disco_app 0.9.6

data/app/models/disco_app/recurring_application_charge.rb

@@ -0,0 +1,18 @@
+class DiscoApp::RecurringApplicationCharge < ActiveRecord::Base
+
+  belongs_to :shop
+  belongs_to :subscription
+
+  enum status: [:pending, :accepted, :declined, :active, :cancelled, :expired]
+
+  scope :active, -> { where status: statuses[:active] }
+
+  def recurring?
+    true
+  end
+
+  def activate_url
+    DiscoApp::Engine.routes.url_helpers.activate_subscription_charge_url(subscription, self)
+  end
+
+end

data/app/models/disco_app/session_storage.rb

@@ -0,0 +1,18 @@
+module DiscoApp
+  class SessionStorage
+    def self.store(session)
+      shop = Shop.find_or_initialize_by(shopify_domain: session.url)
+      shop.shopify_token = session.token
+      shop.save!
+      shop.id
+    end
+
+    def self.retrieve(id)
+      return unless id
+      shop = Shop.find(id)
+      ShopifyAPI::Session.new(shop.shopify_domain, shop.shopify_token)
+    rescue ActiveRecord::RecordNotFound
+      nil
+    end
+  end
+end

data/app/models/disco_app/shop.rb

@@ -0,0 +1,3 @@
+class DiscoApp::Shop < ActiveRecord::Base
+  include DiscoApp::Concerns::Shop
+end

data/app/models/disco_app/subscription.rb

@@ -0,0 +1,3 @@
+class DiscoApp::Subscription < ActiveRecord::Base
+  include DiscoApp::Concerns::Subscription
+end

data/app/resources/disco_app/admin/resources/concerns/shop_resource.rb

@@ -0,0 +1,100 @@
+require 'jsonapi/resource'
+
+module DiscoApp::Admin::Resources::Concerns::ShopResource
+  extend ActiveSupport::Concern
+
+  included do
+
+    attributes :domain, :status, :created_at
+    attributes :email, :country_name, :currency, :plan_display_name
+    attributes :current_subscription_id, :current_subscription_display_amount, :current_subscription_display_plan, :current_subscription_display_plan_code, :current_subscription_source
+    attributes :installed_duration
+
+    model_name 'DiscoApp::Shop'
+
+    filters :query, :status
+
+    # Adjust the base records method to ensure only models for the authenticated domain are retrieved.
+    def self.records(options = {})
+      records = DiscoApp::Shop.order(created_at: :desc)
+      records
+    end
+
+    # Apply filters.
+    def self.apply_filter(records, filter, value, options)
+      return records if value.blank?
+
+      # Perform appropriate filtering.
+      case filter
+        when :query
+          return records.where('name LIKE ? OR shopify_domain LIKE ? OR domain LIKE ?', "%#{value.first}%", "%#{value.first}%", "%#{value.first}%")
+        when :status
+          return records.where(status: value.map { |v| DiscoApp::Shop.statuses[v.to_sym] } )
+        else
+          return super(records, filter, value)
+      end
+    end
+
+    # Don't allow the update of any fields via the API.
+    def self.updatable_fields(context)
+      []
+    end
+
+    # Don't allow the creation of any fields via the API.
+    def self.creatable_fields(context)
+      []
+    end
+
+    def email
+      @model.data['email']
+    end
+
+    def country_name
+      @model.data['country_name']
+    end
+
+    def currency
+      @model.data['currency']
+    end
+
+    def plan_display_name
+      @model.data['plan_display_name']
+    end
+
+    def current_subscription_id
+      if @model.current_subscription?
+        @model.current_subscription.id
+      end
+    end
+
+    def current_subscription_display_amount
+      if @model.current_subscription?
+        @model.current_subscription.amount
+      else
+        '-'
+      end
+    end
+
+    def current_subscription_display_plan
+      if @model.current_subscription?
+        @model.current_plan.name
+      else
+        'None'
+      end
+    end
+
+    def current_subscription_display_plan_code
+      @model.current_subscription&.plan_code&.code
+    end
+
+    def current_subscription_source
+      if @model.current_subscription?
+        @model.current_subscription.source || '-'
+      else
+        '-'
+      end
+    end
+
+  end
+
+end

data/app/resources/disco_app/admin/resources/shop_resource.rb

@@ -0,0 +1,4 @@
+class DiscoApp::Admin::Resources::ShopResource < JSONAPI::Resource
+  include DiscoApp::Admin::Resources::Concerns::ShopResource
+
+end

data/app/services/disco_app/carrier_request_service.rb

@@ -0,0 +1,15 @@
+class DiscoApp::CarrierRequestService
+
+  # Return true iff the provided hmac_to_verify matches that calculated from the
+  # given data and secret.
+  def self.is_valid_hmac?(body, secret, hmac_to_verify)
+    ActiveSupport::SecurityUtils.secure_compare(self.calculated_hmac(body, secret), hmac_to_verify.to_s)
+  end
+
+  # Calculate the HMAC for the given data and secret.
+  def self.calculated_hmac(body, secret)
+    digest  = OpenSSL::Digest.new('sha256')
+    Base64.encode64(OpenSSL::HMAC.digest(digest, secret, body)).strip
+  end
+
+end

data/app/services/disco_app/charges_service.rb

@@ -0,0 +1,81 @@
+class DiscoApp::ChargesService
+
+  # Create the appropriate type of Shopify charge for the given subscription
+  # (either one-time or recurring) and return.
+  def self.create(shop, subscription)
+    # Create the charge object locally first.
+    charge = subscription.charge_class.create!(
+      shop: shop,
+      subscription: subscription,
+    )
+
+    # Create the charge object on Shopify.
+    shopify_charge = shop.temp {
+      subscription.shopify_charge_class.create(
+        name: subscription.plan.name,
+        price: '%.2f' % (subscription.amount.to_f / 100.0),
+        trial_days: subscription.plan.has_trial? ? subscription.trial_period_days : nil,
+        return_url: charge.activate_url,
+        test: !DiscoApp.configuration.real_charges?
+      )
+    }
+
+    # If we couldn't create the charge on Shopify, return nil.
+    if shopify_charge.nil?
+      return nil
+    end
+
+    # Update the local record of the charge from Shopify's created charge, then
+    # return it.
+    charge.update(
+      shopify_id: shopify_charge.id,
+      confirmation_url: shopify_charge.confirmation_url
+    )
+    charge
+  end
+
+  # Attempt to activate the given Shopify charge for the given Shop using the
+  # Shopify API. Returns true on successful activation, false otherwise.
+  def self.activate(shop, charge)
+    begin
+      # Start by fetching the Shopify charge to check that it was accepted.
+      shopify_charge = shop.temp {
+        charge.subscription.shopify_charge_class.find(charge.shopify_id)
+      }
+
+      # Update the status of the local charge based on the Shopify charge.
+      charge.send("#{shopify_charge.status}!") if charge.respond_to? "#{shopify_charge.status}!"
+
+      # If the charge wasn't accepted, fail and return.
+      return false unless charge.accepted?
+
+      # If the charge was indeed accepted, activate it via Shopify.
+      charge.shop.temp {
+        shopify_charge.activate
+      }
+
+      # If the charge was recurring, make sure that all other local recurring
+      # charges are marked inactive.
+      if charge.recurring?
+        self.cancel_recurring_charges(shop, charge)
+      end
+
+      charge.active!
+
+      true
+    rescue
+      false
+    end
+  end
+
+  # Cancel all recurring charges for the given shop. If the optional charge
+  # parameter is given, it will be excluded from the cancellation.
+  def self.cancel_recurring_charges(shop, charge = nil)
+    charges = DiscoApp::RecurringApplicationCharge.where(shop: shop)
+    if charge.present?
+      charges = charges.where.not(id: charge)
+    end
+    charges.update_all(status: DiscoApp::RecurringApplicationCharge.statuses[:cancelled])
+  end
+
+end

data/app/services/disco_app/proxy_service.rb

@@ -0,0 +1,17 @@
+class DiscoApp::ProxyService
+
+  # Return true iff the signature provided in the given query string matches
+  # that calculated from the remaining query parameters and the given secret.
+  def self.proxy_signature_is_valid?(query_string, secret)
+    query_hash = Rack::Utils.parse_query(query_string)
+    signature = query_hash.delete('signature').to_s
+    ActiveSupport::SecurityUtils.variable_size_secure_compare(self.calculated_signature(query_hash, secret), signature)
+  end
+
+  # Return the calculated signature for the given query hash and secret.
+  def self.calculated_signature(query_hash, secret)
+    sorted_params = query_hash.collect{ |k, v| "#{k}=#{Array(v).join(',')}" }.sort.join
+    OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha256'), secret, sorted_params)
+  end
+
+end

data/app/services/disco_app/subscription_service.rb

@@ -0,0 +1,46 @@
+class DiscoApp::SubscriptionService
+
+  # Subscribe the given shop to the given plan, optionally using the given plan
+  # code and optionally tracking the subscription source.
+  def self.subscribe(shop, plan, plan_code = nil, source = nil)
+
+    # If a plan code was provided, fetch it for the given plan.
+    plan_code_instance = nil
+    if plan_code.present?
+      plan_code_instance = DiscoApp::PlanCode.available.find_by(plan: plan, code: plan_code)
+    end
+
+    # Cancel any existing current subscriptions.
+    shop.subscriptions.current.update_all(
+      status: DiscoApp::Subscription.statuses[:cancelled],
+      cancelled_at: Time.now
+    )
+
+    # Get the amount that should be charged for the subscription.
+    subscription_amount = plan_code_instance.present? ? plan_code_instance.amount : plan.amount
+
+    # Get the date the subscription trial should end.
+    subscription_trial_period_days = plan_code_instance.present? ? plan_code_instance.trial_period_days : plan.trial_period_days
+
+    # Create the new subscription.
+    new_subscription = DiscoApp::Subscription.create!(
+      shop: shop,
+      plan: plan,
+      plan_code: plan_code_instance,
+      status: DiscoApp::Subscription.statuses[plan.has_trial? ? :trial : :active],
+      subscription_type: plan.plan_type,
+      amount: subscription_amount,
+      trial_period_days: plan.has_trial? ? subscription_trial_period_days : nil,
+      trial_start_at: plan.has_trial? ? Time.now : nil,
+      trial_end_at: plan.has_trial? ? subscription_trial_period_days.days.from_now : nil,
+      source: source
+    )
+
+    # Enqueue the subscription changed background job.
+    DiscoApp::SubscriptionChangedJob.perform_later(shop, new_subscription)
+
+    # Return the new subscription.
+    new_subscription
+  end
+
+end

data/app/services/disco_app/webhook_service.rb

@@ -0,0 +1,30 @@
+class DiscoApp::WebhookService
+
+  # Return true iff the provided hmac_to_verify matches that calculated from the
+  # given data and secret.
+  def self.is_valid_hmac?(body, secret, hmac_to_verify)
+    ActiveSupport::SecurityUtils.secure_compare(self.calculated_hmac(body, secret), hmac_to_verify.to_s)
+  end
+
+  # Calculate the HMAC for the given data and secret.
+  def self.calculated_hmac(body, secret)
+    digest  = OpenSSL::Digest.new('sha256')
+    Base64.encode64(OpenSSL::HMAC.digest(digest, secret, body)).strip
+  end
+
+  # Try to find a job class for the given webhook topic.
+  def self.find_job_class(topic)
+    begin
+      # First try to find a top-level matching job class.
+      "#{topic}_job".gsub('/', '_').classify.constantize
+    rescue NameError
+      # If that fails, try to find a DiscoApp:: prefixed job class.
+      begin
+        %Q{DiscoApp::#{"#{topic}_job".gsub('/', '_').classify}}.constantize
+      rescue NameError
+        nil
+      end
+    end
+  end
+
+end

data/app/views/disco_app/admin/app_settings/edit.html.erb

@@ -0,0 +1,5 @@
+<% provide(:title, 'App Settings') %>
+
+<p>Update 'app/views/disco_app/admin/app_settings/edit.html.erb' on your own rails app.</p>
+
+

data/app/views/disco_app/admin/plans/_form.html.erb

@@ -0,0 +1,72 @@
+<section class="section">
+  <div class="layout-content">
+    <section class="layout-content__main">
+      <div class="next-grid">
+        <div class="next-grid__cell">
+          <div class="next-card">
+
+              <header class="next-card__header">
+                <h1>Plan</h1>
+              </header>
+
+              <section class="next-card__section">
+                <div class="form-group">
+                  <%= f.label(:name, 'Name') %>
+                  <%= f.text_field(:name) %>
+                </div>
+
+                <div class="form-group">
+                <%= f.label(:status, 'Status') %>
+                <%= f.select(:status, DiscoApp::Plan.statuses.map { |s| [s.first.humanize, s.first] }) %>
+                </div>
+
+                <div class="form-group">
+                <%= f.label(:plan_type, 'Plan Type') %>
+                <%= f.select(:plan_type, DiscoApp::Plan.plan_types.map { |s| [s.first.humanize, s.first] }) %>
+                </div>
+
+                <div class="form-group">
+                <%= f.label(:trial_period_days, 'Trial Period Days') %>
+                <%= f.number_field(:trial_period_days) %>
+                </div>
+
+                <div class="form-group">
+                <%= f.label(:amount, 'Amount') %>
+                <%= f.number_field(:amount) %>
+                </div>
+              </section>
+          </div>
+        </div>
+        <div class="next-grid__cell">
+          <div class="next-card  next-card--aside">
+              <header class="next-card__header">
+                <h1>Plan Codes</h1>
+              </header>
+
+                <%= f.fields_for :plan_codes do |plan_code| %>
+                  <%= render 'plan_code_fields', f: plan_code %> 
+                <% end %>
+
+                <br>
+
+                <%= link_to_add_fields('Add New Plan Code', f, :plan_codes) %>
+          </div>
+        </div>
+      </div>
+      <hr />
+      <div class="row">
+        <div class="col-md-12">
+          <%= f.submit 'Save', { class: 'btn btn-primary' } %>
+        </div>
+      </div>
+    </section>
+  </div>
+</section>
+<script type="text/javascript">
+  $('form').on('click', '.add_fields', function(event) {
+    var time = new Date().getTime();
+    var regexp = new RegExp($(this).data('id'), 'g');
+    $(this).before($(this).data('fields').replace(regexp, time));
+    event.preventDefault();
+  });
+</script>

data/app/views/disco_app/admin/plans/_plan_code_fields.html.erb

@@ -0,0 +1,15 @@
+<section class="next-card__section">
+    <div class="app-container">
+        <%= f.label(:code, 'Code') %>
+        <%= f.text_field(:code) %>
+
+        <%= f.label(:trial_period_days, 'Trial Period Days') %>
+        <%= f.number_field(:trial_period_days) %>
+
+        <%= f.label(:amount, 'Amount') %>
+        <%= f.number_field(:amount) %>
+        
+        <%= f.label :_destroy, 'Remove Plan' %>
+        <%= f.check_box :_destroy %>
+    </div>
+</section>

data/app/views/disco_app/admin/plans/edit.html.erb

@@ -0,0 +1,7 @@
+<% provide(:title, 'Edit Plan') %>
+
+<%= form_for(@plan, url: admin_plan_path(@plan)) do |f| %>
+  <%= render 'form', f: f %>
+<% end %>
+
+<%= link_to 'Back', admin_plans_path, { class: 'btn btn-default' } %>

data/app/views/disco_app/admin/plans/index.html.erb

@@ -0,0 +1,43 @@
+<% provide(:title, 'Plans') %>
+
+<div class="next-grid">
+  <div class="next-grid__cell">
+    <div class="next-card">
+      <% unless @plans.empty? %>
+      <table class="table">
+        <thead>
+          <tr>
+            <th>Name</th>
+            <th>Status</th>
+            <th>Plan Type</th>
+            <th>Trial Period</th>
+            <th>Amount</th>
+            <th>Currency</th>
+            <th>Interval</th>
+            <th>Interval Count</th>
+            <th></th>
+          </tr>
+        </thead>
+        <tbody>
+          <% @plans.each do |plan| %>
+          <tr>
+            <td><%= link_to(plan.name, edit_admin_plan_path(plan)) %></td>
+            <td><%= plan.status %></td>
+            <td><%= plan.plan_type %></td>
+            <td><%= plan.trial_period_days %></td>
+            <td><%= plan.amount %></td>
+            <td><%= plan.currency %></td>
+            <td><%= plan.interval %></td>
+            <td><%= plan.interval_count %></td>
+            <td><%= link_to 'Delete', admin_plan_path(plan), action: 'destroy', method: :delete,  data: {confirm: "About to delete plan: #{plan.name}. Are you sure?"} %></td>
+          </tr>
+          <% end %>
+        </tbody>
+      </table>
+      <% end %>
+    </div>
+    <hr/>
+    <%= link_to 'Create new plan', new_admin_plan_path, { class: 'btn btn-primary' } %>
+  </div>
+</div>
+

data/app/views/disco_app/admin/plans/new.html.erb

@@ -0,0 +1,7 @@
+<% provide(:title, 'New Plan') %>
+
+<%= form_for(@plan, url: admin_plans_path) do |f| %>
+  <%= render 'form', f: f %>
+<% end %>
+
+<%= link_to 'Back', admin_plans_path, { class: 'btn btn-default' } %>

data/app/views/disco_app/admin/shops/index.html.erb

@@ -0,0 +1,13 @@
+<% provide(:title, 'Shops') %>
+
+<div class="next-grid">
+  <div class="next-grid__cell">
+
+    <%= react_component('FilterableShopList', {
+      shopsUrl: admin_resources_shops_path(format: :json),
+      editShopUrl: edit_admin_shop_path(':id'),
+      editSubscriptionUrl: edit_admin_shop_subscription_path(':shop_id', ':id')
+    }) %>
+
+  </div>
+</div>

data/app/views/disco_app/admin/subscriptions/edit.html.erb

@@ -0,0 +1,33 @@
+<% provide(:breadcrumb, 'Shops') %>
+<% provide(:breadcrumb_url, admin_shops_path) %>
+<% provide(:title, 'Edit subscription') %>
+
+<div class="next-grid">
+  <div class="next-grid__cell">
+
+    <%= form_for(@subscription, url: admin_shop_subscription_path(@subscription.shop, @subscription)) do |f| %>
+
+      <%= f.label(:amount) %>
+      <%= f.number_field(:amount) %>
+
+      <%= f.label(:trial_period_days) %>
+      <%= f.number_field(:trial_period_days) %>
+
+      <p>
+        Note that adjusting the amount or trial days of the subscription will
+        clear any charge previously authorized by the user, and they'll be asked
+        to re-authorize the next time they open the application.
+      </p>
+
+      <p>
+        If you're changing the amount of a subscription for an existing user and
+        don't want them to get another trial period, make sure to set "Trial
+        period days" to zero.
+      </p>
+
+      <%= f.submit 'Save', { class: 'btn btn-primary' } %>
+
+    <% end %>
+
+  </div>
+</div>

data/app/views/disco_app/charges/activate.html.erb

@@ -0,0 +1 @@
+activate_charge

data/app/views/disco_app/charges/create.html.erb

@@ -0,0 +1 @@
+create_charge

data/app/views/disco_app/charges/new.html.erb

@@ -0,0 +1,12 @@
+<% provide(:title, 'Thankyou') %>
+
+<p>
+  Thanks for installing <%= DiscoApp.configuration.app_name %>!
+</p>
+<p>
+  Before we start setting things up, we need you to authorize a charge for the application.
+</p>
+
+<%= form_tag disco_app.subscription_charges_path(@subscription), method: 'POST', target: '_parent' do %>
+  <%= submit_tag 'Okay', class: 'form-input' %>
+<% end %>

data/app/views/disco_app/frame/frame.html.erb

@@ -0,0 +1,36 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>Dev Frame</title>
+  <%= stylesheet_link_tag 'disco_app/frame', media: 'all' %>
+  <%= javascript_include_tag 'disco_app/frame' %>
+</head>
+<body>
+<!-- Left Sidebar -->
+<aside id="sidebar"></aside>
+
+<!-- Header Bar -->
+<header id="header">
+  <h1 id="header-title">
+    <img id="header-title-icon" src="<%= image_path('disco_app/icon.svg') %>" width="20" height="20" />
+    Shopify Dev Frame
+  </h1>
+  <div id="header-actions">
+    <!-- No action. -->
+  </div>
+</header>
+
+<!-- Content iFrame -->
+<section id="content-wrapper">
+  <iframe id="content" src="/"></iframe>
+</section>
+
+<!-- Setup FrameApp. -->
+<script type="text/javascript">
+  FrameApp.init({
+    debug: true,
+    iframe: document.getElementById('content')
+  });
+</script>
+</body>
+</html>

data/app/views/disco_app/install/installing.html.erb

@@ -0,0 +1,7 @@
+<% content_for :extra_head do %>
+  <meta http-equiv="refresh" content="5">
+<% end %>
+
+<p>
+  Installing, please wait...
+</p>

data/app/views/disco_app/install/uninstalling.html.erb

@@ -0,0 +1 @@
+uninstalling

data/app/views/disco_app/proxy_errors/404.html.erb

@@ -0,0 +1 @@
+404 Not Found

data/app/views/disco_app/shared/_card.html.erb

@@ -0,0 +1,14 @@
+<% disabled ||= false %>
+<div class="next-card <% if disabled %>next-card--disabled<% end %>">
+  <% if content_for?(:card_header) %>
+    <header class="next-card__header">
+      <%= content_for :card_header %>
+    </header>
+  <% end %>
+  <%= content_for :card_content %>
+  <% if content_for?(:card_footer) %>
+    <footer class="next-card__footer">
+      <%= content_for :card_footer %>
+    </footer>
+  <% end %>
+</div>