Contents

module Pay
  module Webhooks
    class AsaasController < Pay::ApplicationController
      if Rails.application.config.action_controller.default_protect_from_forgery
        skip_before_action :verify_authenticity_token
      end

      def create
        if valid_signature?(request.headers["asaas-access-token"])
          queue_event(verify_params.as_json)
          head :ok
        else
          head :bad_request
        end
      rescue Pay::Asaas::Error => e
        log_error(e)
        head :bad_request
      end

      private

      def queue_event(event)
        event_type = event["event"]&.downcase
        return unless Pay::Webhooks.delegator.listening?("asaas.#{event_type}")

        record = Pay::Webhook.create!(processor: :asaas, event_type: event_type, event: event)
        Pay::Webhooks::ProcessJob.perform_later(record)
      end

      def valid_signature?(signature)
        signature == Pay::Asaas.webhook_access_key
      end

      def log_error(e)
        logger.error e.message
        e.backtrace.each { |line| logger.error "  #{line}" }
      end

      def verify_params
        params.except(:action, :controller).permit!
      end
    end
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
pay-asaas-0.1.0.pre.alpha	app/controllers/pay/webhooks/asaas_controller.rb