5 Commits

Author	SHA1	Message	Date
Matt-Yorkley	8a18a4de66	Clear up redirecting logic and path building	2022-01-29 10:08:51 +00:00
Matt-Yorkley	ec3dadfe68	Remove reference to params[:token] in PaymentsController ... There seemingly shouldn't be any case where this controller actually receives a token param. There's only one place that creates urls that direct to this controller (Stripe authorization emails), and they do not attach any kind of token to the URL. If the user is not logged in here (or doesn't have an access_token in their session), they get asked to log in. Note to future devs: see previous commit for additional context.	2021-12-16 13:41:04 +00:00
Andy Brett	334b9b520a	removed deprecated calls to force_ssl; rely on config.force_ssl	2021-06-24 11:58:33 -07:00
Andy Brett	ce4621858d	base authorization on the payment's order	2021-01-21 09:18:29 -08:00
Andy Brett	d9b27bc556	move controller and mailer outside of spree namespace; use haml in template	2021-01-21 09:18:29 -08:00