Contents

module DiscoApp::Concerns::WebhooksController

  extend ActiveSupport::Concern

  included do
    before_action :verify_webhook
    protect_from_forgery with: :null_session
  end

  def process_webhook
    # Get the topic and domain for this webhook.
    topic = request.headers['HTTP_X_SHOPIFY_TOPIC']
    shopify_domain = request.headers['HTTP_X_SHOPIFY_SHOP_DOMAIN']

    # Ensure a domain was provided in the headers.
    return head :bad_request unless shopify_domain

    # Try to find a matching background job task for the given topic using class name.
    job_class = DiscoApp::WebhookService.find_job_class(topic)

    # Return bad request if we couldn't match a job class.
    return head :bad_request if job_class.blank?

    # Decode the body data and enqueue the appropriate job.
    data = JSON.parse(request.body.read).with_indifferent_access
    job_class.perform_later(shopify_domain, data)

    render body: nil
  end

  private

    def verify_webhook
      return head :unauthorized unless webhook_is_valid?

      request.body.rewind
    end

    def webhook_is_valid?
      return true if Rails.env.development? && DiscoApp.configuration.skip_webhook_verification?

      DiscoApp::WebhookService.valid_hmac?(
        request.body.read.to_s,
        ShopifyApp.configuration.secret,
        request.headers['HTTP_X_SHOPIFY_HMAC_SHA256']
      )
    end

end

Version data entries

7 entries across 7 versions & 1 rubygems

Version	Path
disco_app-0.17.0	app/controllers/disco_app/concerns/webhooks_controller.rb
disco_app-0.18.0	app/controllers/disco_app/concerns/webhooks_controller.rb
disco_app-0.18.2	app/controllers/disco_app/concerns/webhooks_controller.rb
disco_app-0.18.3	app/controllers/disco_app/concerns/webhooks_controller.rb
disco_app-0.18.6	app/controllers/disco_app/concerns/webhooks_controller.rb
disco_app-0.18.4	app/controllers/disco_app/concerns/webhooks_controller.rb
disco_app-0.18.1	app/controllers/disco_app/concerns/webhooks_controller.rb