openfoodnetwork/app/controllers/spree/checkout_controller.rb

require 'open_food_network/address_finder'

module Spree
  class CheckoutController < Spree::StoreController
    include CheckoutHelper

    ssl_required

    before_filter :load_order

    before_filter :ensure_order_not_completed
    before_filter :ensure_checkout_allowed
    before_filter :ensure_sufficient_stock_lines

    before_filter :associate_user
    before_filter :check_authorization
    before_filter :enable_embedded_shopfront

    helper 'spree/orders'

    rescue_from Spree::Core::GatewayError, :with => :rescue_from_spree_gateway_error

    def edit
      flash.keep
      redirect_to main_app.checkout_path
    end

    before_filter :check_registration, :except => [:registration, :update_registration]

    helper 'spree/users'

    def registration
      @user = Spree::User.new
    end

    def update_registration
      fire_event("spree.user.signup", :order => current_order)
      # hack - temporarily change the state to something other than cart so we can validate the order email address
      current_order.state = current_order.checkout_steps.first
      current_order.update_attribute(:email, params[:order][:email])
      # Run validations, then check for errors
      # valid? may return false if the address state validations are present
      current_order.valid?
      if current_order.errors[:email].blank?
        redirect_to checkout_path
      else
        flash[:registration_error] = t(:email_is_invalid, :scope => [:errors, :messages])
        @user = Spree::User.new
        render 'registration'
      end
    end

    private

    def skip_state_validation?
      %w(registration update_registration).include?(params[:action])
    end

    # Introduces a registration step whenever the +registration_step+ preference is true.
    def check_registration
      return unless Spree::Auth::Config[:registration_step]
      return if spree_current_user or current_order.email
      store_location
      redirect_to spree.checkout_registration_path
    end

    # Overrides the equivalent method defined in Spree::Core.  This variation of the method will ensure that users
    # are redirected to the tokenized order url unless authenticated as a registered user.
    def completion_route
      return order_path(@order) if spree_current_user
      spree.token_order_path(@order, @order.token)
    end

    def load_order
      @order = current_order
      redirect_to main_app.cart_path && return unless @order

      if params[:state]
        redirect_to checkout_state_path(@order.state) if @order.can_go_to_state?(params[:state])
        @order.state = params[:state]
      end
      setup_for_current_state
    end

    def ensure_checkout_allowed
      redirect_to main_app.cart_path unless @order.checkout_allowed?
    end

    def ensure_order_not_completed
      redirect_to main_app.cart_path if @order.completed?
    end

    def ensure_sufficient_stock_lines
      if @order.insufficient_stock_lines.present?
        flash[:error] = Spree.t(:inventory_error_flash_for_insufficient_quantity)
        redirect_to main_app.cart_path
      end
    end

    def setup_for_current_state
      method_name = :"before_#{@order.state}"
      send(method_name) if respond_to?(method_name, true)
    end

    # Adapted from spree_last_address gem: https://github.com/TylerRick/spree_last_address
    # Originally, we used a forked version of this gem, but encountered strange errors where
    # it worked in dev but only intermittently in staging/prod.
    def before_address
      associate_user

      finder = OpenFoodNetwork::AddressFinder.new(@order.email)

      @order.bill_address = finder.bill_address
      @order.ship_address = finder.ship_address
    end

    def before_delivery
      return if params[:order].present?

      packages = @order.shipments.map(&:to_package)
      @differentiator = Spree::Stock::Differentiator.new(@order, packages)
    end

    def before_payment
      current_order.payments.destroy_all if request.put?
    end

    def rescue_from_spree_gateway_error
      flash[:error] = Spree.t(:spree_gateway_error_flash_for_checkout)
      render :edit
    end

    def check_authorization
      authorize!(:edit, current_order, session[:access_token])
    end
  end
end