astuto/app/controllers/boards_controller.rb

class BoardsController < ApplicationController
  include ApplicationHelper
  
  before_action :authenticate_user!, only: [:create, :update, :update_order, :destroy]

  def index
    boards = Board.order(order: :asc)

    render json: boards
  end

  def show
    @board = Board.friendly.find(params[:id])
    @page_title = @board.name
  end

  def create
    board = Board.new(board_params)
    authorize board

    if board.save
      render json: board, status: :created
    else
      render json: {
        error: board.errors.full_messages
      }, status: :unprocessable_entity
    end
  end

  def update
    board = Board.find(params[:id])
    authorize board
    board.assign_attributes(board_params)

    if board.save
      render json: board, status: :ok
    else
      render json: {
        error: board.errors.full_messages
      }, status: :unprocessable_entity
    end
  end

  def destroy
    board = Board.find(params[:id])
    authorize board

    if board.destroy
      render json: {
        id: params[:id]
      }, status: :accepted
    else
      render json: {
        error: board.errors.full_messages
      }, status: :unprocessable_entity
    end
  end

  def update_order
    authorize Board
    
    workflow_output = ReorderWorkflow.new(
      entity_classname: Board,
      column_name: 'order',
      entity_id: params[:board][:id],
      src_index: params[:board][:src_index],
      dst_index: params[:board][:dst_index]
    ).run

    if workflow_output
      render json: workflow_output
    else
      render json: {
        error: t("errors.board.update_order")
      }, status: :unprocessable_entity
    end
  end

  private
    def board_params
      params
        .require(:board)
        .permit(:name, :description, :slug)
    end
end