ishapi 0.1.8.176 → 0.1.8.177

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 534814e2570fd0506905da3c2af5baa3b54b7e23762ae0b1d43c7b733747a46d
-  data.tar.gz: 00f9f2f19642d1c51c3a1893d2657c1a77ee5e2254aa6ee4930b0bf33b307b86
+  metadata.gz: 3d2316758e2797aeecb65f3e8cacdb034902a7271f8518da15707050bf64e097
+  data.tar.gz: ba8bc72419963ea42441cee3dfd3b537aa79d3bf8dd21ff5fa4f44f7e77b37c7
 SHA512:
-  metadata.gz: 53c030593cf235e01ca9b671b63bd47bfee8db9c2b9a84a8d10db01b401cadda3f6a14b7608f0a23ab888cb2fb8799a511798518060e76707e2accf1e9ca5d3a
-  data.tar.gz: 2f44b2869368baa23d513ddc82b6749cc22b1e87b1b720d769a50e4976334261bd3a7682db0728a94f0194c4decab25a13419619a749015a727aff580e1eafca
+  metadata.gz: 33e25407dddeeafa0fe7e80e3483c0e674ebb36028644f69c4b37c2ac03787d93568cddad0ce6981d4c63c0f527c754a4bb572e6d4a8d622e215d212c9e9b22b
+  data.tar.gz: cfed72d717b27f1c7f303eace2491441f0e5108f2536a51fdedaf7c1ed00735012a16b2db13422e4dc6f93aff33a008e4a5b843685fd26fc4c443f3f22fcea60

data/app/controllers/ishapi/user_profiles_controller.rb

@@ -2,12 +2,26 @@ require_dependency "ishapi/application_controller"
 module Ishapi
   class UserProfilesController < ApplicationController
 
-    before_action :check_profile
+    before_action :check_profile, only: %i| show | ## @TODO: hmmm I may not need this check at all
+
+    before_action :check_profile_hard, only: %i| update |
 
     def show
-      @profile = IshModels::UserProfile.find_by :username => params[:username]
+      @profile = Ish::UserProfile.find_by :username => params[:username]
       authorize! :show, @profile
     end
 
+    def update
+      @profile = Ish::UserProfile.find @current_user.profile
+      authorize! :update, @profile
+
+      flag = @profile.update params[:profile].permit!
+      if flag
+        render json: { message: 'ok' }, status: :ok
+      else
+        render json: { message: "No luck: #{@profile.errors.full_messages.join(", ")}." }, code: 400
+      end
+    end
+
   end
 end

data/app/models/ishapi/ability.rb

@@ -33,6 +33,9 @@ class Ishapi::Ability
     user ||= User.new
 
     can [ :show ], Ish::UserProfile
+    can [ :update ], Ish::UserProfile do |p|
+      p.user.id.to_s == user.id.to_s
+    end
 
     can [ :index, :show ], City
 

data/config/routes.rb

@@ -58,8 +58,8 @@ Ishapi::Engine.routes.draw do
 
   post  'users/fb_sign_in',      to: 'users#fb_sign_in'
   get   'users/me',              to: 'users#account'
-  post  'users/profile',         to: 'users#show'
-  post  'users/profile/update',  to: 'users#update'
+  post  'users/profile',         to: 'users#show' ## @TODO: change, this makes no sense
+  post  'users/profile/update',  to: 'user_profiles#update'
   get   'users/profile',         to: 'users#show' # @TODO: only for testing! accessToken must be hidden
   match 'users/long_term_token', to: 'application#long_term_token', via: [ :get, :post ]
   post  'users/login',           to: 'users#login'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ishapi
 version: !ruby/object:Gem::Version
-  version: 0.1.8.176
+  version: 0.1.8.177
 platform: ruby
 authors:
 - piousbox
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-04-06 00:00:00.000000000 Z
+date: 2022-04-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails