20 lines
509 B
Ruby
20 lines
509 B
Ruby
class API::V1::ProceduresController < APIController
|
|
before_action :fetch_procedure_and_check_token
|
|
|
|
def show
|
|
render json: { procedure: ProcedureSerializer.new(@procedure).as_json }
|
|
end
|
|
|
|
private
|
|
|
|
def fetch_procedure_and_check_token
|
|
@procedure = Procedure.for_api.find(params[:id])
|
|
|
|
if !valid_token_for_administrateur?(@procedure.administrateurs)
|
|
render json: {}, status: :unauthorized
|
|
end
|
|
|
|
rescue ActiveRecord::RecordNotFound
|
|
render json: {}, status: :not_found
|
|
end
|
|
end
|