change permitted params on verification update action

QutEcoacoustics · Feb 7, 2025 · 90c03ee · 90c03ee
1 parent ab0638a
commit 90c03ee
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 3 deletions.
diff --git a/app/controllers/verifications_controller.rb b/app/controllers/verifications_controller.rb
@@ -57,7 +57,7 @@ def update
     do_load_resource
     do_authorize_instance
 
-    if @verification.update(verification_params)
+    if @verification.update(verification_update_params)
       respond_show
     else
       respond_change_fail
@@ -88,6 +88,12 @@ def verification_params
     )
   end
 
+  def verification_update_params
+    params.require(:verification).permit(
+      :confirmed
+    )
+  end
+
   def get_audio_event #rubocop:disable Naming/AccessorMethodName
     @audio_event = AudioEvent.find(params[:audio_event_id]) if params&.key?(:audio_event_id)
   end

diff --git a/spec/api/verifications_spec.rb b/spec/api/verifications_spec.rb
@@ -67,7 +67,13 @@
         model_sent_as_parameter_in_body
         response(200, 'successful') do
           schema_for_single
-          auto_send_model
+          send_model do
+            {
+              'verification' => {
+                confirmed: 'false'
+              }
+            }
+          end
           run_test! do
             expect_id_matches(verification)
           end
@@ -78,7 +84,13 @@
         model_sent_as_parameter_in_body
         response(200, 'successful') do
           schema_for_single
-          auto_send_model
+          send_model do
+            {
+              'verification' => {
+                confirmed: 'false'
+              }
+            }
+          end
           run_test! do
             expect_id_matches(verification)
           end