gitcoinco/code_fund_ads

class ImagesController < ApplicationController
  before_action :authenticate_user!
  before_action :set_imageable
  before_action :set_attachment, only: [:edit, :update]
  before_action :authorize_view!, only: :index
  before_action :authorize_edit!, only: [:edit, :update]

  def index
    @images = @imageable.images.includes(:blob)
    return redirect_to(new_image_path) if @images.count == 0
  end

  def create
    @imageable.images.attach(*imageable_params[:images])
    head :ok
  end

  def edit
    @image = Image.new(@attachment)
  end

  def update
    @attachment.blob.metadata = @attachment.blob.metadata.merge(image_params)
    @attachment.blob.save
    flash[:notice] = I18n.t("images.update.success")
    redirect_to edit_image_path(@imageable.to_gid_param, @attachment)
  end

  def destroy
    image = ActiveStorage::Attachment.find(params[:id])
    if authorized_user.can_destroy_image?(image)
      image.purge
      flash[:notice] = I18n.t("images.destroy.success")
    else
      flash[:notice] = I18n.t("images.destroy.failure")
    end
    redirect_to images_path(@imageable.to_gid_param)
  end

  private

  def set_imageable
    @imageable = GlobalID.parse(params[:imageable_gid]).find
  end

  def set_attachment
    @attachment = @imageable.images.find(params[:id])
  end

  def imageable_params
    params.require(:imageable).permit(images: [])
  end

  def image_params
    params.require(:image).permit(
      :description,
      :format,
      :name
    )
  end

  def authorize_view!
    render_forbidden unless authorized_user.can_view_imageable?(@imageable)
  end

  def authorize_edit!
    render_forbidden unless authorized_user.can_update_image?(@attachment)
  end
end