rosa-build/app/controllers/api/v1/projects_controller.rb

class Api::V1::ProjectsController < Api::V1::BaseController

  before_action :authenticate_user!
  skip_before_action :authenticate_user!, only: [:get_id, :show, :refs_list] if APP_CONFIG['anonymous_access']

  before_action :load_project, except: [:index, :create, :get_id]

  def index
    authorize :project
    @projects = ProjectPolicy::Scope.new(current_user, Project).
      membered.paginate(paginate_params)
  end

  def get_id
    authorize @project = Project.find_by_owner_and_name!(params[:owner], params[:name])
  end

  def show
  end

  def refs_list
    @refs = @project.repo.branches + @project.repo.tags.select{ |t| t.commit }
  end

  def update
    update_subject @project
  end

  def destroy
    destroy_subject @project
  end

  def create
    @project   = Project.new subject_params(Project)
    p_params   = params[:project] || {}
    owner_type = %w(User Group).find{ |t| t == p_params[:owner_type] }
    if owner_type.present?
      @project.owner = owner_type.constantize.find_by(id: p_params[:owner_id])
    else
      @project.owner = nil
    end
    authorize @project
    create_subject @project
  end

  def members
    @members = @project.collaborators.order('uname').paginate(paginate_params)
  end

  def add_member
    add_member_to_subject @project, params[:role]
  end

  def remove_member
    remove_member_from_subject @project
  end

  def update_member
    update_member_in_subject @project
  end

  def fork(is_alias = false)
    owner = (Group.find params[:group_id] if params[:group_id].present?) || current_user
    authorize @project, :show?
    authorize owner, :write? if owner.is_a?(Group)

    if forked = @project.fork(owner, new_name: params[:fork_name], is_alias: is_alias) and forked.valid?
      render_json_response forked, 'Project has been forked successfully'
    else
      render_validation_error forked, 'Project has not been forked'
    end
  end

  def alias
    authorize @project
    fork(true)
  end

  private

  # Private: before_action hook which loads Project.
  def load_project
    authorize @project = Project.find(params[:id])
  end
end