dscf-payment 0.1.8 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 314ce0077d4cdb20b91335c9edc045e7d690d695ce57eab7bba930b124e43b0b
-  data.tar.gz: 31277fdaa4177e430a4d3389824d9c78770cb3c1bc8e7cb90a16ab138ba8f7d7
+  metadata.gz: 9b5116a4b95714fdf6a96b3f228adee2b18b4de5e79f25758114a0350752e476
+  data.tar.gz: 562407c99ff44e1d93531ed2f1d3cf77b498fc22571af1835d150cc24e7346ff
 SHA512:
-  metadata.gz: 2d858654411208a5d7a72cbd0f90874e81a9f2f8f70fc6d971a5acf1627b4c564435810bdfa01e21f0d31e55c897d2d4dce0e522cef38cef749d5bf86fd368d5
-  data.tar.gz: cfb300c72fc53999ca2d98d781fe0d3eb600ea12deb7fde534664ae82c1dc56f94c242bd4bc798bf90d943f4aae16604f6f51ce86bead51d1db754951b2e63fd
+  metadata.gz: 90fcef25348fe02e322c5074302d7322c7be0bbf71d8fe1161d478ef074498c62ed325a44a5532de7ae2150f2f55c69f377f937c81cd297a57688c8f3ca840e8
+  data.tar.gz: 315d96e31c7f0f70d7fc87c7c58bbcbc681e6dee2b30500449d6e8b83308cfc87a7c081ff7564ef099d7da4cd5db06582589bd94b3dbe046fed5ac9cfa377914

data/app/bypass/bypass.rb

@@ -0,0 +1,42 @@
+module Dscf
+  module Banking
+    class ApplicationController < ActionController::API
+      include Dscf::Core::Authenticatable
+      include Dscf::Core::JsonResponse
+      before_action :authenticate_user
+      before_action :demo_bypass_permissions!
+
+      # TEMPORARY DEMO BYPASS:
+      # Bypass banking authorization checks for authenticated users only.
+      # Remove after the demo.
+      def bypass_permissions_for_demo?
+        true
+      end
+
+      def pundit_user
+        user = current_user
+        return nil unless user
+
+        bypass_permissions_on_user!(user)
+      end
+
+      private
+
+      def demo_bypass_permissions!
+        skip_authorization if respond_to?(:skip_authorization, true)
+        skip_policy_scope if respond_to?(:skip_policy_scope, true)
+      end
+
+      def bypass_permissions_on_user!(user)
+        return user if user.instance_variable_defined?(:@_banking_demo_permission_bypass)
+
+        user.define_singleton_method(:has_permission?) { |_permission_code| true }
+        user.define_singleton_method(:can?) { |permission_code| has_permission?(permission_code) }
+        user.define_singleton_method(:super_admin?) { true }
+        user.instance_variable_set(:@_banking_demo_permission_bypass, true)
+
+        user
+      end
+    end
+  end
+end

data/app/controllers/dscf/payment/application_controller.rb

@@ -8,6 +8,23 @@ module Dscf
       # Handle CORS for authentication
       before_action :set_cors_headers
 
+      before_action :authenticate_user
+      before_action :demo_bypass_permissions!
+
+      # TEMPORARY DEMO BYPASS:
+      # Bypass payment authorization checks for authenticated users only.
+      # Remove after the demo.
+      def bypass_permissions_for_demo?
+        true
+      end
+
+      def pundit_user
+        user = current_user
+        return nil unless user
+
+        bypass_permissions_on_user!(user)
+      end
+
       private
 
       def set_cors_headers
@@ -17,6 +34,22 @@ module Dscf
         headers["Access-Control-Allow-Credentials"] = "false"
       end
 
+      def demo_bypass_permissions!
+        skip_authorization if respond_to?(:skip_authorization, true)
+        skip_policy_scope if respond_to?(:skip_policy_scope, true)
+      end
+
+      def bypass_permissions_on_user!(user)
+        return user if user.instance_variable_defined?(:@_payment_demo_permission_bypass)
+
+        user.define_singleton_method(:has_permission?) { |_permission_code| true }
+        user.define_singleton_method(:can?) { |permission_code| has_permission?(permission_code) }
+        user.define_singleton_method(:super_admin?) { true }
+        user.instance_variable_set(:@_payment_demo_permission_bypass, true)
+
+        user
+      end
+
       def authentication_required?
         false # Override in specific controllers
       end

data/app/controllers/dscf/payment/payment_requests_controller.rb

@@ -1,7 +1,7 @@
 module Dscf::Payment
   class PaymentRequestsController < ApplicationController
-    skip_before_action :authorize, only: [:process_payment]
     include Dscf::Core::Common
+    include Dscf::Payment::DemoPermissionBypass
 
     rescue_from ActiveRecord::RecordNotFound, with: :record_not_found
 

data/app/controllers/dscf/payment/payments_controller.rb

@@ -1,6 +1,7 @@
 module Dscf::Payment
   class PaymentsController < ApplicationController
     include Dscf::Core::Common
+    include Dscf::Payment::DemoPermissionBypass
 
     rescue_from ActiveRecord::RecordNotFound, with: :record_not_found
 

data/lib/dscf/payment/version.rb

@@ -1,5 +1,5 @@
 module Dscf
   module Payment
-    VERSION = "0.1.8"
+    VERSION = "0.2.1"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dscf-payment
 version: !ruby/object:Gem::Version
-  version: 0.1.8
+  version: 0.2.1
 platform: ruby
 authors:
 - Asrat
@@ -460,6 +460,7 @@ files:
 - MIT-LICENSE
 - README.md
 - Rakefile
+- app/bypass/bypass.rb
 - app/controllers/dscf/payment/application_controller.rb
 - app/controllers/dscf/payment/payment_requests_controller.rb
 - app/controllers/dscf/payment/payments_controller.rb