fab-manager/app/controllers/api/orders_controller.rb

# frozen_string_literal: true

# API Controller for resources of type Order
# Orders are used in store
class API::OrdersController < API::ApiController
  before_action :authenticate_user!
  before_action :set_order, only: %i[show update destroy]

  def index
    @result = ::Orders::OrderService.list(params, current_user)
  end

  def show; end

  def update
    authorize @order

    if @order.update(order_parameters)
      render status: :ok
    else
      render json: @order.errors.full_messages, status: :unprocessable_entity
    end
  end

  def destroy
    authorize @order
    @order.destroy
    head :no_content
  end

  private

  def set_order
    @order = Order.find(params[:id])
  end

  def order_params
    params.require(:order).permit(:state)
  end
end