class Cards::CommentsController < ApplicationController
  include CardScoped

  before_action :set_comment, only: %i[ show edit update destroy ]
  before_action :ensure_authorship, only: %i[ edit update destroy ]

  def create
    @card.capture Comment.new(comment_params)
  end

  def show
  end

  def edit
  end

  def update
    @comment.update! comment_params
  end

  def destroy
    @comment.destroy
    redirect_to @card
  end

  private
    def set_comment
      @comment = @card.comments.find(params[:id])
    end

    def ensure_authorship
      head :forbidden if Current.user != @comment.creator
    end

    def comment_params
      params.require(:comment).permit(:body)
    end
end