Fix credit cards strong params

2026-03-22 05:18:51 +00:00 · 2020-11-07 01:41:33 +00:00
parent ca41bbcee7
commit 7401e34c52
1 changed files with 5 additions and 1 deletions
--- a/app/controllers/api/customers_controller.rb
+++ b/app/controllers/api/customers_controller.rb
@@ -11,11 +11,15 @@ module Api
      @customer = Customer.find(params[:id])
      authorize! :update, @customer

-      if @customer.update(params[:customer])
+      if @customer.update(customer_params)
        render json: @customer, serializer: CustomerSerializer, status: :ok
      else
        invalid_resource!(@customer)
      end
    end
+
+    def customer_params
+      params.require(:customer).permit(:code, :email, :enterprise_id, :allow_charges)
+    end
  end
 end