scinote-web/app/controllers/api/v1/assets_controller.rb

# frozen_string_literal: true

module Api
  module V1
    class AssetsController < BaseController
      before_action :load_team, :load_project, :load_experiment, :load_task, :load_protocol, :load_step
      before_action :load_asset, only: :show

      def index
        attachments = @step.assets
                           .page(params.dig(:page, :number))
                           .per(params.dig(:page, :size))

        render jsonapi: attachments, each_serializer: AssetSerializer
      end

      def show
        render jsonapi: @asset, serializer: AssetSerializer
      end

      def create
        raise PermissionError.new(Asset, :create) unless can_manage_protocol_in_module?(@protocol)

        asset = @step.assets.new(asset_params)
        asset.save!(context: :on_api_upload)

        asset.post_process_file

        render jsonapi: asset,
               serializer: AssetSerializer,
               status: :created
      end

      private

      def asset_params
        raise TypeError unless params.require(:data).require(:type) == 'attachments'

        attr_list = %i(file)
        params.require(:data).require(:attributes).require(attr_list)
        params.require(:data).require(:attributes).permit(attr_list)
      end

      def load_asset
        @asset = @step.assets.find(params.require(:id))
        raise PermissionError.new(Asset, :read) unless can_read_protocol_in_module?(@asset.step.protocol)
      end
    end
  end
end