Use dynamic list for allowed user preference params

2024-05-23 00:23:42 +02:00
parent b541e95bb7
commit bad3b7a2be
3 changed files with 18 additions and 5 deletions
--- a/app/controllers/settings_controller.rb
+++ b/app/controllers/settings_controller.rb
@@ -147,11 +147,9 @@ class SettingsController < ApplicationController
    end

    def user_params
-      params.require(:user).permit(:display_name, :avatar, preferences: [
-        :lightning_notify_sats_received,
-        :remotestorage_notify_auth_created,
-        :xmpp_exchange_contacts_with_invitees
-      ])
+      params.require(:user).permit(
+        :display_name, :avatar, preferences: UserPreferences.pref_keys
+      )
    end

    def email_params