decidim-verifications 0.8.0

data/app/controllers/decidim/verifications/id_documents/admin/rejections_controller.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Verifications
+    module IdDocuments
+      module Admin
+        #
+        # Handles rejections for verification by identity document upload.
+        #
+        class RejectionsController < Decidim::Admin::ApplicationController
+          layout "decidim/admin/users"
+
+          before_action :load_pending_authorization
+
+          def create
+            authorize! :update, @pending_authorization
+
+            @form = InformationRejectionForm.from_model(@pending_authorization)
+
+            PerformAuthorizationStep.call(@pending_authorization, @form) do
+              on(:ok) do
+                flash[:notice] = t("rejections.create.success", scope: "decidim.verifications.id_documents.admin")
+                redirect_to root_path
+              end
+            end
+          end
+
+          private
+
+          def load_pending_authorization
+            @pending_authorization = Authorization.find(params[:pending_authorization_id])
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/decidim/verifications/id_documents/authorizations_controller.rb

@@ -0,0 +1,82 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Verifications
+    module IdDocuments
+      #
+      # Handles verification by identity document upload
+      #
+      class AuthorizationsController < Decidim::ApplicationController
+        helper_method :authorization
+
+        before_action :load_authorization
+
+        def new
+          authorize! :create, @authorization
+
+          @form = UploadForm.new
+        end
+
+        def create
+          authorize! :create, @authorization
+
+          @form = UploadForm.from_params(params.merge(user: current_user))
+
+          PerformAuthorizationStep.call(@authorization, @form) do
+            on(:ok) do
+              flash[:notice] = t("authorizations.create.success", scope: "decidim.verifications.id_documents")
+              redirect_to decidim_verifications.authorizations_path
+            end
+
+            on(:invalid) do
+              flash[:alert] = t("authorizations.create.error", scope: "decidim.verifications.id_documents")
+              render action: :new
+            end
+          end
+        end
+
+        def edit
+          authorize! :update, @authorization
+
+          @form = UploadForm.from_model(@authorization)
+        end
+
+        def update
+          authorize! :update, @authorization
+
+          @form = UploadForm.from_params(
+            params.merge(
+              user: current_user,
+              verification_attachment: @authorization.verification_attachment
+            )
+          )
+
+          PerformAuthorizationStep.call(@authorization, @form) do
+            on(:ok) do
+              flash[:notice] = t("authorizations.update.success", scope: "decidim.verifications.id_documents")
+              redirect_to decidim_verifications.authorizations_path
+            end
+
+            on(:invalid) do
+              flash[:alert] = t("authorizations.update.error", scope: "decidim.verifications.id_documents")
+              render action: :edit
+            end
+          end
+        end
+
+        private
+
+        def authorization
+          @authorization_presenter ||= AuthorizationPresenter.new(@authorization)
+        end
+
+        def load_authorization
+          @authorization = Decidim::Authorization.find_or_initialize_by(
+            user: current_user,
+            name: "id_documents"
+          )
+        end
+      end
+    end
+  end
+end

data/app/controllers/decidim/verifications/postal_letter/admin/pending_authorizations_controller.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Verifications
+    module PostalLetter
+      module Admin
+        class PendingAuthorizationsController < Decidim::Admin::ApplicationController
+          layout "decidim/admin/users"
+
+          def index
+            authorize! :index, Authorization
+
+            @pending_authorizations = AuthorizationPresenter.for_collection(
+              pending_authorizations
+            )
+          end
+
+          private
+
+          def pending_authorizations
+            Authorizations.new(name: "postal_letter", granted: false)
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/decidim/verifications/postal_letter/admin/postages_controller.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Verifications
+    module PostalLetter
+      module Admin
+        #
+        # Handles postages for verification letters.
+        #
+        class PostagesController < Decidim::Admin::ApplicationController
+          layout "decidim/admin/users"
+
+          before_action :load_pending_authorization
+
+          def create
+            authorize! :update, @pending_authorization
+
+            @form = PostageForm.from_model(@pending_authorization)
+
+            PerformAuthorizationStep.call(@pending_authorization, @form) do
+              on(:ok) do
+                flash[:notice] = t("postages.create.success", scope: "decidim.verifications.postal_letter.admin")
+                redirect_to pending_authorizations_path
+              end
+
+              on(:invalid) do
+                render json: { error: I18n.t("postages.create.error", scope: "decidim.verifications.postal_letter.admin") }, status: 422
+              end
+            end
+          end
+
+          private
+
+          def load_pending_authorization
+            @pending_authorization = Authorization.find(params[:pending_authorization_id])
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/decidim/verifications/postal_letter/authorizations_controller.rb

@@ -0,0 +1,74 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Verifications
+    module PostalLetter
+      class AuthorizationsController < Decidim::ApplicationController
+        helper_method :authorization
+
+        before_action :load_authorization
+
+        def new
+          authorize! :create, @authorization
+
+          @form = AddressForm.new
+        end
+
+        def create
+          authorize! :create, @authorization
+
+          @form = AddressForm.from_params(params.merge(user: current_user))
+
+          PerformAuthorizationStep.call(@authorization, @form) do
+            on(:ok) do
+              flash[:notice] = t("authorizations.create.success", scope: "decidim.verifications.postal_letter")
+              redirect_to decidim_verifications.authorizations_path
+            end
+
+            on(:invalid) do
+              flash.now[:alert] = t("authorizations.create.error", scope: "decidim.verifications.postal_letter")
+              render :new
+            end
+          end
+        end
+
+        def edit
+          authorize! :update, @authorization
+
+          @form = ConfirmationForm.from_params(params)
+        end
+
+        def update
+          authorize! :update, @authorization
+
+          @form = ConfirmationForm.from_params(params)
+
+          ConfirmUserAuthorization.call(@authorization, @form) do
+            on(:ok) do
+              flash[:notice] = t("authorizations.update.success", scope: "decidim.verifications.postal_letter")
+              redirect_to decidim_verifications.authorizations_path
+            end
+
+            on(:invalid) do
+              flash.now[:alert] = t("authorizations.update.error", scope: "decidim.verifications.postal_letter")
+              render :edit
+            end
+          end
+        end
+
+        private
+
+        def authorization
+          @authorization_presenter ||= AuthorizationPresenter.new(@authorization)
+        end
+
+        def load_authorization
+          @authorization = Decidim::Authorization.find_or_initialize_by(
+            user: current_user,
+            name: "postal_letter"
+          )
+        end
+      end
+    end
+  end
+end

data/app/forms/decidim/verifications/id_documents/information_form.rb

@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Verifications
+    module IdDocuments
+      # A form object to be used as the base for identity document verification
+      class InformationForm < AuthorizationHandler
+        mimic :id_document_information
+
+        DOCUMENT_TYPES = %w(DNI NIE passport).freeze
+
+        attribute :document_number, String
+        attribute :document_type, String
+
+        validates :document_type,
+                  inclusion: { in: DOCUMENT_TYPES },
+                  presence: true
+
+        validates :document_number,
+                  format: { with: /\A[A-Z0-9]*\z/, message: I18n.t("errors.messages.uppercase_only_letters_numbers") },
+                  presence: true
+
+        def handler_name
+          "id_documents"
+        end
+
+        def map_model(model)
+          self.document_type = model.verification_metadata["document_type"]
+          self.document_number = model.verification_metadata["document_number"]
+        end
+
+        def verification_metadata
+          {
+            "document_type" => document_type,
+            "document_number" => document_number
+          }
+        end
+
+        def document_types_for_select
+          DOCUMENT_TYPES.map do |type|
+            [
+              I18n.t(type.downcase, scope: "decidim.verifications.id_documents"),
+              type
+            ]
+          end
+        end
+      end
+    end
+  end
+end

data/app/forms/decidim/verifications/id_documents/information_rejection_form.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Verifications
+    module IdDocuments
+      # A form object to be used for reject a verification request by identity
+      # document upload.
+      class InformationRejectionForm < InformationForm
+        def verification_metadata
+          super.merge("rejected" => true)
+        end
+      end
+    end
+  end
+end

data/app/forms/decidim/verifications/id_documents/upload_form.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Verifications
+    module IdDocuments
+      # A form object to be used when public users want to get verified by
+      # uploading their identity documents.
+      class UploadForm < InformationForm
+        mimic :id_document_upload
+
+        attribute :verification_attachment, String
+
+        validates :verification_attachment,
+                  file_size: { less_than_or_equal_to: ->(_record) { Decidim.maximum_attachment_size } },
+                  file_content_type: { allow: ["image/jpeg", "image/png"] },
+                  presence: true
+      end
+    end
+  end
+end

data/app/forms/decidim/verifications/postal_letter/address_form.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+require "securerandom"
+
+module Decidim
+  module Verifications
+    module PostalLetter
+      # A form object to be used when public users want to get verified by
+      # uploading their identity documents.
+      class AddressForm < AuthorizationHandler
+        attribute :full_address, String
+
+        validates :full_address, presence: true
+
+        def handler_name
+          "postal_letter"
+        end
+
+        def verification_metadata
+          {
+            address: full_address,
+            pending_verification_code: SecureRandom.random_number(1_000_000).to_s
+          }
+        end
+      end
+    end
+  end
+end

data/app/forms/decidim/verifications/postal_letter/confirmation_form.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Verifications
+    module PostalLetter
+      # A form object that just holds a verification code that the user will
+      # have received by postal letter.
+      class ConfirmationForm < AuthorizationHandler
+        attribute :verification_code, String
+
+        validates :verification_code, presence: true
+
+        def verification_metadata
+          { "verification_code" => verification_code }
+        end
+      end
+    end
+  end
+end

data/app/forms/decidim/verifications/postal_letter/postage_form.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Verifications
+    module PostalLetter
+      # A form object to be used when admins want to mark a verification letter
+      # as sent.
+      class PostageForm < AuthorizationHandler
+        attribute :full_address, String
+        attribute :verification_code, String
+
+        validates :full_address, presence: true
+        validates :verification_code, presence: true
+
+        def handler_name
+          "postal_letter"
+        end
+
+        def map_model(model)
+          self.verification_code = model.verification_metadata["pending_verification_code"]
+          self.full_address = model.verification_metadata["address"]
+        end
+
+        def verification_metadata
+          {
+            address: full_address,
+            verification_code: verification_code,
+            letter_sent_at: Time.zone.now
+          }
+        end
+      end
+    end
+  end
+end

data/app/presenters/decidim/verifications/id_documents/authorization_presenter.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Verifications
+    module IdDocuments
+      #
+      # Decorator for id document authorizations
+      #
+      class AuthorizationPresenter < SimpleDelegator
+        #
+        # Whether the verification has been rejected or not and thus, whether
+        # the user should be prompted again to reupload documents
+        #
+        def rejected?
+          verification_metadata["rejected"] == true
+        end
+      end
+    end
+  end
+end