docbrown/app/controllers/api/v0/webhooks_controller.rb

52 lines
1.4 KiB
Ruby

module Api
module V0
class WebhooksController < ApiController
respond_to :json
before_action :authenticate!
before_action -> { doorkeeper_authorize! :public }, if: -> { doorkeeper_token }
skip_before_action :verify_authenticity_token, only: %w[create destroy]
def index
@webhooks = webhooks_scope.order(:id)
end
def create
@webhook = @user.webhook_endpoints.new(webhook_params)
@webhook.oauth_application_id = doorkeeper_token.application_id if doorkeeper_token
@webhook.save!
render "show", status: :created
end
def show
@webhook = webhooks_scope.find(params[:id])
end
def destroy
webhook = webhooks_scope.find(params[:id])
webhook.destroy!
head :no_content
end
ATTRIBUTES_FOR_SERIALIZATION = %i[id user_id source target_url events created_at].freeze
private_constant :ATTRIBUTES_FOR_SERIALIZATION
private
def webhooks_scope
relation = if doorkeeper_token
@user.webhook_endpoints.for_app(doorkeeper_token.application_id)
else
@user.webhook_endpoints
end
relation.select(ATTRIBUTES_FOR_SERIALIZATION)
end
def webhook_params
params.require(:webhook_endpoint).permit(:target_url, :source, events: [])
end
end
end
end