EPHEC-Enovatech/sensorygarden-api

include ERB::Util

class PostsController < ApplicationController

    before_action :authenticate_user, except: [:index, :show]

    def index
        posts = Post.order('postDate desc').all.to_json(:include => { :user => { :only => [:nom, :prenom, :email] }, :categories => {}, :comments => {} })
        render json: { status: 'SUCCESS', message: 'All current posts in database', data: JSON.parse(posts) }, status: :ok
    end

    def show
        post = Post.find(params[:id]).to_json(:include => {:user => {:only => [:nom, :prenom, :email]}, :categories => {}, :comments => { :include => {:user => {:only => [:nom, :prenom, :email]}}}})
        render json: { status: 'SUCCESS', message: "Post #{params[:id]}", data: JSON.parse(post) }, status: :ok
    end

    def create
        post = Post.new(posts_params)

        if params[:categories].kind_of?(Array)
            params[:categories].each do |id|
                post.categories << Category.find(id)
            end
        else
            render json: { status: 'ERROR', message: 'The categories parameter is not an array' }, status: :unprocessable_entity
            return
        end
        if post.save 
            render json: { status: 'SUCCESS', message: 'Post created', data: post }, status: :created
        else
            render json: { status: 'ERROR', message: 'Post creation failed', data: post.errors }, status: :unprocessable_entity
        end
    end

    def update
        if check_current_isAdmin?
            post = Post.find(params[:id])
            post.update_attributes(change_params)
            render json: { status: 'SUCCESS', message: 'Post updated', data: post }, status: :ok
        end
    end

    def destroy
        if check_current_isAdmin?
            post = Post.find(params[:id])
            post.destroy
            render json: { status: 'SUCCESS', message: 'Post deleted', data: post }, status: :ok
        end
    end

    private

    def posts_params
        params[:postDate] = DateTime.now
        params[:postTitle] = h(params[:postTitle])
        params[:postText] = h(params[:postText])
        params.permit(:postTitle, :postText, :user_id, :postDate)
    end

    def change_params
        params[:postTitle] = h(params[:postTitle])
        params[:postText] = h(params[:postText])
        params.permit(:postTitle, :postText)
    end
end