add event private_list api

app/controllers/api/event_controller.rb

@@ -275,7 +275,24 @@ def get
   end
 
   def list
-    @events = Event.all
+    group_id = params[:group_id]
+    @events = Event.where(status: "published").where(group_id: group_id)
+    @events = @events.where(display: ["normal", "pinned"])
+    @events = @events.order(start_time: :desc).limit(10)
+    render json: @events, status: :ok
+  end
+
+  def private_list
+    profile = current_profile!
+    group_id = params[:group_id]
+    @events = Event.where(group_id: group_id)
+
+    @events = @events.where(owner: profile)
+    .or(@events.where(group_id: Membership.where(profile_id: profile.id, role: ["owner", "manager"]).pluck(:group_id)))
+    .or(@events.where(id: EventRole.where(profile_id: profile.id).pluck(:event_id)))
+
+    @events = @events.where(status: "published").where(display: ["hidden"])
+    @events = @events.order(start_time: :desc).limit(10)
     render json: @events, status: :ok
   end
 

config/routes.rb

@@ -45,6 +45,7 @@
 
     get "event/get", to: "event#get"
     get "event/list", to: "event#list"
+    get "event/private_list", to: "event#private_list"
     post "event/create", to: "event#create"
     post "event/update", to: "event#update"
     post "event/unpublish", to: "event#unpublish"

test/controllers/api/event_controller_test.rb

@@ -240,4 +240,14 @@ class Api::EventControllerTest < ActionDispatch::IntegrationTest
     assert_equal Event.all.count, response_events.count
   end 
 
+  test "api#event/private_list" do
+    profile = Profile.find_by(handle: "cookie")
+    auth_token = profile.gen_auth_token
+
+    get api_event_private_list_url, params: { auth_token: auth_token }
+    p response.body
+    assert_response :success
+
+    response_events = JSON.parse(response.body)
+  end
 end