Sha256: e18a1b2ef6794b9f2641fc5cc6bba821371a6f85bd2b4075014abc21856febfa
Contents?: true
Size: 1.23 KB
Versions: 44
Compression:
Stored size: 1.23 KB
Contents
# frozen_string_literal: true
module Spree
module Api
class AddressesController < Spree::Api::BaseController
before_action :find_order
def show
authorize! :read, @order, order_token
find_address
respond_with(@address)
end
def update
authorize! :update, @order, order_token
find_address
if @order.update_attributes({ "#{@order_source}_attributes" => address_params })
@address = @order.send(@order_source)
respond_with(@address, default_template: :show)
else
@address = @order.send(@order_source)
invalid_resource!(@address)
end
end
private
def address_params
params.require(:address).permit(permitted_address_attributes)
end
def find_order
@order = Spree::Order.find_by!(number: order_id)
end
def find_address
@address = if @order.bill_address_id == params[:id].to_i
@order_source = :bill_address
@order.bill_address
elsif @order.ship_address_id == params[:id].to_i
@order_source = :ship_address
@order.ship_address
else
raise CanCan::AccessDenied
end
end
end
end
end
Version data entries
44 entries across 44 versions & 2 rubygems