module Api
  module V1
    class BillboardsController < ApiController
      before_action :authenticate_with_api_key!
      before_action :require_admin

      # Enums (like the `display_to` field) raise ArgumentError exceptions on unexpected inputs
      rescue_from ArgumentError, with: :error_unprocessable_entity

      def index
        @billboards = Billboard.order(id: :desc).page(params[:page]).per(50)
        @billboards = @billboards.search_ads(params[:search]) if params[:search].present?
        render json: @billboards
      end

      def show
        @billboard = Billboard.find(params[:id])
        render json: @billboard
      end

      def create
        @billboard = Billboard.new(permitted_params)
        @billboard.save!
        render json: @billboard, status: :created
      end

      def update
        @billboard = Billboard.find(params[:id])
        @billboard.update!(permitted_params)
        render json: @billboard
      end

      def unpublish
        @billboard = Billboard.find(params[:id])
        result = @billboard.update(published: false)
        if result
          head :no_content
        else
          render json: @billboard, status: :unprocessable_entity
        end
      end

      private

      def require_admin
        authorize Billboard, :access?, policy_class: InternalPolicy
      end

      def permitted_params
        params.permit :approved, :body_markdown, :creator_id, :display_to,
                      :name, :organization_id, :placement_area, :published,
                      :tag_list, :type_of, :exclude_article_ids,
                      :audience_segment_type, :audience_segment_id, :priority,
                      # Permitting twice allows both comma-separated string and array values
                      :target_geolocations, target_geolocations: []
      end
    end
  end
end