caboose-store 0.0.2

data/app/controllers/caboose_store/cart_controller.rb

@@ -0,0 +1,59 @@
+module CabooseStore
+  class CartController < ApplicationController  
+    
+    # GET /cart
+    def index    
+      @order = self.get_cart
+      render :layout => 'layouts/caboose/modal'    
+    end
+    
+    # GET /cart/add/:id
+    def add
+      v = Variant.find(params[:id])    
+      @order = self.get_cart
+      
+      exists = false
+      @order.line_items.each do |li|
+        next if li.variant.id != v.id
+        li.quantity = li.quantity + 1
+        li.save
+        exists = true
+        break
+      end    
+      if !exists
+        li = OrderLineItem.new
+        li.variant = v
+        li.quantity = 1
+        li.unit_price = v.price
+        li.variant_sku = v.sku
+        @order.line_items << li      
+      end
+      @order.save    
+      
+      render 'caboose_store/cart/index', :layout => 'layouts/caboose/modal'
+    end
+    
+    # PUT /cart/:id
+    def update    
+      resp = Caboose::StdClass.new
+      
+      order_id = session['cart_id']
+      variant_id = params[:id].to_i
+      qty = params[:quantity_in_stock].to_i
+      
+      if (qty == 0)
+        OrderLineItem.where(:order_id => order_id, :variant_id => variant_id).delete_all
+      else    
+        li = OrderLineItem.where(:order_id => order_id, :variant_id => variant_id).first
+        li.quantity = qty
+        li.save
+      end
+      render :json => resp
+    end
+    
+    def get_cart
+      # Assumes the init_cart method is running in the parent application controller
+      return Order.find(session['cart_id'])
+    end
+  end
+end

data/app/controllers/caboose_store/categories_controller.rb

@@ -0,0 +1,128 @@
+module CabooseStore
+  class CategoriesController < ApplicationController  
+    
+    #=============================================================================
+    # Admin actions
+    #=============================================================================
+    
+    # GET /admin/categories
+    def admin_index
+      return if !user_is_allowed('categories', 'view')
+      @top_category = Category.find(1)         
+      render :layout => 'caboose/admin'
+    end
+      
+    # GET /admin/categories/:id/edit
+    def admin_edit
+      return if !user_is_allowed('categories', 'edit')    
+      @category = Category.find(params[:id])
+      render :layout => 'caboose/admin'
+    end        
+    
+    # PUT /admin/categories/:id
+    def admin_update
+      return if !user_is_allowed('categories', 'edit')
+      
+      resp = Caboose::StdClass.new({'attributes' => {}})
+      cat = Category.find(params[:id])    
+      
+      save = true    
+      params.each do |name,value|
+        case name
+          when 'name'
+            cat.name = value
+          when 'slug'
+            cat.slug = value
+            cat.url = cat.parent ? "#{cat.parent.url}/#{cat.slug}" : "/#{cat.slug}"
+            update_child_category_slugs(cat)          
+          when 'square_offset_x'
+            cat.square_offset_x = value
+          when 'square_offset_y'
+            cat.square_offset_y = value
+          when 'square_scale_factor'
+            cat.square_scale_factor = value
+          when 'image'
+            cat.image = value                
+        end
+      end
+      resp.success = save && cat.save
+      if params[:image]
+        resp.attributes['image'] = { 'value' => cat.image.url(:medium) }
+      end
+      render json: resp
+    end
+    
+    def update_child_category_slugs(cat)
+      return if cat.children.nil?
+      return if cat.children.count == 0
+      cat.children.each do |kid|
+        kid.url = "#{cat.url}/#{kid.slug}"
+        kid.save
+        update_child_category_slugs(kid)
+      end
+    end
+    
+    # GET /admin/categories/new
+    def admin_new
+      return if !user_is_allowed('categories', 'add')
+      @top_category = Category.find(1)
+      render :layout => 'caboose/admin'
+    end
+    
+    # POST /admin/categories
+    def admin_add
+      return if !user_is_allowed('categories', 'add')
+      
+      resp = Caboose::StdClass.new(
+        :error => nil,
+        :redirect => nil
+      )    
+      parent_id = params[:parent_id]
+      name      = params[:name]
+      
+      if parent_id == ''
+        resp.error = "Please select a parent category."
+      elsif name.length == 0
+        resp.error = "The title cannot be empty."
+      else
+        cat = Category.new
+        cat.parent_id = parent_id
+        cat.name = name      
+        cat.slug = Category.get_slug(cat.name) 
+        cat.save
+        cat.url = cat.parent ? "#{cat.parent.url}/#{cat.slug}" : "/#{cat.slug}"
+        cat.save
+        resp.redirect = "/admin/categories/#{cat.id}/edit"
+      end
+      render :json => resp    
+    end
+    
+    # DELETE /admin/categories/:id
+    def admin_delete
+      return if !user_is_allowed('categories', 'delete')
+      
+      resp = Caboose::StdClass.new(
+        :error => nil,
+        :redirect => nil
+      )
+      
+      cat = Category.find(params[:id])
+      if cat.products && cat.products.count > 0
+        resp.error = "You can't delete a category that has products in it."
+      elsif cat.children && cat.children.count > 0
+        resp.error = "You can't delete a category that has child categories."
+      else
+        cat.destroy
+        resp.redirect = '/admin/categories'
+      end
+        
+      render :json => resp
+    end
+    
+    # GET /admin/categories/options
+    def admin_options
+      return if !user_is_allowed('categories', 'view')
+      render :json => Category.options    
+    end
+  end
+end

data/app/controllers/caboose_store/checkout_controller.rb

@@ -0,0 +1,164 @@
+module CabooseStore
+  class CheckoutController < ApplicationController
+  
+    helper :authorize_net
+    protect_from_forgery :except => :authnet_relay_response
+    
+    # GET /checkout  
+  	def index
+  	  @order = Order.find(session['cart_id'])
+      @is_logged_in = logged_in?
+      if @is_logged_in
+        @order.customer_id = logged_in_user.id
+        @order.save
+      end
+  	end
+  	
+  	# GET /checkout/shipping-address
+  	def shipping_address
+  	  @order = Order.find(session['cart_id'])
+  	end
+  	
+  	# PUT /checkout/shipping-address
+  	def update_shipping_address
+  	  resp = Caboose::StdClass.new
+  	  
+  	  order = Order.find(session['cart_id'])
+  	  a = order.shipping_address ? order.shipping_address : Address.new	  
+  	  a.name      = params[:name]
+      a.company   = params[:company] 
+      a.address1  = params[:address1]
+      a.address2  = params[:address2]
+      a.city      = params[:city]
+      a.state     = params[:state]
+      a.zip       = params[:zip]
+      
+      if (a.name.strip.length == 0)
+        resp.error = "A name is required."
+      elsif (a.address1.strip.length == 0)
+        resp.error = "An address is required."
+      elsif (a.city.strip.length == 0)
+        resp.error = "A city is required."
+      elsif (a.state.strip.length == 0)
+        resp.error = "A state is required."
+      elsif (a.zip.strip.length < 5)
+        resp.error = "A valid zip code is required."
+      end
+      
+      if (resp.error.nil?)
+        a.save
+        tax_rate = TaxCalculator.tax_rate(a)
+        order.tax = order.subtotal * tax_rate
+        order.shipping_address_id = a.id
+        order.calculate_total      
+        order.save
+        resp.redirect = '/checkout/shipping'    
+      end
+      render :json => resp
+  	end
+  	
+  	# GET /checkout/shipping
+  	def shipping
+  	  @order = Order.find(session['cart_id'])	  
+  	end
+  	
+  	# GET /checkout/shipping-rates
+  	def shipping_rates
+  	  order = Order.find(session['cart_id'])	  
+  	  render :json => ShippingCalculator.rates(order)	  	  
+  	end
+  	
+  	# PUT /checkout/shipping-method
+  	def update_shipping_method	  
+  	  resp = Caboose::StdClass.new	  
+  	  order = Order.find(session['cart_id'])
+  	  
+  	  code = params[:shipping_method_code]
+  	  if code.nil? || code.strip.length == 0
+  	    resp.error = "You must select a shipping method."
+  	  else	  
+  	    order.shipping = params[:shipping].to_f/100
+  	    order.shipping_method = params[:shipping_method]
+  	    order.shipping_method_code = params[:shipping_method_code]
+  	    order.handling = order.shipping * 0.05
+  	    order.calculate_total	  
+  	    order.save	  
+  	    resp.redirect = '/checkout/billing'
+  	  end
+      render :json => resp	  	  
+  	end
+  	
+  	# GET /checkout/billing
+  	def billing
+  	  @order = Order.find(session['cart_id'])
+  	  @logged_in_user = logged_in_user
+  	  @sim_transaction = AuthorizeNet::SIM::Transaction.new(
+        AUTHORIZE_NET_CONFIG['api_login_id'], 
+        AUTHORIZE_NET_CONFIG['api_transaction_key'], 
+        @order.total, 
+        :relay_url => 'https://www.tuskwearcollection.com/checkout/authnet-relay-response',
+        :transaction_type => 'AUTH_ONLY' #AuthorizeNet::Type::AUTHORIZE_ONLY
+      )	  
+  	end
+  	
+  	# POST /checkout/authnet-relay-response  
+    def authnet_relay_response
+      sim_response = AuthorizeNet::SIM::Response.new(params)
+      if sim_response.success?(AUTHORIZE_NET_CONFIG['api_login_id'], AUTHORIZE_NET_CONFIG['merchant_hash_value'])      
+        if (params[:x_response_code].to_i == 1) # Approved
+          order = Order.find(params[:x_invoice_num])
+          order.date_authorized = DateTime.now
+          order.transaction_id  = params[:x_trans_id]
+          order.auth_code = params[:x_auth_code]
+          order.auth_amount = order.total
+          order.financial_status = 'authorized'
+          order.status = 'pending'
+          order.save        
+        end      
+      end
+      render :text => sim_response.direct_post_reply('https://www.tuskwearcollection.com/checkout/authnet-receipt', :include => true)
+    end
+    
+    # GET /checkout/authnet-receipt
+    def authnet_receipt
+      js = ""
+      if (params[:x_response_code].to_i == 1) # Approved
+        js = "parent.window.location = '/checkout/finalize';"
+      else 
+        msg = "<p class='note error'>There was an error processing your card:<br /><br />#{params[:x_response_reason_text]}</p>"
+        msg = msg.gsub('"', '')
+        js = "parent.$('#message').html(\"#{msg}\");"
+      end
+      render :text => "<script type='text/javascript'>#{js}</script>"
+    end
+  		
+  	# GET /checkout/finalize
+  	def finalize
+  	  order = Order.find(session['cart_id'])
+  	  
+  	  # Make sure they didn't come to the page twice
+  	  if order.line_items.count == 0
+  	    redirect_to "/"
+  	    return
+  	  end
+  	  
+  	  # Notify the customer
+  	  OrdersMailer.customer_new_order(order).deliver
+  	  
+  	  # Notify the fulfillment center
+  	  OrdersMailer.fulfillment_new_order(order).deliver
+  	  
+  	  # Add the order to quickbooks
+  	  #Quickbooks.create_order(order)	  
+  	  
+  	  # Clear everything
+  	  session['cart_id'] = nil
+  	  
+  	  redirect_to '/checkout/thank-you'
+  	end
+  	
+  	def thank_you	  
+  	end
+  	
+  end
+end

data/app/controllers/caboose_store/orders_controller.rb

@@ -0,0 +1,264 @@
+module CabooseStore
+  class OrdersController < ApplicationController
+      
+    helper :authorize_net
+    protect_from_forgery :except => :authnet_relay_response
+    
+    # GET /admin/orders
+    def admin_index
+      return if !user_is_allowed('orders', 'view')
+  
+      @gen = Caboose::PageBarGenerator.new(params, {
+          'customer_id'           => '', 
+          'status'                => 'pending',
+          'shipping_method_code'  => '',
+          'id'                    => ''
+      },{
+          'model'       => 'CabooseStore::Order',
+          'sort'        => 'id',
+          'desc'        => 1,
+          'base_url'    => '/admin/orders'
+      })    
+      @orders = @gen.items
+      @customers = Caboose::User.reorder('last_name, first_name').all
+      render :layout => 'caboose/admin'
+    end
+    
+    # GET /admin/orders/new
+    def admin_new
+      return if !user_is_allowed('orders', 'add')       
+      @products = Product.reorder('title').all    
+      render :layout => 'caboose/admin'
+    end
+      
+    # GET /admin/orders/:id
+    def admin_edit
+      return if !user_is_allowed('orders', 'edit')    
+      @order = Order.find(params[:id])
+      render :layout => 'caboose/admin'
+    end
+    
+    # GET /admin/orders/:id/json
+    def admin_json
+      return if !user_is_allowed('orders', 'edit')    
+      order = Order.find(params[:id])
+      render :json => order, :include => { :order_line_items => { :include => :variant }}
+    end
+  
+    # GET /admin/orders/:id/print
+    def admin_print
+      return if !user_is_allowed('orders', 'edit')    
+       
+      pdf = OrderPdf.new
+      pdf.order = Order.find(params[:id])             
+      send_data pdf.to_pdf, filename: "order_#{pdf.order.id}.pdf", type: "application/pdf", disposition: "inline"
+      
+      #@order = Order.find(params[:id])
+      #render :layout => 'caboose/admin'
+    end
+      
+    # PUT /admin/orders/:id
+    def admin_update
+      return if !user_is_allowed('orders', 'edit')
+      
+      resp = Caboose::StdClass.new({'attributes' => {}})
+      order = Order.find(params[:id])    
+      
+      save = true    
+      params.each do |name,value|
+        case name
+          when 'tax'
+            order.tax = value          
+          when 'shipping'
+            order.shipping = value
+          when 'handling'
+            order.handling = value
+          when 'discount'
+            order.discount = value        
+          when 'status'
+            order.status = value
+            resp.attributes['status'] = {'text' => value}
+        end
+      end
+      order.calculate_total    
+      resp.success = save && order.save
+      render :json => resp
+    end
+    
+    # PUT /admin/orders/:order_id/line-items/:id
+    def admin_update_line_item
+      return if !user_is_allowed('orders', 'edit')
+      
+      resp = Caboose::StdClass.new({'attributes' => {}})
+      li = OrderLineItem.find(params[:id])    
+      
+      save = true
+      send_status_email = false    
+      params.each do |name,value|
+        case name
+          when 'quantity'
+            li.quantity = value
+            li.save
+                      	  
+            # Recalculate everything
+            r = ShippingCalculator.rate(li.order, li.order.shipping_method_code)
+            li.order.shipping = r['negotiated_rate'] / 100
+            li.order.handling = (r['negotiated_rate'] / 100) * 0.05
+            tax_rate = TaxCalculator.tax_rate(li.order.shipping_address)
+            li.order.tax = li.order.subtotal * tax_rate
+            li.order.calculate_total
+            li.order.save
+            
+          when 'tracking_number'
+            li.tracking_number = value
+            send_status_email = true
+          when 'status'
+            li.status = value
+            resp.attributes['status'] = {'text' => value}
+            send_status_email = true
+        end
+      end
+      if send_status_email       
+        OrdersMailer.customer_status_updated(li.order).deliver
+      end
+      resp.success = save && li.save
+      render :json => resp
+    end 
+    
+    # DELETE /admin/orders/:id
+    def admin_delete
+      return if !user_is_allowed('orders', 'delete')
+      Order.find(params[:id]).destroy
+      render :json => Caboose::StdClass.new({
+        :redirect => '/admin/orders'
+      })
+    end
+    
+    # GET /admin/orders/line-item-status-options
+    def admin_line_item_status_options
+      arr = ['pending', 'ready to ship', 'shipped', 'backordered', 'canceled']
+      options = []
+      arr.each do |status|
+        options << {
+          :value => status,
+          :text => status
+        }
+      end
+      render :json => options
+    end
+    
+    # GET /admin/orders/:id/capture
+    def capture_funds
+      return if !user_is_allowed('orders', 'edit')
+      
+      resp = Caboose::StdClass.new({
+        'refresh' => nil,
+        'error' => nil,
+        'success' => nil
+      })
+      
+      order = Order.find(params[:id])
+      if order.financial_status == 'captured'
+        resp.error = "Funds for this order have already been captured."    
+      elsif order.total > order.auth_amount
+        resp.error = "The order total exceeds the authorized amount."
+      else      
+        trans = AuthorizeNet::AIM::Transaction.new(
+          AUTHORIZE_NET_CONFIG['api_login_id'], 
+          AUTHORIZE_NET_CONFIG['api_transaction_key'],          
+          :gateway => :production
+          #:test => true
+        )
+        amount = order.total < order.auth_amount ? order.total : nil
+        r = trans.prior_auth_capture(order.transaction_id, amount)
+        Caboose.log(r.inspect)
+        if r.success?
+          order.financial_status = 'captured'
+          order.save
+          resp.success = "Captured funds successfully."
+        else        
+          if r.connection_failure?
+            resp.error = "Error connecting to authorize.net."
+          else
+            resp.error = "Error capture funds."
+          end
+        end
+      end
+      render :json => resp
+    end
+    
+    # GET /admin/orders/:id/send-to-quickbooks
+    def admin_send_to_quickbooks
+      return if !user_is_allowed('orders', 'edit')
+      
+      resp = Caboose::StdClass.new({
+        'refresh' => nil,
+        'success' => nil,
+        'error' => nil
+      })
+      order = Order.find(params[:id])    
+      Quickbooks.create_order(order)
+      resp.success = "Order sent to quickbooks successfully."
+      render :json => resp
+    end
+    
+    # GET /admin/orders/status-options
+    def admin_status_options
+      return if !user_is_allowed('categories', 'view')
+      statuses = ['cart', 'pending', 'ready to ship', 'shipped', 'canceled']
+      options = []
+      statuses.each do |s|
+        options << {
+          'text' => s,
+          'value' => s
+        }
+      end       
+      render :json => options    
+    end
+    
+    # GET  /admin/orders/authnet-relay-response
+    # POST /admin/orders/authnet-relay-response  
+    #def authnet_relay_response
+    #  sim_response = AuthorizeNet::SIM::Response.new(params)
+    #  if sim_response.success?(AUTHORIZE_NET_CONFIG['api_login_id'], AUTHORIZE_NET_CONFIG['merchant_hash_value'])      
+    #    if (params[:x_response_code].to_i == 1) # Approved
+    #      order = Order.find(params[:x_invoice_num])
+    #      order.date_captured = DateTime.now        
+    #      order.financial_status = 'captured'        
+    #      order.save        
+    #    end      
+    #  end
+    #  render :text => sim_response.direct_post_reply('https://tuskwearadmin.herokuapp.com/admin/orders/authnet-receipt', :include => true)
+    #end
+    
+    # GET /admin/orders/authnet-receipt
+    #def authnet_receipt
+    #  return if !user_is_allowed('orders', 'edit')
+    #  
+    #  resp = Caboose::StdClass.new({
+    #    'refresh' => nil,
+    #    'error' => nil
+    #  })
+    #  
+    #  if (params[:x_response_code].to_i == 1) # Approved
+    #    resp.refresh = true
+    #  else 
+    #    resp.error = "There was an error capture funds:<br /><br />#{params[:x_response_reason_text]}"      
+    #  end
+    #  render :text => "<script type='text/javascript'>parent.capture_funds_response(#{resp.to_json});</script>"
+    #end
+    
+    # GET /admin/orders/test-info
+    def admin_mail_test_info
+      TestMailer.test_info.deliver
+      render :text => "Sent email to info@tuskwearcollection.com on #{DateTime.now.strftime("%F %T")}"
+    end
+    
+    # GET /admin/orders/test-gmail
+    def admin_mail_test_gmail
+      TestMailer.test_gmail.deliver
+      render :text => "Sent email to william@nine.is on #{DateTime.now.strftime("%F %T")}"
+    end
+    
+  end
+end

data/app/controllers/caboose_store/product_images_controller.rb

@@ -0,0 +1,38 @@
+module CabooseStore
+  class ProductImagesController < ApplicationController  
+      
+    #=============================================================================
+    # Admin actions
+    #=============================================================================
+    
+    # GET /admin/product-images/:id/variant-ids  
+    def admin_variant_ids
+      return if !user_is_allowed('variants', 'edit')
+      img = ProductImage.find(params[:id])
+      ids = img.variants.collect{ |v| v.id }
+      render :json => ids
+    end
+    
+    # GET /admin/product-images/:id/variants  
+    def admin_variants
+      return if !user_is_allowed('variants', 'edit')
+      img = ProductImage.find(params[:id])    
+      render :json => img.variants
+    end
+    
+    # DELETE /admin/product-images/:id  
+    def admin_delete
+      return if !user_is_allowed('variants', 'delete')
+      img = ProductImage.find(params[:id]).destroy    
+      render :json => true
+    end
+  
+    # GET /variant-images/:id
+    def variant_images
+      var = Variant.find(params[:id])
+      img = var.product_images.first
+      render :json => img
+    end
+  
+  end
+end