rails 自己紹介ページに写真投稿

前提・実現したいこと

Railsで自己紹介ページに写真投稿＆いいねができる機能を付け、共有できるサービスを作成していたのですが、いくつか正常に表示されない部分がありますので、原因をご教示お願いします。

###①写真投稿(アップロード)画面が表示されない。

###②プロフィール変更(編集)画面を入力後、変更後のプロフィールが表示されない。

発生している問題・エラーメッセージ

1
1NoMethodError in PhotosController#new
2undefined method `photos' for #<User:0x00000000046a4fb0> Did you mean? posts
3  def new
4    if logged_in?
5      @photo = current_user.photos.build  # form_with 用
6    end
7  end

2
1ActionController::InvalidAuthenticityToken in UsersController#edit
2ActionController::InvalidAuthenticityToken
3        def handle_unverified_request
4          raise ActionController::InvalidAuthenticityToken
5        end
6      end
7    end

該当のソースコード

Ruby
1routes.rb
2
3Rails.application.routes.draw do
4  root to: 'toppages#index'
5  
6  get 'login', to: 'sessions#new'
7  post 'login', to: 'sessions#create'
8  delete 'logout', to: 'sessions#destroy'
9  
10  get 'signup', to: 'users#new'
11  resources :users, only: [:index, :show, :new, :create, :edit] do
12    member do
13      get :photos
14    end
15  end
16  
17  put 'users/:id/edit', to: 'users#edit'
18  
19  patch '/users/:id', to: 'users#update'
20  
21  resources :photos, only: [:new] 
22  resources :posts, only: [:create, :destroy]
23  resources :skills, only: [:create, :edit, :destroy]
24end

photos/new.html.erb

<%= f.label "画像をアップロード" %><br><%= f.file_field :image %>

photos_controller.rb

class PhotosController < ApplicationController
  before_action :require_user_logged_in
  
  def new
    if logged_in?
      @photo = current_user.photos.build  # form_with 用
    end
  end

  def create
    @post = current_user.posts.build(post_params)
    if @post.save
      flash[:success] = '写真をアップロードしました。'
      redirect_to @user
    else
      @posts = current_user.posts.order(id: :desc).page(params[:page])
      flash.now[:danger] = '写真のアップロードに失敗しました。'
      render 'toppages/index'
    end
  end

  def destroy
  end
  
  private
  def post_params
    params.require(:post).permit(:content, :photo)
  end
end

users_controller.rb

class UsersController < ApplicationController
  before_action :require_user_logged_in, only: [:index, :show]
  
  def index
    @users = User.order(id: :desc).page(params[:page]).per(50)
  end

  def show
    @user = User.find(params[:id])
  end

  def new
    @user = User.new
  end

  def create
    @user = User.new(user_params)

    if @user.save
      flash[:success] = 'ユーザを登録しました。'
      redirect_to @user
    else
      flash.now[:danger] = 'ユーザの登録に失敗しました。'
      render :new
    end
  end

  def edit
    @user = User.find(params[:id])
  end
  
  def update
    @user = User.find(params[:id])
    
    if @user.update(user_params)
      flash[:success] = 'プロフィールを変更しました。'
      redirect_to @user
    else
      flash.now[:danger] = 'プロフィールが変更できませんでした。'
      render :edit
    end
  end
  
  def photos
    @user = User.find(params[:id])
  end
  
  private

  def user_params
    params.require(:user).permit(:name, :email, :password, :password_confirmation)
  end
end

show.html.erb

<div class="row">
  <aside class="col-sm-12">
    <table class="table table-bordered">
      <tr>
        <th>職業</th>
        <td><%= @user.profession %></td>
      </tr>
      <tr>
        <th>名前</th>
        <td><%= @user.first_name %><%= @user.last_name %></td>
      </tr>
      <tr>
      <tr>
        <th>自己紹介</th>
        <td><%= @user.profile %></td>
      </tr>
      <tr>
    </table>
      
  </aside>
  <div class="text-right">
    <aside>
      <%= link_to 'プロフィール変更', edit_user_path(@user) %>
    </aside>
  </div>
</div>

edit.html.erb

<div class="row">
  <div class="col-sm-6 offset-sm-3">

    <%= form_with(url: edit_user_path, scope: :user, local: true) do |f| %>

      <div class="form-group">
        <%= f.label :profession, 'Profession' %>
        <%= f.text_field :profession, class: 'form-control' %>
      </div>

      <div class="form-group">
        <%= f.label :first_name, 'First Name' %>
        <%= f.text_field :first_name, class: 'form-control' %>
      </div>
      
      <div class="form-group">
        <%= f.label :last_name, 'Last Name' %>
        <%= f.text_field :last_name, class: 'form-control' %>
      </div>
      
      <div class="form-group">
        <%= f.label :profile, 'Profile' %>
        <%= f.text_field :profile, class: 'form-control' %>
      </div>

      <%= form_with(model: @user, local: true, method: :put) do |f| %>
        <%= f.label :content, '入力したらクリック' %>
        <%= f.submit '更新', class: 'btn btn-primary btn-block' %>
      <% end %>
    <% end %>
  </div>
</div>

navbar.html.erb

<header class="mb-4">
  <nav class="navbar navbar-expand-sm navbar-dark bg-dark">
    <% if logged_in? %>
      <a class="navbar-brand" href="/">ホーム</a>
      <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarSupportedContent">
        <span class="navbar-toggler-icon"></span>
      </button>
      <a class="navbar-brand" href="<%= user_path(current_user) %>">ユーザ詳細</a>
      <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarSupportedContent">
        <span class="navbar-toggler-icon"></span>
      </button>
      <a class="navbar-brand" href="<%= users_path %>">ユーザ一覧</a>
      <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarSupportedContent">
        <span class="navbar-toggler-icon"></span>
      </button>
      <a class="navbar-brand" href="<%= new_photo_path(current_user) %>">写真投稿</a>
      <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarSupportedContent">
        <span class="navbar-toggler-icon"></span>
      </button>
      <a class="navbar-brand" href="<%= photos_user_path(current_user) %>">写真一覧</a>
      <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarSupportedContent">
        <span class="navbar-toggler-icon"></span>
      </button>
    <% else %>
      <a class="navbar-brand" href="/">ホーム</a>
      <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarSupportedContent">
        <span class="navbar-toggler-icon"></span>
      </button>
      <a class="navbar-brand" href="<%= signup_path %>">会員登録</a>
      <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarSupportedContent">
        <span class="navbar-toggler-icon"></span>
      </button>
    <% end %>
  
    <div class="collapse navbar-collapse justify-content-end" id="navbarSupportedContent">
      <ul class="navbar-brand">
        <% if logged_in? %>
          <li class="list-unstyled">ようこそ！<%= current_user.name %>さん</li>
        <% else %>
          <li class="list-unstyled">ようこそ！ゲストさん</li>
        <% end %>
      </ul>
    </div>

    <div class="collapse navbar-collapse justify-content-end" id="navbarSupportedContent">
      <ul class="navbar-nav">
        <% if logged_in? %>
          <li class="nav-item"><%= link_to 'ログアウト', logout_path, method: :delete %></li>
        <% else %>
          <li class="nav-item"><%= link_to 'ログイン', login_path, class: 'nav-link' %></li>
        <% end %>
      </ul>
    </div>
  </nav>
</header>