lortza/sorrygirl

# frozen_string_literal: true

class UsersController < ApplicationController
  before_action :set_user, only: %i[show edit update destroy]
  before_action :require_signin

  def index
    @users = User.all
  end

  def show; end

  def new
    @user = User.new
  end

  def edit; end

  def create
    @user = User.new(user_params)
    @user.save
    if @user.save
      session[:user_id] = @user.id
      redirect_to @user
    else
      render :new
    end
  end

  def update
    if @user.update(user_params)
      redirect_to @user, notice: message(@user, 'updated')
    else
      render :edit
    end
  end

  def destroy
    @user.destroy
    # TODO: make this so a user can delete another user without being signed out
    session[:user_id] = nil
    redirect_to root_url, alert: message(@user, 'deleted')
  end

  private

  def message(user, action)
    "#{user.first_name}'s account has been successfully #{action}."
  end

  def set_user
    @user = User.find_by!(username: params[:id])
  end

  def user_params
    params.require(:user).permit(:first_name,
                                 :last_name,
                                 :email,
                                 :username,
                                 :password,
                                 :password_confirmation)
  end
end