caboose-cms 0.7.85 → 0.8.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (193) hide show
  1. checksums.yaml +4 -4
  2. data/app/assets/javascripts/caboose/{admin_edit_order.js → admin_edit_invoice.js} +332 -189
  3. data/app/assets/javascripts/caboose/cart.js +15 -15
  4. data/app/assets/javascripts/caboose/cart_old.js +2 -2
  5. data/app/assets/javascripts/caboose/checkout/authnet_payment_method_controller.js +120 -0
  6. data/app/assets/javascripts/caboose/checkout/billing_address_controller.js +85 -0
  7. data/app/assets/javascripts/caboose/checkout/cart_controller.js +257 -0
  8. data/app/assets/javascripts/caboose/checkout/checkout_controller.js +258 -0
  9. data/app/assets/javascripts/caboose/checkout/gift_cards_controller.js +57 -0
  10. data/app/assets/javascripts/caboose/checkout/shipping_address_controller.js +86 -0
  11. data/app/assets/javascripts/caboose/checkout/shipping_method_controller.js +121 -0
  12. data/app/assets/javascripts/caboose/checkout/stripe_payment_method_controller.js +155 -0
  13. data/app/assets/javascripts/caboose/checkout_login_register.js +2 -2
  14. data/app/assets/javascripts/caboose/checkout_module.js +8 -8
  15. data/app/assets/javascripts/caboose/checkout_old.js +151 -0
  16. data/app/assets/javascripts/caboose/{checkout_payment.js → checkout_payment_authnet.js} +1 -1
  17. data/app/assets/javascripts/caboose/checkout_payment_stripe.js +212 -0
  18. data/app/assets/javascripts/caboose/checkout_shipping.js +1 -1
  19. data/app/assets/javascripts/caboose/jquery.payment.js +1 -0
  20. data/app/assets/javascripts/caboose/model/attribute.js +3 -2
  21. data/app/assets/javascripts/caboose/model/bound_control.js +56 -14
  22. data/app/assets/javascripts/caboose/model/bound_select.js +9 -11
  23. data/app/assets/javascripts/caboose/model/bound_select_simple.js +215 -0
  24. data/app/assets/javascripts/caboose/model/bound_text.js +7 -8
  25. data/app/assets/javascripts/caboose/{my_account_edit_order.js → my_account_edit_invoice.js} +55 -55
  26. data/app/assets/javascripts/caboose/united_states.js +65 -0
  27. data/app/assets/stylesheets/caboose/{my_account_edit_order.css.scss → my_account_edit_invoice.css.scss} +1 -1
  28. data/app/assets/templates/caboose/cart/line_items.jst.ejs +3 -3
  29. data/app/assets/templates/caboose/checkout/line_items.jst.ejs +7 -7
  30. data/app/controllers/caboose/ab_options_controller.rb +4 -4
  31. data/app/controllers/caboose/ab_variants_controller.rb +5 -5
  32. data/app/controllers/caboose/admin_controller.rb +0 -6
  33. data/app/controllers/caboose/application_controller.rb +16 -15
  34. data/app/controllers/caboose/billing_addresses_controller.rb +22 -22
  35. data/app/controllers/caboose/block_type_sources_controller.rb +8 -8
  36. data/app/controllers/caboose/block_types_controller.rb +2 -42
  37. data/app/controllers/caboose/blocks_controller.rb +26 -26
  38. data/app/controllers/caboose/calendars_controller.rb +5 -5
  39. data/app/controllers/caboose/cart_controller.rb +55 -36
  40. data/app/controllers/caboose/categories_controller.rb +78 -76
  41. data/app/controllers/caboose/checkout_controller.rb +313 -340
  42. data/app/controllers/caboose/checkout_controller_bak.rb +620 -0
  43. data/app/controllers/caboose/domains_controller.rb +5 -5
  44. data/app/controllers/caboose/event_groups_controller.rb +26 -4
  45. data/app/controllers/caboose/events_controller.rb +7 -6
  46. data/app/controllers/caboose/fonts_controller.rb +2 -2
  47. data/app/controllers/caboose/gift_cards_controller.rb +113 -139
  48. data/app/controllers/caboose/google_spreadsheets_controller.rb +1 -1
  49. data/app/controllers/caboose/{order_packages_controller.rb → invoice_packages_controller.rb} +49 -49
  50. data/app/controllers/caboose/{order_reports_controller.rb → invoice_reports_controller.rb} +11 -13
  51. data/app/controllers/caboose/invoice_transactions_controller.rb +35 -0
  52. data/app/controllers/caboose/invoices_controller.rb +328 -0
  53. data/app/controllers/caboose/line_items_controller.rb +35 -34
  54. data/app/controllers/caboose/login_controller.rb +7 -7
  55. data/app/controllers/caboose/login_logs_controller.rb +4 -4
  56. data/app/controllers/caboose/logout_controller.rb +3 -1
  57. data/app/controllers/caboose/media_categories_controller.rb +9 -9
  58. data/app/controllers/caboose/media_controller.rb +21 -46
  59. data/app/controllers/caboose/modal_controller.rb +4 -3
  60. data/app/controllers/caboose/modification_values_controller.rb +6 -6
  61. data/app/controllers/caboose/modifications_controller.rb +7 -6
  62. data/app/controllers/caboose/my_account_controller.rb +2 -2
  63. data/app/controllers/caboose/my_account_invoices_controller.rb +166 -0
  64. data/app/controllers/caboose/my_account_line_items_controller.rb +15 -13
  65. data/app/controllers/caboose/page_custom_fields_controller.rb +9 -8
  66. data/app/controllers/caboose/page_permissions_controller.rb +3 -3
  67. data/app/controllers/caboose/pages_controller.rb +132 -135
  68. data/app/controllers/caboose/permissions_controller.rb +8 -7
  69. data/app/controllers/caboose/post_categories_controller.rb +22 -7
  70. data/app/controllers/caboose/post_custom_fields_controller.rb +9 -8
  71. data/app/controllers/caboose/posts_controller.rb +35 -43
  72. data/app/controllers/caboose/product_images_controller.rb +5 -5
  73. data/app/controllers/caboose/products_controller.rb +53 -47
  74. data/app/controllers/caboose/redirects_controller.rb +7 -7
  75. data/app/controllers/caboose/register_controller.rb +2 -2
  76. data/app/controllers/caboose/retargeting_controller.rb +2 -61
  77. data/app/controllers/caboose/reviews_controller.rb +1 -0
  78. data/app/controllers/caboose/roles_controller.rb +10 -9
  79. data/app/controllers/caboose/settings_controller.rb +9 -7
  80. data/app/controllers/caboose/shipping_addresses_controller.rb +18 -18
  81. data/app/controllers/caboose/shipping_packages_controller.rb +24 -21
  82. data/app/controllers/caboose/sites_controller.rb +35 -25
  83. data/app/controllers/caboose/smtp_controller.rb +3 -3
  84. data/app/controllers/caboose/sns_controller.rb +6 -6
  85. data/app/controllers/caboose/social_controller.rb +5 -6
  86. data/app/controllers/caboose/stackable_groups_controller.rb +10 -8
  87. data/app/controllers/caboose/station_controller.rb +3 -3
  88. data/app/controllers/caboose/store_controller.rb +93 -87
  89. data/app/controllers/caboose/subscriptions_controller.rb +153 -0
  90. data/app/controllers/caboose/users_controller.rb +25 -22
  91. data/app/controllers/caboose/variants_controller.rb +72 -93
  92. data/app/controllers/caboose/vendors_controller.rb +35 -32
  93. data/app/mailers/caboose/{orders_mailer.rb → invoices_mailer.rb} +21 -21
  94. data/app/mailers/caboose/login_mailer.rb +3 -3
  95. data/app/models/caboose/authnet.rb +295 -195
  96. data/app/models/caboose/comment_routes.rb +68 -41
  97. data/app/models/caboose/core_plugin.rb +1 -1
  98. data/app/models/caboose/discount.rb +14 -3
  99. data/app/models/caboose/domain_constraint.rb +11 -3
  100. data/app/models/caboose/gift_card.rb +8 -8
  101. data/app/models/caboose/invoice.rb +706 -0
  102. data/app/models/caboose/invoice_discount.rb +10 -0
  103. data/app/models/caboose/invoice_package.rb +76 -0
  104. data/app/models/caboose/{order_package_calculator.rb → invoice_package_calculator.rb} +20 -20
  105. data/app/models/caboose/{order_pdf.rb → invoice_pdf.rb} +30 -30
  106. data/app/models/caboose/{order_reporter.rb → invoice_reporter.rb} +5 -5
  107. data/app/models/caboose/invoice_transaction.rb +169 -0
  108. data/app/models/caboose/line_item.rb +11 -8
  109. data/app/models/caboose/payment_processors/authorizenet.rb +15 -15
  110. data/app/models/caboose/payment_processors/base.rb +3 -3
  111. data/app/models/caboose/{pending_orders_pdf.rb → pending_invoices_pdf.rb} +31 -31
  112. data/app/models/caboose/product.rb +2 -4
  113. data/app/models/caboose/schema.rb +159 -111
  114. data/app/models/caboose/shipping_calculator.rb +41 -139
  115. data/app/models/caboose/smtp_config.rb +2 -1
  116. data/app/models/caboose/store_config.rb +7 -7
  117. data/app/models/caboose/subscription.rb +32 -0
  118. data/app/models/caboose/tax_calculator.rb +36 -36
  119. data/app/models/caboose/user.rb +6 -0
  120. data/app/models/caboose/user_subscription.rb +142 -0
  121. data/app/models/caboose/wish_list.rb +14 -0
  122. data/app/models/caboose/wish_list_line_item.rb +13 -0
  123. data/app/views/caboose/blocks/_products.html.erb +10 -13
  124. data/app/views/caboose/checkout/_address_form.html.erb +14 -14
  125. data/app/views/caboose/checkout/_billing_form.html.erb +3 -3
  126. data/app/views/caboose/checkout/_cart.html.erb +7 -7
  127. data/app/views/caboose/checkout/_cart_old.html.erb +9 -9
  128. data/app/views/caboose/checkout/_confirm.html.erb +9 -9
  129. data/app/views/caboose/checkout/_order_discount.html.erb +3 -3
  130. data/app/views/caboose/checkout/_shipping_address.html.erb +1 -1
  131. data/app/views/caboose/checkout/_shipping_method.html.erb +1 -1
  132. data/app/views/caboose/checkout/addresses.html.erb +10 -10
  133. data/app/views/caboose/checkout/authnet.html.erb +34 -0
  134. data/app/views/caboose/checkout/authnet_response_handler.html.erb +3 -0
  135. data/app/views/caboose/checkout/checkout.html.erb +100 -0
  136. data/app/views/caboose/checkout/confirm_without_payment.html.erb +6 -6
  137. data/app/views/caboose/checkout/discount.html.erb +1 -1
  138. data/app/views/caboose/checkout/index.html.erb +4 -4
  139. data/app/views/caboose/checkout/payment_authnet.html.erb +140 -0
  140. data/app/views/caboose/checkout/payment_stripe.html.erb +95 -0
  141. data/app/views/caboose/checkout/shipping.html.erb +4 -4
  142. data/app/views/caboose/checkout/thanks.html.erb +3 -3
  143. data/app/views/caboose/gift_cards/admin_edit.html.erb +19 -19
  144. data/app/views/caboose/gift_cards/admin_index.html.erb +9 -9
  145. data/app/views/caboose/{orders → invoices}/_admin_footer.html.erb +0 -0
  146. data/app/views/caboose/{orders → invoices}/_admin_header.html.erb +0 -0
  147. data/app/views/caboose/{orders/_quickbooks_order.html.erb → invoices/_quickbooks_invoice.html.erb} +0 -0
  148. data/app/views/caboose/{orders → invoices}/admin_city_report.html.erb +1 -1
  149. data/app/views/caboose/invoices/admin_delete_form.html.erb +18 -0
  150. data/app/views/caboose/{orders → invoices}/admin_edit.html.erb +14 -14
  151. data/app/views/caboose/{orders → invoices}/admin_index.html.erb +24 -24
  152. data/app/views/caboose/{orders → invoices}/admin_invalid_order.html.erb +2 -2
  153. data/app/views/caboose/{orders → invoices}/admin_new.html.erb +7 -7
  154. data/app/views/caboose/{orders → invoices}/admin_print.html.erb +15 -15
  155. data/app/views/caboose/{orders → invoices}/admin_summary_report.html.erb +4 -4
  156. data/app/views/caboose/{orders_mailer/customer_new_order.html.erb → invoices_mailer/customer_new_invoice.html.erb} +21 -21
  157. data/app/views/caboose/invoices_mailer/customer_payment_authorization.html.erb +5 -0
  158. data/app/views/caboose/{orders_mailer → invoices_mailer}/customer_status_updated.html.erb +22 -22
  159. data/app/views/caboose/{orders_mailer/fulfillment_new_order.html.erb → invoices_mailer/fulfillment_new_invoice.html.erb} +23 -23
  160. data/app/views/caboose/{orders_mailer/shipping_order_ready.html.erb → invoices_mailer/shipping_invoice_ready.html.erb} +0 -0
  161. data/app/views/caboose/{orders_mailer → invoices_mailer}/test_email.html.erb +0 -0
  162. data/app/views/caboose/line_items/admin_new.html.erb +1 -1
  163. data/app/views/caboose/login_mailer/forgot_password_email.html.erb +2 -3
  164. data/app/views/caboose/my_account/index.html.erb +1 -1
  165. data/app/views/caboose/{my_account_orders → my_account_invoices}/authnet_relay.html.erb +0 -0
  166. data/app/views/caboose/{my_account_orders → my_account_invoices}/authnet_response.html.erb +0 -0
  167. data/app/views/caboose/{my_account_orders → my_account_invoices}/edit.html.erb +9 -9
  168. data/app/views/caboose/my_account_invoices/index.html.erb +36 -0
  169. data/app/views/caboose/{my_account_orders → my_account_invoices}/payment_form.html.erb +10 -10
  170. data/app/views/caboose/post_categories/admin_index.html.erb +1 -1
  171. data/app/views/caboose/sites/admin_edit.html.erb +1 -1
  172. data/app/views/caboose/store/admin_edit_general.html.erb +5 -3
  173. data/app/views/caboose/store/admin_edit_packages.html.erb +6 -6
  174. data/app/views/caboose/store/admin_edit_shipping.html.erb +3 -3
  175. data/app/views/caboose/store/admin_edit_tax.html.erb +1 -1
  176. data/app/views/caboose/subscriptions/admin_edit.html.erb +82 -0
  177. data/app/views/caboose/subscriptions/admin_index.html.erb +45 -0
  178. data/config/routes.rb +1 -759
  179. data/config/routes_old.rb +759 -0
  180. data/lib/caboose/version.rb +1 -1
  181. data/lib/tasks/caboose.rake +41 -15
  182. metadata +101 -61
  183. data/app/controllers/caboose/my_account_orders_controller.rb +0 -165
  184. data/app/controllers/caboose/orders_controller.rb +0 -310
  185. data/app/models/caboose/order.rb +0 -479
  186. data/app/models/caboose/order_discount.rb +0 -10
  187. data/app/models/caboose/order_package.rb +0 -133
  188. data/app/models/caboose/order_transaction.rb +0 -41
  189. data/app/models/caboose/payment_processors/payscape.rb +0 -94
  190. data/app/views/caboose/checkout/payment.html.erb +0 -146
  191. data/app/views/caboose/my_account_orders/index.html.erb +0 -36
  192. data/app/views/caboose/orders/admin_delete_form.html.erb +0 -21
  193. data/app/views/caboose/orders_mailer/customer_payment_authorization.html.erb +0 -5
@@ -2,12 +2,13 @@ module Caboose
2
2
  class ModalController < Caboose::ApplicationController
3
3
  layout 'caboose/application'
4
4
 
5
- # GET /modal
5
+ # @route GET /modal
6
6
  def layout
7
7
  render 'layouts/caboose/modal', layout: false
8
8
  end
9
-
10
- # GET /modal/:url
9
+
10
+ # @route GET /modal/:url
11
+ # @route_constraints {:url => /.*/}
11
12
  def index
12
13
  @url = "/#{params[:url]}"
13
14
  @url << "?#{request.query_string}" if request.query_string
@@ -1,7 +1,7 @@
1
1
  module Caboose
2
2
  class ModificationValuesController < Caboose::ApplicationController
3
3
 
4
- # GET /admin/products/:product_id/modifications/:mod_id/values/json
4
+ # @route GET /admin/products/:product_id/modifications/:mod_id/values/json
5
5
  def admin_json
6
6
  return if !user_is_allowed('products', 'view')
7
7
 
@@ -9,13 +9,13 @@ module Caboose
9
9
  render :json => m.modification_values
10
10
  end
11
11
 
12
- # GET /admin/products/:product_id/modifications/:mod_id/values/:id/json
12
+ # @route GET /admin/products/:product_id/modifications/:mod_id/values/:id/json
13
13
  def admin_json_single
14
14
  mv = ModificationValue.find(params[:id])
15
15
  render :json => mv
16
16
  end
17
17
 
18
- # PUT /admin/products/:product_id/modifications/:mod_id/values/:id
18
+ # @route PUT /admin/products/:product_id/modifications/:mod_id/values/:id
19
19
  def admin_update
20
20
  return if !user_is_allowed('products', 'edit')
21
21
 
@@ -45,7 +45,7 @@ module Caboose
45
45
  render :json => resp
46
46
  end
47
47
 
48
- # POST /admin/products/:product_id/modifications/:mod_id/values
48
+ # @route POST /admin/products/:product_id/modifications/:mod_id/values
49
49
  def admin_add
50
50
  return if !user_is_allowed('products', 'add')
51
51
 
@@ -64,7 +64,7 @@ module Caboose
64
64
  render :json => resp
65
65
  end
66
66
 
67
- # DELETE /admin/products/:product_id/modifications/:mod_id/values/:id
67
+ # @route DELETE /admin/products/:product_id/modifications/:mod_id/values/:id
68
68
  def admin_delete
69
69
  return if !user_is_allowed('products', 'delete')
70
70
  mv = ModificationValue.find(params[:id]).destroy
@@ -73,7 +73,7 @@ module Caboose
73
73
  })
74
74
  end
75
75
 
76
- # PUT /admin/products/:product_id/modifications/:mod_id/values/sort-order
76
+ # @route PUT /admin/products/:product_id/modifications/:mod_id/values/sort-order
77
77
  def admin_update_sort_order
78
78
  params[:modification_value_ids].each_with_index do |mv_id, i|
79
79
  mv = ModificationValue.where(:id => mv_id).first
@@ -1,7 +1,7 @@
1
1
  module Caboose
2
2
  class ModificationsController < Caboose::ApplicationController
3
3
 
4
- # GET /admin/products/:product_id/modifications/json
4
+ # @route GET /admin/products/:product_id/modifications/json
5
5
  def admin_json
6
6
  return if !user_is_allowed('products', 'view')
7
7
 
@@ -9,13 +9,13 @@ module Caboose
9
9
  render :json => p.modifications.as_json(:include => :modification_values)
10
10
  end
11
11
 
12
- # GET /admin/products/:product_id/modifications/:id/json
12
+ # @route GET /admin/products/:product_id/modifications/:id/json
13
13
  def admin_json_single
14
14
  m = Modification.find(params[:id])
15
15
  render :json => m.as_json(:include => :modification_values)
16
16
  end
17
17
 
18
- # PUT /admin/products/:product_id/modifications/:id
18
+ # @route PUT /admin/products/:product_id/modifications/:id
19
19
  def admin_update
20
20
  return if !user_is_allowed('products', 'edit')
21
21
 
@@ -32,7 +32,7 @@ module Caboose
32
32
  render :json => resp
33
33
  end
34
34
 
35
- # POST /admin/products/:product_id/modifications
35
+ # @route POST /admin/products/:product_id/modifications
36
36
  def admin_add
37
37
  return if !user_is_allowed('products', 'add')
38
38
 
@@ -49,7 +49,7 @@ module Caboose
49
49
  render :json => resp
50
50
  end
51
51
 
52
- # DELETE /admin/products/:product_id/modifications/:id
52
+ # @route DELETE /admin/products/:product_id/modifications/:id
53
53
  def admin_delete
54
54
  return if !user_is_allowed('products', 'delete')
55
55
  m = Modification.find(params[:id]).destroy
@@ -58,7 +58,8 @@ module Caboose
58
58
  })
59
59
  end
60
60
 
61
- # PUT /admin/products/:product_id/modifications/sort-order
61
+ # @route_priority 1
62
+ # @route PUT /admin/products/:product_id/modifications/sort-order
62
63
  def admin_update_sort_order
63
64
  params[:modification_ids].each_with_index do |mod_id, i|
64
65
  m = Modification.where(:id => mod_id).first
@@ -1,13 +1,13 @@
1
1
  module Caboose
2
2
  class MyAccountController < Caboose::ApplicationController
3
3
 
4
- # GET /my-account
4
+ # @route GET /my-account
5
5
  def index
6
6
  return if !verify_logged_in
7
7
  @user = logged_in_user
8
8
  end
9
9
 
10
- # PUT /my-account
10
+ # @route PUT /my-account
11
11
  def update
12
12
  return if !logged_in?
13
13
 
@@ -0,0 +1,166 @@
1
+ module Caboose
2
+ class MyAccountInvoicesController < Caboose::ApplicationController
3
+
4
+ helper :authorize_net
5
+ protect_from_forgery :except => :authnet_relay
6
+
7
+ # @route GET /my-account/invoices
8
+ def index
9
+ return if !verify_logged_in
10
+
11
+ @pager = Caboose::PageBarGenerator.new(params, {
12
+ 'customer_id' => logged_in_user.id,
13
+ 'status' => [Invoice::STATUS_PENDING, Invoice::STATUS_CANCELED, Invoice::STATUS_READY_TO_SHIP, Invoice::STATUS_SHIPPED]
14
+ }, {
15
+ 'model' => 'Caboose::Invoice',
16
+ 'sort' => 'invoice_number',
17
+ 'desc' => 1,
18
+ 'base_url' => '/my-account/invoices',
19
+ 'use_url_params' => false
20
+ })
21
+ @invoices = @pager.all_items
22
+ end
23
+
24
+ # @route GET /my-account/invoices/:id/payment-form
25
+ def payment_form
26
+ return if !logged_in?
27
+
28
+ @invoice = Invoice.find(params[:id])
29
+ if @invoice.customer_id != logged_in_user.id
30
+ @error = "The given invoice does not belong to you."
31
+ render :file => 'caboose/extras/error'
32
+ return
33
+ end
34
+
35
+ if @invoice.financial_status != Invoice::FINANCIAL_STATUS_PENDING
36
+ @error = "This invoice does not require payment at this time."
37
+ render :file => 'caboose/extras/error'
38
+ return
39
+ end
40
+
41
+ sc = @site.store_config
42
+ case sc.pp_name
43
+ when 'authorize.net'
44
+
45
+ @sim_transaction = AuthorizeNet::SIM::Transaction.new(
46
+ sc.authnet_api_login_id,
47
+ sc.authnet_api_transaction_key,
48
+ @invoice.total,
49
+ :relay_response => 'TRUE',
50
+ :relay_url => "#{sc.authnet_relay_domain}/my-account/invoices/authnet-relay",
51
+ :transaction_type => 'AUTH_ONLY',
52
+ :test => sc.pp_testing
53
+ )
54
+ @request = request
55
+ @show_relay = params[:show_relay] && params[:show_relay].to_i == 1
56
+
57
+ when 'stripe'
58
+ # TODO: Implement manual invoice payment for stripe
59
+
60
+ end
61
+ render :layout => false
62
+ end
63
+
64
+ # @route GET /my-account/invoices/:id/json
65
+ def invoice_json
66
+ return if !logged_in?
67
+
68
+ invoice = Invoice.find(params[:id])
69
+ if invoice.customer_id != logged_in_user.id
70
+ render :json => { :error => "The given invoice does not belong to you." }
71
+ return
72
+ end
73
+
74
+ if invoice.shipping_address_id.nil?
75
+ sa = Address.create
76
+ invoice.shipping_address_id = sa.id
77
+ invoice.save
78
+ end
79
+ render :json => invoice.as_json(:include => [
80
+ { :line_items => { :include => { :variant => { :include => :product }}}},
81
+ { :invoice_packages => { :include => [:shipping_package, :shipping_method] }},
82
+ { :discounts => { :include => :gift_card }},
83
+ :customer,
84
+ :shipping_address,
85
+ :billing_address,
86
+ :invoice_transactions
87
+ ])
88
+ end
89
+
90
+ # @route GET /my-account/invoices/authnet-relay
91
+ # @route POST /my-account/invoices/authnet-relay
92
+ def authnet_relay
93
+ Caboose.log("Authorize.net relay for my account, invoice #{params[:x_invoice_id]}")
94
+
95
+ invoice = Caboose::Invoice.find(params[:x_invoice_num])
96
+ ot = Caboose::InvoiceTransaction.new(
97
+ :invoice_id => invoice.id,
98
+ :date_processed => DateTime.now.utc,
99
+ :transaction_type => Caboose::InvoiceTransaction::TYPE_AUTHORIZE
100
+ )
101
+ ot.success = params[:x_response_code] && params[:x_response_code] == '1'
102
+ ot.transaction_id = params[:x_trans_id] if params[:x_trans_id]
103
+ ot.auth_code = params[:x_auth_code] if params[:x_auth_code]
104
+ ot.response_code = params[:x_response_code] if params[:x_response_code]
105
+ ot.amount = invoice.total
106
+ ot.save
107
+
108
+ error = nil
109
+ if ot.success
110
+ invoice.financial_status = Invoice::FINANCIAL_STATUS_AUTHORIZED
111
+ invoice.status = Invoice::STATUS_PENDING if invoice.status == Invoice::STATUS_CART
112
+ invoice.invoice_number = @site.store_config.next_invoice_number if invoice.invoice_number.nil?
113
+
114
+ # Send out emails
115
+ InvoicesMailer.configure_for_site(@site.id).customer_new_invoice(invoice).deliver
116
+
117
+ # Emit invoice event
118
+ Caboose.plugin_hook('invoice_authorized', invoice)
119
+ else
120
+ invoice.financial_status = Invoice::FINANCIAL_STATUS_PENDING
121
+ error = "There was a problem processing your payment."
122
+ end
123
+
124
+ invoice.save
125
+
126
+ @url = params[:x_after_relay]
127
+ @url << (ot.success ? "?success=1" : "?error=#{error}")
128
+
129
+ render :layout => false
130
+ end
131
+
132
+ # @route GET /my-account/invoices/:id/authnet-response
133
+ # @route POST /my-account/invoices/:id/authnet-response
134
+ def authnet_response
135
+ Caboose.log("Authorize.net response for my account, invoice #{params[:id]}")
136
+
137
+ @resp = Caboose::StdClass.new
138
+ @resp.success = true if params[:success]
139
+ @resp.error = params[:error] if params[:error]
140
+
141
+ # Go ahead and capture funds if the invoice only contained downloadable items
142
+ @invoice = Invoice.find(params[:id])
143
+ if !@invoice.has_shippable_items?
144
+ capture_resp = @invoice.capture_funds
145
+ if capture_resp.error
146
+ @resp.success = false
147
+ @resp.error = capture_resp.error
148
+ end
149
+ end
150
+ render :layout => false
151
+ end
152
+
153
+ # @route GET /my-account/invoices/:id
154
+ def edit
155
+ return if !verify_logged_in
156
+
157
+ @invoice = Invoice.find(params[:id])
158
+ if @invoice.customer_id != logged_in_user.id
159
+ @error = "The given invoice does not belong to you."
160
+ render :file => 'caboose/extras/error'
161
+ return
162
+ end
163
+ end
164
+
165
+ end
166
+ end
@@ -1,37 +1,39 @@
1
1
  module Caboose
2
2
  class MyAccountLineItemsController < Caboose::ApplicationController
3
-
4
- # GET /my-account/orders/:order_id/line-items
3
+
4
+ # @route GET /my-account/invoices/:invoice_id/line-items
5
5
  def index
6
6
  return if !verify_logged_in
7
- @order = Order.find(params[:order_id])
8
- if @order.customer_id != logged_in_user.id
9
- @error = "The given order does not belong to you."
7
+ @invoice = Invoice.find(params[:invoice_id])
8
+ if @invoice.customer_id != logged_in_user.id
9
+ @error = "The given invoice does not belong to you."
10
10
  render :file => 'caboose/extras/error'
11
11
  return
12
12
  end
13
13
  end
14
14
 
15
- # GET /my-account/orders/:order_id/line-items/:id
15
+ # @route_priority 2
16
+ # @route GET /my-account/invoices/:invoice_id/line-items/:id
16
17
  def edit
17
18
  return if !verify_logged_in
18
19
 
19
- @order = Order.find(params[:order_id])
20
+ @invoice = Invoice.find(params[:invoice_id])
20
21
  @line_item = LineItem.find(params[:id])
21
- if @order.customer_id != logged_in_user.id
22
- @error = "The given order does not belong to you."
22
+ if @invoice.customer_id != logged_in_user.id
23
+ @error = "The given invoice does not belong to you."
23
24
  render :file => 'caboose/extras/error'
24
25
  return
25
26
  end
26
27
  end
27
28
 
28
- # GET /my-account/orders/:order_id/line-items/:id/download
29
+ # @route_priority 1
30
+ # @route GET /my-account/invoices/:invoice_id/line-items/:id/download
29
31
  def download
30
32
  return if !verify_logged_in
31
33
 
32
- order = Order.find(params[:order_id])
33
- if order.customer_id != logged_in_user.id
34
- @error = "The given order does not belong to you."
34
+ invoice = Invoice.find(params[:invoice_id])
35
+ if invoice.customer_id != logged_in_user.id
36
+ @error = "The given invoice does not belong to you."
35
37
  render :file => 'caboose/extras/error'
36
38
  return
37
39
  end
@@ -3,13 +3,13 @@ module Caboose
3
3
 
4
4
  helper :application
5
5
 
6
- # GET /admin/page-custom-fields
6
+ # @route GET /admin/page-custom-fields
7
7
  def admin_index
8
8
  return if !user_is_allowed_to 'view', 'pagecustomfields'
9
9
  render :layout => 'caboose/admin'
10
10
  end
11
11
 
12
- # GET /admin/page-custom-fields/json
12
+ # @route GET /admin/page-custom-fields/json
13
13
  def admin_json
14
14
  return if !user_is_allowed_to 'view', 'pagecustomfields'
15
15
  pager = self.fields_pager
@@ -33,21 +33,21 @@ module Caboose
33
33
  })
34
34
  end
35
35
 
36
- # GET /admin/page-custom-fields/:id/json
36
+ # @route GET /admin/page-custom-fields/:id/json
37
37
  def admin_json_single
38
38
  return if !user_is_allowed_to 'view', 'pagecustomfields'
39
39
  f = PageCustomField.find(params[:id])
40
40
  render :json => f
41
41
  end
42
42
 
43
- # GET /admin/page-custom-fields/:id
43
+ # @route GET /admin/page-custom-fields/:id
44
44
  def admin_edit
45
45
  return if !user_is_allowed('pagecustomfields', 'edit')
46
46
  @page_custom_field = PageCustomField.find(params[:id])
47
47
  render :layout => 'caboose/admin'
48
48
  end
49
49
 
50
- # PUT /admin/page-custom-fields/:id
50
+ # @route PUT /admin/page-custom-fields/:id
51
51
  def admin_update
52
52
  return if !user_is_allowed('pagecustomfields', 'edit')
53
53
 
@@ -68,7 +68,7 @@ module Caboose
68
68
  render :json => resp
69
69
  end
70
70
 
71
- # POST /admin/page-custom-fields
71
+ # @route POST /admin/page-custom-fields
72
72
  def admin_add
73
73
  return if !user_is_allowed('pagecustomfields', 'add')
74
74
 
@@ -90,7 +90,7 @@ module Caboose
90
90
  render :json => resp
91
91
  end
92
92
 
93
- # DELETE /admin/page-custom-fields/:id
93
+ # @route DELETE /admin/page-custom-fields/:id
94
94
  def admin_delete
95
95
  return if !user_is_allowed('pagecustomfields', 'edit')
96
96
 
@@ -108,7 +108,8 @@ module Caboose
108
108
  render :json => { 'redirect' => '/admin/page-custom-fields' }
109
109
  end
110
110
 
111
- # GET /admin/page-custom-fields/:field-options
111
+ # @route_priority 1
112
+ # @route GET /admin/page-custom-fields/:field-options
112
113
  def admin_options
113
114
  return if !user_is_allowed_to 'view', 'pagecustomfields'
114
115
  options = []
@@ -2,7 +2,7 @@
2
2
  module Caboose
3
3
  class PagePermissionsController < ApplicationController
4
4
 
5
- # POST /admin/page-permissions
5
+ # @route POST /admin/page-permissions
6
6
  def admin_add
7
7
  return unless user_is_allowed('pages', 'add')
8
8
 
@@ -19,8 +19,8 @@ module Caboose
19
19
  render :json => resp
20
20
  end
21
21
 
22
- # DELETE /admin/page-permissions
23
- # DELETE /admin/page-permissions/:id
22
+ # @route DELETE /admin/page-permissions
23
+ # @route DELETE /admin/page-permissions/:id
24
24
  def admin_delete
25
25
  return unless user_is_allowed('pages', 'edit')
26
26
 
@@ -6,9 +6,15 @@ module Caboose
6
6
 
7
7
  def before_action
8
8
  @page = Page.page_with_uri(request.host_with_port, '/admin')
9
- end
9
+ end
10
+
11
+ # @route GET /pages/:id/redirect
12
+ def redirect
13
+ @page = Page.find(params[:id])
14
+ redirect_to "/#{@page.uri}"
15
+ end
10
16
 
11
- # GET /pages/:id
17
+ # @route GET /pages/:id
12
18
  def show
13
19
 
14
20
  # Find the page with an exact URI match
@@ -127,17 +133,11 @@ module Caboose
127
133
 
128
134
  end
129
135
 
130
- # GET /pages/1/redirect
131
- def redirect
132
- @page = Page.find(params[:id])
133
- redirect_to "/#{@page.uri}"
134
- end
135
-
136
136
  #===========================================================================
137
137
  # Admin actions
138
138
  #===========================================================================
139
139
 
140
- # GET /admin/pages
140
+ # @route GET /admin/pages
141
141
  def admin_index
142
142
  return if !user_is_allowed('pages', 'view')
143
143
  @domain = Domain.where(:domain => request.host_with_port).first
@@ -148,7 +148,7 @@ module Caboose
148
148
  render :layout => 'caboose/admin'
149
149
  end
150
150
 
151
- # GET /admin/pages/new
151
+ # @route GET /admin/pages/new
152
152
  def admin_new
153
153
  return unless user_is_allowed('pages', 'add')
154
154
  @parent_id = params[:parent_id] ? params[:parent_id] : Page.where(:site_id => @site.id, :parent_id => -1).first.id
@@ -156,15 +156,7 @@ module Caboose
156
156
  render :layout => 'caboose/admin'
157
157
  end
158
158
 
159
- # GET /admin/pages/:id/edit
160
- def admin_edit_general
161
- return if !user_is_allowed('pages', 'edit')
162
- #return if !Page.is_allowed(logged_in_user, params[:id], 'edit')
163
- @page = Page.find(params[:id])
164
- render :layout => 'caboose/admin'
165
- end
166
-
167
- # GET /admin/page/:id/custom-fields
159
+ # @route GET /admin/pages/:id/custom-fields
168
160
  def admin_edit_custom_fields
169
161
  return if !user_is_allowed('pages', 'edit')
170
162
  @page = Page.find(params[:id])
@@ -172,14 +164,14 @@ module Caboose
172
164
  render :layout => 'caboose/modal'
173
165
  end
174
166
 
175
- # GET /admin/pages/:id/permissions
167
+ # @route GET /admin/pages/:id/permissions
176
168
  def admin_edit_permissions
177
169
  return unless user_is_allowed('pages', 'edit')
178
170
  @page = Page.find(params[:id])
179
171
  render :layout => 'caboose/admin'
180
172
  end
181
173
 
182
- # PUT /admin/pages/:id/update-child-permissions
174
+ # @route PUT /admin/pages/:id/update-child-permissions
183
175
  def admin_update_child_permissions
184
176
  return unless user_is_allowed('pages', 'edit')
185
177
  page = Page.find(params[:id])
@@ -189,7 +181,7 @@ module Caboose
189
181
  render :json => { :success => true }
190
182
  end
191
183
 
192
- # GET /admin/pages/:id/content
184
+ # @route GET /admin/pages/:id/content
193
185
  def admin_edit_content
194
186
  return unless user_is_allowed('pages', 'edit')
195
187
  @page = Page.find(params[:id])
@@ -200,14 +192,14 @@ module Caboose
200
192
  @editing = true
201
193
  end
202
194
 
203
- # GET /admin/pages/:id/layout
195
+ # @route GET /admin/pages/:id/layout
204
196
  def admin_edit_layout
205
197
  return unless user_is_allowed('pages', 'edit')
206
198
  @page = Page.find(params[:id])
207
199
  render :layout => 'caboose/admin'
208
200
  end
209
201
 
210
- # PUT /admin/pages/:id/layout
202
+ # @route PUT /admin/pages/:id/layout
211
203
  def admin_update_layout
212
204
  return unless user_is_allowed('pages', 'edit')
213
205
  bt = BlockType.find(params[:block_type_id])
@@ -219,14 +211,14 @@ module Caboose
219
211
  render :json => resp
220
212
  end
221
213
 
222
- # GET /admin/pages/:id/block-order
214
+ # @route GET /admin/pages/:id/block-order
223
215
  def admin_edit_block_order
224
216
  return unless user_is_allowed('pages', 'edit')
225
217
  @page = Page.find(params[:id])
226
218
  render :layout => 'caboose/admin'
227
219
  end
228
220
 
229
- # PUT /admin/pages/:id/block-order
221
+ # @route PUT /admin/pages/:id/block-order
230
222
  def admin_update_block_order
231
223
  return unless user_is_allowed('pages', 'edit')
232
224
  block_ids = params[:block_ids]
@@ -238,42 +230,42 @@ module Caboose
238
230
  render :json => true
239
231
  end
240
232
 
241
- # GET /admin/pages/:id/new-blocks
233
+ # @route GET /admin/pages/:id/new-blocks
242
234
  def admin_new_blocks
243
235
  return unless user_is_allowed('pages', 'edit')
244
236
  @page = Page.find(params[:id])
245
237
  render :layout => 'caboose/admin'
246
238
  end
247
239
 
248
- # GET /admin/pages/:id/css
240
+ # @route GET /admin/pages/:id/css
249
241
  def admin_edit_css
250
242
  return unless user_is_allowed('pages', 'edit')
251
243
  @page = Page.find(params[:id])
252
244
  render :layout => 'caboose/admin'
253
245
  end
254
246
 
255
- # GET /admin/pages/:id/js
247
+ # @route GET /admin/pages/:id/js
256
248
  def admin_edit_js
257
249
  return unless user_is_allowed('pages', 'edit')
258
250
  @page = Page.find(params[:id])
259
251
  render :layout => 'caboose/admin'
260
252
  end
261
253
 
262
- # GET /admin/pages/:id/seo
254
+ # @route GET /admin/pages/:id/seo
263
255
  def admin_edit_seo
264
256
  return unless user_is_allowed('pages', 'edit')
265
257
  @page = Page.find(params[:id])
266
258
  render :layout => 'caboose/admin'
267
259
  end
268
260
 
269
- # GET /admin/pages/:id/child-order
261
+ # @route GET /admin/pages/:id/child-order
270
262
  def admin_edit_child_sort_order
271
263
  return unless user_is_allowed('pages', 'edit')
272
264
  @page = Page.find(params[:id])
273
265
  render :layout => 'caboose/admin'
274
266
  end
275
267
 
276
- # PUT /admin/pages/:id/child-order
268
+ # @route PUT /admin/pages/:id/child-order
277
269
  def admin_update_child_sort_order
278
270
  return unless user_is_allowed('pages', 'edit')
279
271
  @page = Page.find(params[:id])
@@ -288,7 +280,67 @@ module Caboose
288
280
  render :json => true
289
281
  end
290
282
 
291
- # POST /admin/pages
283
+ # @route GET /admin/pages/:id/duplicate
284
+ def admin_duplicate_form
285
+ return unless user_is_allowed('pages', 'add')
286
+ @page = Page.find(params[:id])
287
+ render :layout => 'caboose/admin'
288
+ end
289
+
290
+ # @route POST /admin/pages/:id/duplicate
291
+ def admin_duplicate
292
+ return unless user_is_allowed('pages', 'add')
293
+
294
+ resp = Caboose::StdClass.new
295
+
296
+ p = Page.where(:id => params[:id]).first
297
+ site_id = params[:site_id]
298
+ parent_id = params[:parent_id]
299
+ block_type_id = params[:block_type_id]
300
+ child_block_type_id = params[:child_block_type_id]
301
+ duplicate_children = params[:duplicate_children] ? true : false
302
+
303
+ if p.nil? then resp.error = "Invalid page"
304
+ elsif site_id.nil? then resp.error = "Invalid site"
305
+ elsif parent_id.nil? then resp.error = "Invalid parent"
306
+ else
307
+ resp.new_id = p.duplicate(site_id, parent_id, duplicate_children, block_type_id, child_block_type_id)
308
+ resp.success = true
309
+ end
310
+
311
+ render :json => resp
312
+ end
313
+
314
+ # @route GET /admin/pages/:id/delete
315
+ def admin_delete_form
316
+ return unless user_is_allowed('pages', 'delete')
317
+ @page = Page.find(params[:id])
318
+ render :layout => 'caboose/admin'
319
+ end
320
+
321
+ # @route GET /admin/pages/:id/uri
322
+ def admin_page_uri
323
+ return unless user_is_allowed('pages', 'view')
324
+ p = Page.find(params[:id])
325
+ render :json => { 'uri' => p.uri }
326
+ end
327
+
328
+ # @route GET /admin/pages/:id/sitemap
329
+ def admin_sitemap
330
+ return unless user_is_allowed('pages', 'delete')
331
+ @page = Page.find(params[:id])
332
+ render :layout => 'caboose/admin'
333
+ end
334
+
335
+ # @route GET /admin/pages/:id
336
+ def admin_edit_general
337
+ return if !user_is_allowed('pages', 'edit')
338
+ #return if !Page.is_allowed(logged_in_user, params[:id], 'edit')
339
+ @page = Page.find(params[:id])
340
+ render :layout => 'caboose/admin'
341
+ end
342
+
343
+ # @route POST /admin/pages
292
344
  def admin_create
293
345
  return unless user_is_allowed('pages', 'add')
294
346
 
@@ -351,7 +403,7 @@ module Caboose
351
403
  render json: resp
352
404
  end
353
405
 
354
- # PUT /admin/pages/:id
406
+ # @route PUT /admin/pages/:id
355
407
  def admin_update
356
408
  return unless user_is_allowed('pages', 'edit')
357
409
 
@@ -473,45 +525,7 @@ module Caboose
473
525
  render json: resp
474
526
  end
475
527
 
476
- # GET /admin/pages/:page_id/duplicate
477
- def admin_duplicate_form
478
- return unless user_is_allowed('pages', 'add')
479
- @page = Page.find(params[:id])
480
- render :layout => 'caboose/admin'
481
- end
482
-
483
- # POST /admin/pages/:page_id/duplicate
484
- def admin_duplicate
485
- return unless user_is_allowed('pages', 'add')
486
-
487
- resp = Caboose::StdClass.new
488
-
489
- p = Page.where(:id => params[:id]).first
490
- site_id = params[:site_id]
491
- parent_id = params[:parent_id]
492
- block_type_id = params[:block_type_id]
493
- child_block_type_id = params[:child_block_type_id]
494
- duplicate_children = params[:duplicate_children] ? true : false
495
-
496
- if p.nil? then resp.error = "Invalid page"
497
- elsif site_id.nil? then resp.error = "Invalid site"
498
- elsif parent_id.nil? then resp.error = "Invalid parent"
499
- else
500
- resp.new_id = p.duplicate(site_id, parent_id, duplicate_children, block_type_id, child_block_type_id)
501
- resp.success = true
502
- end
503
-
504
- render :json => resp
505
- end
506
-
507
- # GET /admin/pages/:page_id/delete
508
- def admin_delete_form
509
- return unless user_is_allowed('pages', 'delete')
510
- @page = Page.find(params[:id])
511
- render :layout => 'caboose/admin'
512
- end
513
-
514
- # DELETE /admin/pages/1
528
+ # @route DELETE /admin/pages/:id
515
529
  def admin_delete
516
530
  return unless user_is_allowed('pages', 'delete')
517
531
  p = Page.find(params[:id])
@@ -522,27 +536,52 @@ module Caboose
522
536
  })
523
537
  render json: resp
524
538
  end
525
-
526
- # GET /admin/pages/:page_id/sitemap
527
- def admin_sitemap
528
- return unless user_is_allowed('pages', 'delete')
529
- @page = Page.find(params[:id])
530
- render :layout => 'caboose/admin'
531
- end
532
-
533
- # GET /admin/pages/sitemap-options
534
- def admin_sitemap_options
535
- parent_id = params[:parent_id]
536
- p = nil
537
- if params[:site_id] && @site.is_master && user_is_allowed('admin', 'admin')
538
- p = parent_id ? Page.find(parent_id) : Page.index_page(params[:site_id].to_i)
539
- else
540
- p = parent_id ? Page.find(parent_id) : Page.index_page(@site.id)
539
+
540
+ # @route GET /admin/pages/:field-options
541
+ # @route GET /admin/pages/:id/:field-options
542
+ def admin_options
543
+ if !user_is_allowed('pages', 'edit')
544
+ render :json => false
545
+ return
541
546
  end
542
- options = []
543
- if p
544
- sitemap_helper(p, options)
545
- end
547
+
548
+ case params[:field]
549
+ when nil
550
+
551
+ when 'sitemap'
552
+ parent_id = params[:parent_id]
553
+ p = nil
554
+ if params[:site_id] && @site.is_master && user_is_allowed('admin', 'admin')
555
+ p = parent_id ? Page.find(parent_id) : Page.index_page(params[:site_id].to_i)
556
+ else
557
+ p = parent_id ? Page.find(parent_id) : Page.index_page(@site.id)
558
+ end
559
+ options = []
560
+ if p
561
+ sitemap_helper(p, options)
562
+ end
563
+ when 'robots'
564
+ options = [
565
+ { 'value' => 'index' , 'text' => 'index' },
566
+ { 'value' => 'noindex' , 'text' => 'noindex' },
567
+ { 'value' => 'follow' , 'text' => 'follow' },
568
+ { 'value' => 'nofollow' , 'text' => 'nofollow' },
569
+ { 'value' => 'nosnippet' , 'text' => 'nosnippet' },
570
+ { 'value' => 'noodp' , 'text' => 'noodp' },
571
+ { 'value' => 'noarchive' , 'text' => 'noarchive' }
572
+ ]
573
+ when 'format'
574
+ options = [
575
+ { 'value' => 'html', 'text' => 'html' },
576
+ { 'value' => 'text', 'text' => 'text' },
577
+ { 'value' => 'ruby', 'text' => 'ruby' }
578
+ ]
579
+ when 'block'
580
+ options = []
581
+ Block.where("parent_id is null and page_id = ?", params[:id]).reorder(:sort_order).all.each do |b|
582
+ admin_block_options_helper(options, b, "")
583
+ end
584
+ end
546
585
  render :json => options
547
586
  end
548
587
 
@@ -552,48 +591,6 @@ module Caboose
552
591
  sitemap_helper(kid, options, prefix + ' - ')
553
592
  end
554
593
  end
555
-
556
- # GET /admin/pages/robots-options
557
- def admin_robots_options
558
- options = [
559
- { 'value' => 'index' , 'text' => 'index' },
560
- { 'value' => 'noindex' , 'text' => 'noindex' },
561
- { 'value' => 'follow' , 'text' => 'follow' },
562
- { 'value' => 'nofollow' , 'text' => 'nofollow' },
563
- { 'value' => 'nosnippet' , 'text' => 'nosnippet' },
564
- { 'value' => 'noodp' , 'text' => 'noodp' },
565
- { 'value' => 'noarchive' , 'text' => 'noarchive' }
566
- ]
567
- render json: options
568
- end
569
-
570
- # GET /admin/pages/format-options
571
- def admin_content_format_options
572
- options = [
573
- { 'value' => 'html', 'text' => 'html' },
574
- { 'value' => 'text', 'text' => 'text' },
575
- { 'value' => 'ruby', 'text' => 'ruby' }
576
- ]
577
- render json: options
578
- end
579
-
580
- # GET /admin/pages/:id/uri
581
- def admin_page_uri
582
- return unless user_is_allowed('pages', 'view')
583
- p = Page.find(params[:id])
584
- render :json => { 'uri' => p.uri }
585
- end
586
-
587
- # GET /admin/pages/:id/block-options
588
- def admin_block_options
589
- return unless user_is_allowed('pages', 'edit')
590
-
591
- options = []
592
- Block.where("parent_id is null and page_id = ?", params[:id]).reorder(:sort_order).all.each do |b|
593
- admin_block_options_helper(options, b, "")
594
- end
595
- render :json => options
596
- end
597
594
 
598
595
  def admin_block_options_helper(options, b, prefix)
599
596
  options << { 'value' => b.id, 'text' => "#{prefix}#{b.title}" }