Week 2: Deep dive to the Core of CV

# GET /api/v1/projects
def index
  @projects = if @current_user.nil?
    Project.public_access
  else
    Project.where("author_id = ? OR  project_access_type = ?", @current_user.id, "Public")
  end
  @options[:links] = link_attrs(paginate(@projects), api_v1_projects_url)
  render json: Api::V1::ProjectSerializer.new(paginate(@projects), @options)
end

# Want some details hit this GET /api/v1/projects/:id
def show
  @project = Project.find(params[:id])
  @author = @project.author
  authorize @project, :check_view_access? # you should have access though :)
  render json: Api::V1::ProjectSerializer.new(@project, @options)
end

# Want to change something, PATCH /api/v1/projects/:id
def update
  authorize @project, :check_edit_access? # do you have edit access.. ??
  @project.update!(project_params)
end

# DELETE /api/v1/projects/:id
def destroy
  authorize @project, :author_access? # no need to mention access everywhere, oh i just did :P
  @project.destroy!
  render json: {}, status: :no_content
end

# Wan't your project featured, have a look at those first
# GET /api/v1/projects/featured
def featured_circuits
  @projects = Project.joins(:featured_circuit).all
  render json: Api::V1::ProjectSerializer.new(paginate(@projects), @options)
end

def filter
  @projects = @projects.tagged_with(params[:filter][:tag]) if params.key?(:filter)
end

def sort
  return unless params.key?(:sort)

  @projects = @projects.order(SortingHelper.sort_fields(params[:sort], SORTABLE_FIELDS))
end

# Want to see your groups, GET /api/v1/groups
def index
  @groups = paginate(@current_user.groups)
  # selective including assignments and group_members
  @options[:include] = include_resource if params.key?(:include)
  render json: Api::V1::GroupSerializer.new(@groups, @options)
end

# Mentors and student at same time, not allowed in GSoC but we do at CircuitVerse :P
# GET /api/v1/groups_mentored
def groups_mentored
  @groups = paginate(@current_user.groups_mentored)
  @options[:include] = include_resource if params.key?(:include)
  render json: Api::V1::GroupSerializer.new(@groups, @options)
end

# GET /api/v1/groups/:id
def show
  @group = Group.find(params[:id])
  render json: Api::V1::GroupSerializer.new(@group)
end

# Let's not repeat update and destroy pretty straight forward
# PATCH /api/v1/groups/:id
# DELETE /api/v1/groups/:id

# the promised stuff, include=group_members,assignments
def include_resource
  params[:include].split(",")
                  .map { |resource| resource.strip.to_sym }
                  .select { |resource| ALLOWED_TO_BE_INCLUDED.include?(resource) }
end

# Want to add someone to your group, we've got you covered
# POST /api/v1/groups/:group_id/group_members/
def create
  parse_mails(params[:emails])
  newly_added = @valid_mails - @existing_mails

  newly_added.each do |email|
    user = User.find_by(email: email)
    if user.nil?
      @pending_mails.push(email)
      PendingInvitation.where(group_id: @group.id, email: email).first_or_create
    else
      @added_mails.push(email)
      GroupMember.where(group_id: @group.id, user_id: user.id).first_or_create
    end
  end

  render json: { added: @added_mails, pending: @pending_mails, invalid: @invalid_mails }
end

# Got some reason to delete a student from your group, don't hold back your hands
# DELETE /api/v1/group_members/:id
def destroy
  @group_member = GroupMember.find(params[:id])
  @group_member.destroy!
  render json: {}, status: :no_content
end

# GET /api/v1/groups/:group_id/assignments
def index
  @assignments = paginate(@group.assignments)
  render json: Api::V1::AssignmentSerializer.new(@assignments, @options)
end

# Details time :P GET /api/v1/assignments/:id
def show
  authorize @assignment, :show?
  render json: Api::V1::AssignmentSerializer.new(@assignment)
end

# Don't want this to be repetitive so skipping create, update, destroy
# POST /api/v1/groups/:group_id/assignments
# PATCH /api/v1/assignments/:id
# DELETE /api/v1/assignments/:id

# Assignment closed but wan't to reopen it, stay calm and hit
# GET /api/v1/assignments/:id/reopen
def reopen
  if @assignment.status != "open"
    @assignment.status = "open"
    @assignment.deadline = Time.zone.now + 1.day
    @assignment.save!
    render json: { "message": "Assignment has been reopened!" }
  else
    api_error(status: 409, errors: "Project is already opened!")
  end
end

# Wanna score better than your peers, start early is the key but how do we start
# GET /api/v1/assignments/:id/start
def start
  authorize @assignment   # can't ley you in if you are not for this, don't take it otherwise :P
  @project = @current_user.projects.new
  @project.name = @current_user.name + "/" + @assignment.name
  @project.assignment_id = @assignment.id
  @project.project_access_type = "Private"
  @project.save!
  render json: {
    "message": "Voila! Project set up under name #{@project.name}"
  }
end

class Api::V1::GroupMemberSerializer
  include FastJsonapi::ObjectSerializer

  attributes :group_id, :user_id, :created_at, :updated_at

  # here's how we do it, group_member model has_many :users
  attribute :name do |object|
    object.user.name
  end

  attribute :email do |object|
    object.user.email
  end
end