Strong parameters

parameters.rb

class UsersController < ApplicationController
  def create
    @user = User.new(user_params)
    # blablabla
  end
  
  private
  
  def user_params
    params.require(:user).permit(:user_id, :username, :name, :password)
  end
end

class User
  class << self
    def custom_create(params)
      create(permitted_parameters(params))
      # blablabla
    end
    
    private
    
    def permitted_parameters(params)
      params = params.symbolize_keys
      params[:user_id] = params[:id]
      params.extract!(
        :user_id,
        :username,
        :name,
        :password
      )
    end
  end
end