mirror of
https://github.com/openfoodfoundation/openfoodnetwork
synced 2026-02-04 22:16:08 +00:00
50 lines
1.8 KiB
Ruby
50 lines
1.8 KiB
Ruby
module Admin
|
|
class StripeAccountsController < BaseController
|
|
protect_from_forgery except: :destroy_from_webhook
|
|
|
|
def destroy
|
|
stripe_account = StripeAccount.find(params[:id])
|
|
authorize! :destroy, stripe_account
|
|
|
|
if stripe_account.deauthorize_and_destroy
|
|
flash[:success] = "Stripe account disconnected."
|
|
else
|
|
flash[:error] = "Failed to disconnect Stripe."
|
|
end
|
|
|
|
redirect_to main_app.edit_admin_enterprise_path(stripe_account.enterprise)
|
|
rescue ActiveRecord::RecordNotFound
|
|
flash[:error] = "Failed to disconnect Stripe."
|
|
redirect_to spree.admin_path
|
|
end
|
|
|
|
def destroy_from_webhook
|
|
# TODO is there a sensible way to confirm this webhook call is actually from Stripe?
|
|
event = Stripe::Event.construct_from(params)
|
|
return render nothing: true, status: 400 unless event.type == "account.application.deauthorized"
|
|
|
|
destroyed = StripeAccount.where(stripe_user_id: event.user_id).destroy_all
|
|
if destroyed.any?
|
|
render text: "Account #{event.user_id} deauthorized", status: 200
|
|
else
|
|
render nothing: true, status: 400
|
|
end
|
|
end
|
|
|
|
def status
|
|
authorize! :stripe_account, Enterprise.find_by_id(params[:enterprise_id])
|
|
return render json: { status: :stripe_disabled } unless Spree::Config.stripe_connect_enabled
|
|
stripe_account = StripeAccount.find_by_enterprise_id(params[:enterprise_id])
|
|
return render json: { status: :account_missing } unless stripe_account
|
|
|
|
begin
|
|
status = Stripe::Account.retrieve(stripe_account.stripe_user_id)
|
|
attrs = %i[id business_name charges_enabled]
|
|
render json: status.to_hash.slice(*attrs).merge( status: :connected)
|
|
rescue Stripe::APIError
|
|
render json: { status: :access_revoked }
|
|
end
|
|
end
|
|
end
|
|
end
|