astuto/app/controllers/post_statuses_controller.rb

class PostStatusesController < ApplicationController
  include ApplicationHelper
  
  before_action :authenticate_user!, only: [:create, :update, :update_order, :destroy]

  def index
    post_statuses = PostStatus.order(order: :asc)

    render json: post_statuses
  end

  def create
    post_status = PostStatus.new(post_status_params)
    authorize post_status

    if post_status.save
      render json: post_status, status: :created
    else
      render json: {
        error: post_status.errors.full_messages
      }, status: :unprocessable_entity
    end
  end

  def update
    post_status = PostStatus.find(params[:id])
    authorize post_status
    post_status.assign_attributes(post_status_params)

    if post_status.save
      render json: post_status, status: :ok
    else
      render json: {
        error: post_status.errors.full_messages
      }, status: :unprocessable_entity
    end
  end

  def destroy
    post_status = PostStatus.find(params[:id])
    authorize post_status

    if post_status.destroy
      render json: {
        id: params[:id]
      }, status: :accepted
    else
      render json: {
        error: post_status.errors.full_messages
      }, status: :unprocessable_entity
    end
  end

  def update_order
    authorize PostStatus
    
    workflow_output = ReorderWorkflow.new(
      entity_classname: PostStatus,
      column_name: 'order',
      entity_id: params[:post_status][:id],
      src_index: params[:post_status][:src_index],
      dst_index: params[:post_status][:dst_index]
    ).run

    if workflow_output
      render json: workflow_output
    else
      render json: {
        error: t("backend.errors.post_status.update_order")
      }, status: :unprocessable_entity
    end
  end

  private
    def post_status_params
      params
        .require(:post_status)
        .permit(:name, :color, :show_in_roadmap)
    end
end