tasafo/bizusafo

class Api::V1::StoriesController < ApiController
  before_action :authenticate, except: [:index]

  def index
    @stories = Story.all

    respond_to do |format|
      message = @stories.present? ? "" : I18n.t("story.no_story")
      format.json {render json: {stories: @stories, message: message}}
    end
  end

  def create
    if params[:story][:comment_text].present?
      story_with_comments = new_story_params.merge(
        comments_attributes: {
          "0" => {text: params[:story][:comment_text][:text], commentable_type: "Story", commentable_id: ""}
        }
      )
    else
      story_with_comments = new_story_params
    end
    @story = Story.create_story! user: @user, params: story_with_comments

    respond_to do |format|
      if @story.persisted?
        format.json { render json: @story, status: 201 }
      else
        format.json { render json: @story.errors.full_messages, status: 422 }
      end
    end
  end

  private

  def new_story_params
    params.require(:story).permit(:description, :url, :tag_list)
  end

  def authenticate
    authenticate_token || render_unauthorized
  end

  def authenticate_token
    authenticate_with_http_token do |token, options|
      @user = User.find_by(auth_token: token)
    end
  end

  def render_unauthorized
    respond_to do |format|
      format.json { render json: "Bad credentials", status: 401 }
    end
  end
end