houdini/app/controllers/cards_controller.rb
2019-08-02 19:07:29 +02:00

22 lines
706 B
Ruby
Executable file

# frozen_string_literal: true
# License: AGPL-3.0-or-later WITH Web-Template-Output-Additional-Permission-3.0-or-later
class CardsController < ApplicationController
before_action :authenticate_user!, except: [:create]
# post /cards
def create
acct = Supporter.find(params[:card][:holder_id]).nonprofit.stripe_account_id
render(
JsonResp.new(params) do |_d|
requires(:card).nested do
requires(:name, :stripe_card_token).as_string
requires(:holder_id).as_int
requires(:holder_type).one_of('Supporter')
end
end.when_valid do |d|
InsertCard.with_stripe(d[:card], acct, params[:event_id], current_user)
end
)
end
end