participants_controller.rb

#:nodoc:
class Api::ParticipantsController < ApiController
  before_action -> { doorkeeper_authorize!('participant-read') }, only: :index
  before_action lambda {
                  doorkeeper_authorize!('participant-write')
                }, only: [:create, :update, :destroy]

  def index
    if params[:activity_id].present?
      @participants = Participant.where(activity: Activity.find_by(id: params[:activity_id])).includes(
        :activity, :member
      )

    elsif params[:member_id].present?
      head(:unauthorized) && return unless Authorization._member.id == params[:member_id].to_i

      @participants = Participant.where(member: Authorization._member).includes(:activity, :member)

    else
      head(:bad_request)
      return
    end
  end

  def create
    @participant = Participant.new(member: Authorization._member,
                                   activity: Activity.find(params[:activity_id]))
    head(:bad_request) && return unless @participant.save

    render(status: :created)
  end

  def update
    raise(NotImplementedError)
  end

  # TODO: uitschrijfdeadline hierin meenemen
  def destroy
    participant = Participant.find_by!(member_id: Authorization._member.id,
                                       activity_id: params[:activity_id])

    head(:locked) && return if participant.paid
    head(:locked) && return if participant.activity.start_date <= Date.today

    participant.destroy!
    head(:no_content)
  end
end