internetee-registry/app/controllers/api/v1/registrant/registry_locks_controller.rb

require 'serializers/registrant_api/domain'

module Api
  module V1
    module Registrant
      class RegistryLocksController < ::Api::V1::Registrant::BaseController
        before_action :set_domain
        before_action :authorized_to_manage_locks?

        def create
          if @domain.apply_registry_lock
            render json: serialized_domain(@domain)
          else
            render json: { errors: [{ base: ['Domain cannot be locked'] }] },
                   status: :unprocessable_entity
          end
        end

        def destroy
          if @domain.remove_registry_lock
            render json: serialized_domain(@domain)
          else
            render json: { errors: [{ base: ['Domain is not locked'] }] },
                   status: :unprocessable_entity
          end
        end

        private

        def set_domain
          domain_pool = current_registrant_user.domains
          @domain = domain_pool.find_by(uuid: params[:domain_uuid])

          return if @domain
          render json: { errors: [{ base: ['Domain not found'] }] },
                 status: :not_found and return
        end

        def authorized_to_manage_locks?
          return if current_registrant_user.administered_domains.include?(@domain)

          render json: { errors: [
            { base: ['Only administrative contacts can manage registry locks'] }
          ] },
                 status: :unauthorized and return
        end

        def serialized_domain(domain)
          serializer = Serializers::RegistrantApi::Domain.new(domain)
          serializer.to_json
        end
      end
    end
  end
end