get basic api working

app/admin/api_keys.rb

@@ -0,0 +1,20 @@
+ActiveAdmin.register ApiKey do
+
+  # See permitted parameters documentation:
+  # https://github.com/activeadmin/activeadmin/blob/master/docs/2-resource-customization.md#setting-up-strong-parameters
+  #
+  # Uncomment all parameters which should be permitted for assignment
+  #
+  #
+  permit_params :access_token, :user
+
+  #
+  # or
+  #
+  # permit_params do
+  #   permitted = [:access_token, :user]
+  #   permitted << :other if params[:action] == 'create' && current_user.admin?
+  #   permitted
+  # end
+
+end

app/controllers/api/v1/application_controller.rb

@@ -3,6 +3,7 @@ class Api::V1::ApplicationController < ApplicationController
 
   respond_to :json
 
+  skip_forgery_protection
   #skip_before_action :require_login, raise: false
   #skip_before_action :check_url
 

app/controllers/api/v1/gift_cards_controller.rb

@@ -1,23 +1,23 @@
 class Api::V1::GiftCardsController < Api::V1::ApplicationController
   def show
-    gift_card = GiftCard.find(params[:id]) 
+    gift_card = GiftCard.find_by(certificate: params[:id]) 
 
     render json: gift_card
   end
 
   # an update automatically means to use up one registration
   def update
-    gift_card = GiftCard.find(params[:id]) 
+    gift_card = GiftCard.find_by(certificate: params[:id])
 
-    if gift_card.registrations_available.to_i == 0
+    if gift_card.registrations_available.to_i <= 0
       render json: {
         error: "No registrations available",
         status: 403
       }, status: 403
       return
     end
 
-    gift_card.update(registrations_available: registrations_available - 1)
+    gift_card.update(registrations_available: gift_card.registrations_available - 1)
     render json: gift_card
   end
 end

app/models/api_key.rb

@@ -1,2 +1,19 @@
 class ApiKey < ApplicationRecord
+  before_create :generate_access_token
+  after_initialize :generate_access_token
+
+  def self.ransackable_attributes(auth_object = nil)
+    ["access_token", "created_at", "id", "id_value", "updated_at", "user"]
+  end
+
+  private
+
+  def generate_access_token
+    return if !new_record? || access_token.present?
+
+    loop do
+      self.access_token ||= SecureRandom.hex
+      break unless self.class.exists?(access_token: access_token)
+    end
+  end
 end

config/routes.rb

@@ -2,14 +2,16 @@
   ActiveAdmin.routes(self)
   # Define your application routes per the DSL in https://guides.rubyonrails.org/routing.html
 
-  # Render dynamic PWA files from app/views/pwa/*
-  get "service-worker" => "rails/pwa#service_worker", as: :pwa_service_worker
-  get "manifest" => "rails/pwa#manifest", as: :pwa_manifest
-
   # Reveal health status that returns 200 if the app boots with no exceptions, otherwise 500.
   # Can be used by load balancers and uptime monitors to verify that the app is live.
   get "monitors/lb" => "monitors#lb"
 
+  namespace :api do
+    namespace :v1 do
+      resources :gift_cards, only: [:show, :update]
+    end
+  end
+
   # Defines the root path route ("/")
-  # root "posts#index"
+  get "/", to: redirect("/admin")
 end