NPO-Accounting/houdini
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add strong params to refunds_controller

Browse source
This commit is contained in:
Eric Schultz 2019-11-05 11:43:48 -06:00
parent 3adaed06fa
commit 994b04a830
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
app/controllers/nonprofits/refunds_controller.rb
View file

@ -9,14 +9,20 @@ module Nonprofits
# post /charges/:charge_id/refunds
def create
charge = Qx.select('*').from('charges').where(id: params[:charge_id]).execute.first
charge = Qx.select('*').from('charges').where(id: charge_params[:charge_id]).execute.first
params[:refund][:user_id] = current_user.id
render_json { InsertRefunds.with_stripe(charge, params['refund']) }
render_json { InsertRefunds.with_stripe(charge, charge_params['refund']) }
end
def index
charge = current_nonprofit.charges.find(params[:charge_id])
@refunds = charge.refunds
end
private
def charge_params
params.require(:charge_id, refund: [:amount])
end
end
end