received by email.
I could see that tokens in params and User search were different:

Started GET "/users/invitation/accept?invitation_token=a172dc623ba35066f37de602fdfff95e19cce2261871cab56ff7dabb27eed292" for 127.0.0.1 at 2013-11-28 11:49:17 +0100
Processing by Users::InvitationsController#edit as HTML
  Parameters: {"invitation_token"=>"a172dc623ba35066f37de602fdfff95e19cce2261871cab56ff7dabb27eed292"}

Now in the generated query the token is different:

User Load (0.4ms)  SELECT "users".* FROM "users" WHERE "users"."invitation_token" = 'cf6092da5ff99718b6400693527405a606b0672eb0c5f2ab4608c6964865f2e7' ORDER BY "users"."id" ASC LIMIT 1
Redirected to http://localhost:3000/
Filter chain halted as :resource_from_invitation_token rendered or redirected
Completed 302 Found in 7ms (ActiveRecord: 0.4ms)

The code seems to be in devise/invitations_controller:

def resource_from_invitation_token
    unless params[:invitation_token] && self.resource = resource_class.find_by_invitation_token(params[:invitation_token], true)
      set_flash_message(:alert, :invitation_token_invalid)
      redirect_to after_sign_out_path_for(resource_name)
    end
  end

I'm on Rails 4, devise 3.1.2, devise_invitable 1.3.1. Did I miss something in devise configuration? I commented the following line in devise.rb initialiser:

#config.token_authentication_key = :auth_token

Any idea? Thnx

[scambra]

Did you write your own mail view? Devise 3.1 changed how token are persisted, now an encrypted token is persisted so mail view must use @token instead of resource.invitation_token.

[belgoros]

Yes, here is what was in the mailer/invitation_instructions.html.haml view:

...
%p= link_to 'Accept invitation', accept_invitation_url(@resource, :invitation_token => @resource.invitation_token)

After changining it as follows:

%p= link_to 'Accept invitation', accept_invitation_url(@resource, :invitation_token => @token)

it worked as needed. THANKS a lot Sergio.

[kannans]

@javix 💯