scottohara/loot

# Copyright (c) 2016 Scott O'Hara, oharagroup.net
# frozen_string_literal: true

# Application controller
class ApplicationController < ::ActionController::API
    before_action :authenticate_user, except: [:routing_error]
    rescue_from ::StandardError, with: :internal_error
    rescue_from ::ActiveRecord::RecordInvalid, with: :record_invalid
    rescue_from ::ActiveRecord::RecordNotDestroyed, with: :record_not_destroyed
    rescue_from ::ActiveRecord::RecordNotFound, with: :record_not_found
    include ::ActionController::HttpAuthentication::Basic::ControllerMethods

    def authenticate_user
        render plain: 'Invalid login and/or password', status: :unauthorized unless authenticate_with_http_basic do |username, password|
            username.eql?(::ENV[:LOOT_USERNAME.to_s]) && password.eql?(::ENV[:LOOT_PASSWORD.to_s])
        end
    end

    def internal_error(exception)
        render json: exception.message, status: :internal_server_error
    end

    def record_invalid(exception)
        render json: exception.record.errors.full_messages.join(', '), status: :unprocessable_entity
    end

    def record_not_destroyed(exception)
        render json: exception.record.errors.full_messages.join(', '), status: :conflict
    end

    def record_not_found(exception)
        render json: exception.message, status: :not_found
    end

    def routing_error
        render json: "Path #{params[:unmatched_route]} is not valid", status: :not_found
    end
end