Allow updating the status of guests from unauthenticated sessions #280
@ -6,6 +6,9 @@ require 'csv'
|
||||
|
||||
class GuestsController < ApplicationController
|
||||
GUEST_PARAMS = { only: %i[id name status], include: { group: { only: %i[id name] } } }.freeze
|
||||
|
||||
skip_before_action :authenticate_user!, only: :update
|
||||
|
||||
def index
|
||||
render json: Guest.includes(:group)
|
||||
.left_joins(:group)
|
||||
@ -31,6 +34,6 @@ class GuestsController < ApplicationController
|
||||
private
|
||||
|
||||
def guest_params
|
||||
params.expect(guest: %i[name group_id status])
|
||||
user_signed_in? ? params.expect(guest: %i[name group_id status]) : params.expect(guest: %i[status])
|
||||
end
|
||||
end
|
||||
|
@ -20,7 +20,7 @@ class InvitationsController < ApplicationController
|
||||
invitation = Invitation.includes(:guests).find(params[:id])
|
||||
|
||||
if invitation
|
||||
render json: invitation, only: :id, include: { guests: { only: %i[id name] } }, status: :ok
|
||||
render json: invitation, only: :id, include: { guests: { only: %i[id name status] } }, status: :ok
|
||||
else
|
||||
render json: { error: 'Invitation not found' }, status: :not_found
|
||||
end
|
||||
|
Loading…
x
Reference in New Issue
Block a user