class VouchersController < ApplicationController
  before_action :set_voucher, only: [:show, :update, :destroy]
  skip_before_action :authorize_request, only: [:index, :show, :create]

  # GET /vouchers
  def index
    @vouchers = Voucher.all

    render json: @vouchers
  end

  # GET /vouchers/1
  def show
    render json: @voucher
  end

  # POST /vouchers
  def create
    # Logic for creating a voucher
    params[:voucher]
    if Voucher.exists?(vouchee: params[:voucher]) 
      @voucher = Voucher.new(voucher_params)
    end

    if @voucher.save
      render json: @voucher, status: :created, location: @voucher
    else
      render json: @voucher.errors, status: :unprocessable_entity
    end
  end

  # PATCH/PUT /vouchers/1
  def update
    if @voucher.update(voucher_params)
      render json: @voucher
    else
      render json: @voucher.errors, status: :unprocessable_entity
    end
  end

  # DELETE /vouchers/1
  def destroy
    @voucher.destroy
  end

  private
    # Use callbacks to share common setup or constraints between actions.
    def set_voucher
      @voucher = Voucher.find(params[:id])
    end

    # Only allow a trusted parameter "white list" through.
    def voucher_params
      params.permit(:voucher, :vouchee, :accepted)
    end
end