class Api::ReportsController < Api::BaseController # POST /api/reports def create @report = Report.new(report_params) if @report.save render_success(data: @report) else render_error(400, object: @report) end end private def report_params params.permit( :field_one, :field_two, :field_three, attachments: [] # this is where the signed_ids will end up ) end end