openfoodnetwork/app/controllers/concerns/checkout_callbacks.rb

# frozen_string_literal: true

module CheckoutCallbacks
  extend ActiveSupport::Concern

  included do
    # We need pessimistic locking to avoid race conditions.
    # Otherwise we fail on duplicate indexes or end up with negative stock.
    prepend_around_action CurrentOrderLocker, only: [:edit, :update]

    prepend_before_action :check_hub_ready_for_checkout
    prepend_before_action :check_order_cycle_expiry
    prepend_before_action :require_order_cycle
    prepend_before_action :require_distributor_chosen

    before_action :load_order, :associate_user, :load_saved_addresses
    before_action :load_shipping_methods, :load_countries, if: -> { checkout_step == "details"}

    before_action :ensure_order_not_completed
    before_action :ensure_checkout_allowed
    before_action :handle_insufficient_stock
    before_action :check_authorization
    before_action :enable_embedded_shopfront
  end

  private

  def load_order
    @order = current_order
    @order.manual_shipping_selection = true

    redirect_to(main_app.shop_path) && return if redirect_to_shop?
    redirect_to_cart_path && return unless valid_order_line_items?
  end

  def load_saved_addresses
    finder = OpenFoodNetwork::AddressFinder.new(@order.email, @order.customer, spree_current_user)

    @order.bill_address ||= finder.bill_address
    @order.ship_address ||= finder.ship_address
  end

  def load_shipping_methods
    @shipping_methods = Spree::ShippingMethod.for_distributor(@order.distributor).order(:name)
  end

  def load_countries
    @countries = available_countries.map { |c| [c.name, c.id] }
    @countries_with_states = available_countries.map { |c| [c.id, c.states.map { |s| [s.name, s.id] }] }
  end

  def redirect_to_shop?
    !@order ||
      !@order.checkout_allowed? ||
      @order.completed?
  end

  def redirect_to_cart_path
    respond_to do |format|
      format.html do
        redirect_to main_app.cart_path
      end

      format.json do
        render json: { path: main_app.cart_path }, status: :bad_request
      end
    end
  end

  def valid_order_line_items?
    @order.insufficient_stock_lines.empty? &&
      OrderCycleDistributedVariants.new(@order.order_cycle, @order.distributor).
        distributes_order_variants?(@order)
  end

  def ensure_order_not_completed
    redirect_to main_app.cart_path if @order.completed?
  end

  def ensure_checkout_allowed
    redirect_to main_app.cart_path unless @order.checkout_allowed?
  end

  def check_authorization
    authorize!(:edit, current_order, session[:access_token])
  end
end