hackatime/app/controllers/wakatime_mirrors_controller.rb

class WakatimeMirrorsController < ApplicationController
  before_action :set_user
  before_action :require_current_user
  before_action :set_mirror, only: [ :destroy ]

  def create
    @mirror = @user.wakatime_mirrors.build(mirror_params)
    if @mirror.save
      redirect_to my_settings_path, notice: "WakaTime mirror added successfully"
    else
      redirect_to my_settings_path, alert: "Failed to add WakaTime mirror: #{@mirror.errors.full_messages.join(', ')}"
    end
  end

  def destroy
    @mirror.destroy
    redirect_to my_settings_path, notice: "WakaTime mirror removed successfully"
  end

  private

  def set_user
    @user = User.find(params[:user_id])
  end

  def set_mirror
    @mirror = @user.wakatime_mirrors.find(params[:id])
  end

  def mirror_params
    params.require(:wakatime_mirror).permit(:endpoint_url, :encrypted_api_key)
  end

  def require_current_user
    unless @user == current_user
      redirect_to root_path, alert: "You are not authorized to access this page"
    end
  end
end