Contents

module DiscoApp::Concerns::CarrierRequestController

  extend ActiveSupport::Concern

  included do
    before_action :verify_carrier_request
    before_action :find_shop
    before_action :validate_rate_params
  end

  private

    def verify_carrier_request
      head :unauthorized unless carrier_request_signature_is_valid?
    end

    def carrier_request_signature_is_valid?
      return true if Rails.env.development? && DiscoApp.configuration.skip_carrier_request_verification?

      DiscoApp::CarrierRequestService.valid_hmac?(
        request.body.read.to_s,
        ShopifyApp.configuration.secret,
        request.headers['HTTP_X_SHOPIFY_HMAC_SHA256']
      )
    end

    def find_shop
      @shop = DiscoApp::Shop.find_by(shopify_domain: request.headers['HTTP_X_SHOPIFY_SHOP_DOMAIN'])

      head :unauthorized unless @shop
    end

    def validate_rate_params
      head :bad_request unless request_is_valid?
    end

    def request_is_valid?
      return false if params[:rate].blank?
      return false if params[:rate][:origin].blank?
      return false if params[:rate][:destination].blank?
      return false if params[:rate][:items].blank?

      true
    end

end

Version data entries

7 entries across 7 versions & 1 rubygems

Version	Path
disco_app-0.17.0	app/controllers/disco_app/concerns/carrier_request_controller.rb
disco_app-0.18.0	app/controllers/disco_app/concerns/carrier_request_controller.rb
disco_app-0.18.2	app/controllers/disco_app/concerns/carrier_request_controller.rb
disco_app-0.18.3	app/controllers/disco_app/concerns/carrier_request_controller.rb
disco_app-0.18.6	app/controllers/disco_app/concerns/carrier_request_controller.rb
disco_app-0.18.4	app/controllers/disco_app/concerns/carrier_request_controller.rb
disco_app-0.18.1	app/controllers/disco_app/concerns/carrier_request_controller.rb