participants_controller.rb

class Api::ParticipantsController < ApiController
  before_action -> { doorkeeper_authorize! 'participant-read' }, only: :index
  before_action -> { doorkeeper_authorize! 'participant-write' }, only: [:create, :destroy]

  def index
    if params[:activity_id].present?
      @participants = Participant.where( :activity => Activity.find_by_id(params[:activity_id])).includes( :activity, :member )

    elsif params[:member_id].present?
      head :unauthorized and return unless Authorization._member.id == params[:member_id].to_i
      @participants = Participant.where( :member => Authorization._member ).includes( :activity, :member )

    else
      head :bad_request
      return
    end
  end

  def create
    @participant = Participant.new( :member =>  Authorization._member, :activity => Activity.find_by_id!(params[:activity_id]))

    head :bad_request and return unless @participant.save
    render :status => :created and return unless params[:bank].present?

    @transaction = IdealTransaction.new( # TODO add redirect website
      :description => @participant.activity.name,
      :amount => @participant.currency.to_f + Settings.mongoose_ideal_costs,
      :issuer => params[:bank],
      :type => 'ACTIVITIES',
      :member => @participant.member,
      :transaction_id => [ @participant.activity.id ],
      :transaction_type => 'Activity' )

    head :accepted and return unless @transaction.save
    render :status => :created
  end

  def hook
    transaction = IdealTransaction.find_by_uuid(params[:uuid])
    head :bad_request and return unless transaction.status == 'SUCCESS'
    head :bad_request and return unless transaction.type == 'ACTIVITIES'

    transaction.transaction_id.each do |activity|
      participant = Participant.find_by_member_id_and_activity_id transaction.member.id, activity
      participant.update_attributes :paid => true
    end

    head :ok # TODO redirect to target website
  end

  def destroy
    participant = Participant.find_by_member_id_and_activity_id! Authorization._member.id, params[:activity_id]

    head :locked and return if participant.paid
    head :locked and return if participant.activity.start_date <= Date.today

    participant.destroy!
    head :no_content
  end
end