#3

backend/app/controllers/thread_posts_controller.rb

@@ -24,7 +24,12 @@ class ThreadPostsController < ApplicationController
   def create
     post = @thread.posts.new(post_params)
     if post.save
-      render json: post, status: :created
+      render json: post.as_json.merge(image_url: (
+          if post.image.attached?
+            Rails.application.routes.url_helpers.rails_blob_url(post.image, only_path: true)
+          else
+            nil
+          end)), status: :created
     else
       render json: { errors: post.errors.full_messages }, status: :unprocessable_entity
     end
@@ -37,6 +42,8 @@ class ThreadPostsController < ApplicationController
   end
 
   def post_params
-    params.require(:post).permit(:name, :body, :password)
+    params.permit(:name, :message, :password, :image).transform_values { |v|
+      v.presence
+    }
   end
 end