testmycode/tmc-server

# frozen_string_literal: true

module Api
  module V8
    module Courses
      module Users
        class SubmissionsController < Api::V8::BaseController
          include Swagger::Blocks

          swagger_path '/api/v8/courses/{course_id}/users/{user_id}/submissions' do
            operation :get do
              key :description, 'Returns the submissions visible to the user in a json format'
              key :operationId, 'findUsersSubmissionsById'
              key :produces, [
                'application/json'
              ]
              key :tags, [
                'submission'
              ]
              parameter '$ref': '#/parameters/path_course_id'
              parameter '$ref': '#/parameters/path_user_id'
              response 403, '$ref': '#/responses/error'
              response 404, '$ref': '#/responses/error'
              response 200 do
                key :description, "User's submissions in json"
                schema do
                  key :title, :submissions
                  key :required, [:submissions]
                  property :submissions do
                    key :type, :array
                    items do
                      key :'$ref', :Submission
                    end
                  end
                end
              end
            end
          end

          swagger_path '/api/v8/courses/{course_id}/users/current/submissions' do
            operation :get do
              key :description, "Returns the user's own submissions in a json format"
              key :operationId, 'findUsersOwnSubmissionsById'
              key :produces, [
                'application/json'
              ]
              key :tags, [
                'submission'
              ]
              parameter '$ref': '#/parameters/path_course_id'
              response 403, '$ref': '#/responses/error'
              response 404, '$ref': '#/responses/error'
              response 200 do
                key :description, "User's own submissions in json"
                schema do
                  key :title, :submissions
                  key :required, [:submissions]
                  property :submissions do
                    key :type, :array
                    items do
                      key :'$ref', :Submission
                    end
                  end
                end
              end
            end
          end

          around_action :wrap_transaction

          def index
            unauthorize_guest!
            course = Course.find_by!(id: params[:course_id])
            params[:user_id] = current_user.id if params[:user_id] == 'current'
            submissions = Submission.where(course_id: course.id, user_id: params[:user_id])
            readable = Submission.filter_fields!(submissions.select { |sub| sub.readable_by?(current_user) })

            authorize! :read, readable
            present(readable)
          end
        end
      end
    end
  end
end