Add strong params to refunds_controller
This commit is contained in:
parent
3adaed06fa
commit
994b04a830
1 changed files with 8 additions and 2 deletions
|
@ -9,14 +9,20 @@ module Nonprofits
|
||||||
|
|
||||||
# post /charges/:charge_id/refunds
|
# post /charges/:charge_id/refunds
|
||||||
def create
|
def create
|
||||||
charge = Qx.select('*').from('charges').where(id: params[:charge_id]).execute.first
|
charge = Qx.select('*').from('charges').where(id: charge_params[:charge_id]).execute.first
|
||||||
params[:refund][:user_id] = current_user.id
|
params[:refund][:user_id] = current_user.id
|
||||||
render_json { InsertRefunds.with_stripe(charge, params['refund']) }
|
render_json { InsertRefunds.with_stripe(charge, charge_params['refund']) }
|
||||||
end
|
end
|
||||||
|
|
||||||
def index
|
def index
|
||||||
charge = current_nonprofit.charges.find(params[:charge_id])
|
charge = current_nonprofit.charges.find(params[:charge_id])
|
||||||
@refunds = charge.refunds
|
@refunds = charge.refunds
|
||||||
end
|
end
|
||||||
|
|
||||||
|
private
|
||||||
|
|
||||||
|
def charge_params
|
||||||
|
params.require(:charge_id, refund: [:amount])
|
||||||
|
end
|
||||||
end
|
end
|
||||||
end
|
end
|
||||||
|
|
Loading…
Reference in a new issue