duse-io/api

module Duse
  module API
    module V1
      module Actions
        module User
          class Update < Actions::Authenticated
            status 200
            validate_with JSONSchemas::User
            render JSONViews::User, type: :full

            def call(user_id)
              user = Get.new(env, current_user, params, json).call(user_id)
              Authorization::User.authorize! current_user, :update, user
              current_password = json[:current_password]
              fail ValidationFailed, { message: "Wrong current password" }.to_json if !user.try(:authenticate, current_password)
              if !user.update(sanitized_json(strict: false))
                fail ValidationFailed, { message: user.errors.full_messages }.to_json
              end
              user
            end
          end
        end
      end
    end
  end
end