implement current_user

app/controllers/application_controller.rb

@@ -1,2 +1,5 @@
 class ApplicationController < ActionController::API
+  def current_user
+    @current_user ||= User.find_by(id: request.cookies['user_id'])
+  end
 end

app/controllers/posts_controller.rb

@@ -27,6 +27,9 @@ class PostsController < ApplicationController
 
   # Only allow a list of trusted parameters through.
   def post_params
-    params.require(:post).permit(:content, :user_id, :quoted_post_id)
+    {
+      user: current_user,
+      **params.require(:post).permit(:content, :quoted_post_id)
+    }
   end
 end

app/controllers/user_follows_controller.rb

@@ -21,6 +21,9 @@ class UserFollowsController < ApplicationController
 
   # Only allow a list of trusted parameters through.
   def user_follow_params
-    params.require(:user_follow).permit(:follower_id, :followed_id)
+    {
+      follower: current_user,
+      **params.require(:user_follow).permit(:followed_id)
+    }
   end
 end