fab-manager/app/controllers/api/reservations_controller.rb

class API::ReservationsController < API::ApiController
  before_action :authenticate_user!
  before_action :set_reservation, only: [:show, :update]
  respond_to :json

  def index
    if params[:reservable_id] and params[:reservable_type] and params[:user_id]
      if !current_user.is_admin?
        params[:user_id] = current_user.id
      end
      @reservations = Reservation.where(params.permit(:reservable_id, :reservable_type, :user_id))
    elsif params[:reservable_id] and params[:reservable_type] and current_user.is_admin?
      @reservations = Reservation.where(params.permit(:reservable_id, :reservable_type))
    else
      @reservations = []
    end
  end

  def show
  end

  def create
    if current_user.is_admin?
      @reservation = Reservation.new(reservation_params)
      is_reserve = @reservation.save_with_local_payment
    else
      @reservation = Reservation.new(reservation_params.merge(user_id: current_user.id))
      is_reserve = @reservation.save_with_payment
    end
    if is_reserve
      SubscriptionExtensionAfterReservation.new(@reservation).extend_subscription_if_eligible

      render :show, status: :created, location: @reservation
    else
      render json: @reservation.errors, status: :unprocessable_entity
    end
  end

  def update
    authorize @reservation
    if @reservation.update(reservation_params)
      render :show, status: :ok, location: @reservation
    else
      render json: @reservation.errors, status: :unprocessable_entity
    end
  end

  private
  def set_reservation
    @reservation = Reservation.find(params[:id])
  end

  def reservation_params
    params.require(:reservation).permit(:user_id, :message, :reservable_id, :reservable_type, :card_token, :plan_id,
                                        :nb_reserve_places, :nb_reserve_reduced_places,
                                        slots_attributes: [:id, :start_at, :end_at, :availability_id, :offered])
  end
end