spree_admin 5.0.0.rc1

data/app/controllers/spree/admin/orders/user_controller.rb

@@ -0,0 +1,94 @@
+module Spree
+  module Admin
+    module Orders
+      class UserController < Spree::Admin::BaseController
+        include Spree::Admin::OrderConcern
+        before_action :load_order
+        before_action :check_authorization
+
+        def new
+          @user = @order.build_user
+        end
+
+        def create
+          @user = Spree.user_class.find_by(email: params.dig(:user, :email))
+
+          if @user
+            @order.associate_user!(@user)
+            if @user.update(user_params) && @order.line_items.any?
+              max_state = if @order.ship_address.present?
+                            @order.ensure_updated_shipments
+                            'payment'
+                          else
+                            'address'
+                          end
+
+              result = Spree::Dependencies.checkout_advance_service.constantize.call(order: @order, state: max_state)
+
+              flash[:error] = result.error.value.full_messages.to_sentence unless result.success?
+
+              render :create, status: :ok
+            else
+              render :create, status: :unprocessable_entity
+            end
+          else
+            @user = @order.build_user(user_params)
+            @user.password ||= SecureRandom.hex(16) # we need to set a password to pass validation
+            @user.password_confirmation ||= @user.password
+
+            if @user.save
+              @order.associate_user!(@user)
+
+              render :create, status: :ok
+            else
+              render :create, status: :unprocessable_entity
+            end
+          end
+        end
+
+        def update
+          user = Spree.user_class.find(params[:user_id])
+          @order.associate_user!(user)
+
+          if !@order.completed? && @order.line_items.any?
+            max_state = if @order.ship_address.present?
+                          @order.ensure_updated_shipments
+                          'payment'
+                        else
+                          'address'
+                        end
+
+            result = Spree::Dependencies.checkout_advance_service.constantize.call(order: @order, state: max_state)
+
+            unless result.success?
+              flash[:error] = result.error.value.full_messages.to_sentence
+              @order.ensure_updated_shipments
+            end
+          end
+
+          render :update, status: :ok
+        end
+
+        def destroy
+          @order.assign_attributes(user_id: nil, ship_address: nil, bill_address: nil)
+          @order.email = nil unless @order.email_required?
+          @order.save
+
+          flash[:error] = @order.errors.full_messages.to_sentence if @order.invalid?
+
+          redirect_to spree.edit_admin_order_path(@order)
+        end
+
+        private
+
+        def user_params
+          params.require(:user).permit(permitted_user_attributes)
+        end
+
+        def check_authorization
+          authorize! :update_customer, @order
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/orders_controller.rb

@@ -0,0 +1,87 @@
+module Spree
+  module Admin
+    class OrdersController < Spree::Admin::BaseController
+      include Spree::Admin::OrderConcern
+      include Spree::Admin::OrdersFiltersHelper
+
+      before_action :initialize_order_events
+      before_action :load_order, only: %i[edit cancel resend]
+      before_action :load_order_items, only: :edit
+      before_action :load_user, only: [:index]
+
+      helper_method :model_class
+
+      def create
+        @order = Spree::Order.create(created_by: try_spree_current_user, store: current_store)
+
+        redirect_to spree.edit_admin_order_path(@order)
+      end
+
+      def index
+        params[:q] ||= {}
+        params[:q][:s] ||= 'completed_at desc'
+
+        load_orders
+      end
+
+      def cancel
+        @order.canceled_by(try_spree_current_user)
+        flash[:success] = Spree.t(:order_canceled)
+        redirect_back fallback_location: spree.edit_admin_order_url(@order)
+      end
+
+      def resend
+        @order.deliver_order_confirmation_email
+        if @order.errors.any?
+          flash[:error] = @order.errors.full_messages.join(', ')
+        else
+          flash[:success] = Spree.t(:order_email_resent)
+        end
+
+        redirect_back fallback_location: spree.edit_admin_order_url(@order)
+      end
+
+      private
+
+      def scope
+        base_scope = current_store.orders.accessible_by(current_ability, :index)
+
+        if action_name == 'index'
+          base_scope.complete
+        else
+          base_scope
+        end
+      end
+
+      def order_params
+        params[:created_by_id] = try_spree_current_user.try(:id)
+        params.permit(:created_by_id, :user_id, :store_id, :channel)
+      end
+
+      def load_order
+        @order = scope.includes(:adjustments).find_by!(number: params[:id])
+        authorize! action, @order
+      end
+
+      def load_order_items
+        @line_items = @order.line_items.includes(variant: [:product, :option_values])
+        @shipments = @order.shipments.includes(:inventory_units, :selected_shipping_rate,
+                                               shipping_rates: [:shipping_method, :tax_rate]).order(:created_at)
+        @payments = @order.payments.includes(:payment_method, :source).order(:created_at)
+        @refunds = @order.refunds
+
+        @return_authorizations = @order.return_authorizations
+        @customer_returns = @order.customer_returns.distinct
+      end
+
+      # Used for extensions which need to provide their own custom event links on the order details view.
+      def initialize_order_events
+        @order_events = %w{approve cancel resume}
+      end
+
+      def model_class
+        Spree::Order
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/page_blocks_controller.rb

@@ -0,0 +1,40 @@
+module Spree
+  module Admin
+    class PageBlocksController < Spree::Admin::ResourceController
+      include Spree::Admin::PageBuilderConcern
+
+      belongs_to 'spree/page_section', find_by: :id
+
+      def destroy
+        @page_block.destroy
+      end
+
+      def move_higher
+        if @page_block.first?
+          head :ok
+        else
+          @page_block.move_higher
+        end
+      end
+
+      def move_lower
+        if @page_block.last?
+          head :ok
+        else
+          @page_block.move_lower
+        end
+      end
+
+      def create
+        allowed_types = Rails.application.config.spree.page_blocks.map(&:to_s)
+        page_block_type = params.dig(:page_block, :type)
+
+        if allowed_types.include?(page_block_type) && page_block_type.safe_constantize.present?
+          @page_block = page_block_type.constantize.new
+          @page_block.section = @page_section
+          @page_block.save!
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/page_links_controller.rb

@@ -0,0 +1,43 @@
+module Spree
+  module Admin
+    class PageLinksController < ResourceController
+      include Spree::Admin::PageBuilderConcern
+
+      before_action :load_parent
+
+      create.before :set_defaults
+
+      def destroy
+        @page_link.destroy
+      end
+
+      private
+
+      def collection_url
+        @collection_url ||= if @parent.is_a?(Spree::PageSection)
+                              spree.edit_admin_page_section_path(@parent)
+                            elsif @parent.is_a?(Spree::PageBlock)
+                              spree.edit_admin_page_section_block_path(@parent.section, @parent)
+                            end
+      end
+
+      def load_parent
+        @parent ||= if @page_link&.persisted?
+                      @page_link.parent
+                    elsif params[:block_id].present?
+                      Spree::PageBlock.find(params[:block_id])
+                    elsif params[:page_section_id].present?
+                      Spree::PageSection.find(params[:page_section_id])
+                    end
+      end
+
+      def set_defaults
+        raise ActiveRecord::RecordNotFound unless @parent
+
+        @page_link.parent = @parent
+        @page_link.linkable_type ||= @parent.default_linkable_type
+        @page_link.linkable ||= @parent.default_linkable_resource
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/page_sections_controller.rb

@@ -0,0 +1,57 @@
+module Spree
+  module Admin
+    class PageSectionsController < ResourceController
+      include Spree::Admin::PageBuilderConcern
+
+      before_action :load_pageable, only: %i[new create index]
+
+      def create
+        page_section_type = params.dig(:page_section, :type)
+        allowed_types = Rails.application.config.spree.page_sections.map(&:to_s)
+
+        if allowed_types.include?(page_section_type) && page_section_type.safe_constantize.present?
+          @page_section = page_section_type.constantize.new(permitted_resource_params)
+          @page_section.pageable = @pageable
+          @page_section.save!
+        end
+      end
+
+      def destroy
+        @page_section.destroy if @page_section.can_be_deleted?
+      end
+
+      def move_higher
+        if @page_section.first?
+          head :ok
+        else
+          @page_section.move_higher
+        end
+      end
+
+      def move_lower
+        if @page_section.last?
+          head :ok
+        else
+          @page_section.move_lower
+        end
+      end
+
+      def restore_design_settings_to_defaults
+        @page_section.restore_design_settings_to_defaults
+      end
+
+      private
+
+      def load_pageable
+        @pageable = if @page_section.present? && @page_section.pageable.present?
+                      @page_section.pageable
+                    elsif params[:page_id].present?
+                      current_store.theme_page_previews.friendly.find_by(id: params[:page_id]) ||
+                        current_store.page_previews.friendly.find(params[:page_id])
+                    elsif params[:theme_id].present?
+                      current_store.theme_previews.find(params[:theme_id])
+                    end
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/pages_controller.rb

@@ -0,0 +1,40 @@
+module Spree
+  module Admin
+    class PagesController < Spree::Admin::ResourceController
+      create.before :set_page
+      update.after :remove_preview_from_session
+      destroy.after :remove_preview_from_session
+      create.after :remove_preview_from_session
+
+      private
+
+      def remove_preview_from_session
+        session.delete(:page_preview_id)
+      end
+
+      def flash_message_for(object, event_sym)
+        Spree.t(event_sym, resource: "#{Spree.t(:page)} \"#{object.name}\"")
+      end
+
+      def set_page
+        @object = current_store.pages.custom.new
+      end
+
+      def edit_object_url(object, options = {})
+        spree.edit_admin_theme_path(current_store.default_theme, page_id: object.id, **options)
+      end
+
+      def collection
+        return @collection if @collection.present?
+
+        @collection = current_store.pages.custom
+
+        params[:q] ||= {}
+        params[:q][:s] ||= 'created_at desc'
+
+        @search = @collection.ransack(params[:q])
+        @collection = @search.result.page(params[:page]).per(params[:per_page])
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/payment_methods_controller.rb

@@ -0,0 +1,45 @@
+module Spree
+  module Admin
+    class PaymentMethodsController < ResourceController
+      prepend_before_action :require_payment_type, only: [:new, :create]
+      before_action :clear_empty_password_preferences, only: :update
+
+      private
+
+      def build_resource
+        @object = params[:payment_method].delete(:type).constantize.new if params[:payment_method].present?
+      end
+
+      def collection
+        return @collection if @collection.present?
+
+        params[:q] ||= {}
+
+        @collection = super.order(position: :asc)
+        @search = @collection.ransack(params[:q])
+        @collection = @search.result.page(params[:page]).per(params[:per_page])
+      end
+
+      def update_turbo_stream_enabled?
+        true
+      end
+
+      def require_payment_type
+        redirect_to spree.admin_payment_methods_path unless params.dig(:payment_method, :type).present?
+      end
+
+      def clear_empty_password_preferences
+        if params[:payment_method].present?
+          password_preferences = @object.preferences_of_type(:password)
+          password_preferences.each do |preference|
+            preference_key = "preferred_#{preference}"
+
+            if params.dig(:payment_method, preference_key).blank? && @object.preferences[preference].present?
+              params[:payment_method].delete(preference_key)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/payments_controller.rb

@@ -0,0 +1,122 @@
+module Spree
+  module Admin
+    class PaymentsController < Spree::Admin::ResourceController
+      belongs_to 'spree/order', find_by: :number
+
+      before_action :load_data
+      before_action :proceed_order_state, only: :new
+
+      def new
+        payment_method = params[:payment_method_id] ? @payment_methods.find { |pm| pm.id.to_s == params[:payment_method_id].to_s } : @payment_methods.first
+
+        @payment = @order.payments.build(payment_method: payment_method)
+
+        if payment_method.try(:source_required?)
+          source_class = (payment_method.try(:payment_source_class) || Spree::CreditCard)
+          @payment.source = source_class&.new
+        end
+      end
+
+      def create
+        invoke_callbacks(:create, :before)
+
+        @order.transaction do
+          @object.attributes = permitted_resource_params
+          @object.build_source
+          @object.save!
+
+          if @order.billing_address.nil?
+            @order.clone_shipping_address
+            @order.save!
+          end
+        end
+
+        @object.process!
+
+        # Transition order as far as it will go.
+        while @order.next; end
+        # If "@order.next" didn't trigger payment processing already (e.g. if the order was
+        # already complete) then trigger it manually now
+
+        invoke_callbacks(:create, :after)
+
+        redirect_to location_after_save
+      rescue Spree::Core::GatewayError => e
+        @object.failure if defined?(@object) && @object.persisted?
+        invoke_callbacks(:create, :fails)
+
+        flash[:error] = e.message.to_s
+        render :new, status: :unprocessable_entity
+      rescue ActiveRecord::RecordInvalid => _e
+        @object.failure if defined?(@object) && @object.persisted?
+        invoke_callbacks(:create, :fails)
+
+        flash[:error] = @object.errors.full_messages.to_sentence
+        render :new, status: :unprocessable_entity
+      end
+
+      def capture
+        if @payment.capture!
+          flash[:success] = Spree.t(:payment_updated)
+          # move order to next state if possible
+          while @order.next; end
+        else
+          flash[:error] = @payment.errors.full_messages.to_sentence
+        end
+        redirect_to location_after_save
+      rescue Spree::Core::GatewayError => ge
+        flash[:error] = ge.message.to_s
+        redirect_to location_after_save
+      end
+
+      def void
+        if @payment.void_transaction!
+          flash[:success] = Spree.t(:payment_updated)
+        else
+          flash[:error] = Spree.t(:cannot_perform_operation)
+        end
+        redirect_to location_after_save
+      rescue Spree::Core::GatewayError => ge
+        flash[:error] = ge.message.to_s
+        redirect_to location_after_save
+      end
+
+      private
+
+      def proceed_order_state
+        # Move order to payment state in order to capture tax generated on shipments
+        ActiveRecord::Base.connected_to(role: :writing) do
+          if @order.can_go_to_state?('payment')
+            @order.next
+          end
+        end
+      end
+
+      def build_resource
+        # This method is overridden because we don't want order to have invalid payment since we are doing `order.next` in the `new` action
+        model_class.new(order: parent)
+      end
+
+      def model_class
+        Spree::Payment
+      end
+
+      def permitted_resource_params
+        params.require(:payment).permit(permitted_payment_attributes)
+      end
+
+      def collection_url
+        spree.edit_admin_order_path(@order)
+      end
+
+      def location_after_save
+        collection_url
+      end
+
+      def load_data
+        @payment_methods = @order.collect_backend_payment_methods
+        @store_credits = @order.available_store_credits if @payment_methods.any?(&:store_credit?)
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/post_categories_controller.rb

@@ -0,0 +1,6 @@
+module Spree
+  module Admin
+    class PostCategoriesController < ResourceController
+    end
+  end
+end

data/app/controllers/spree/admin/posts_controller.rb

@@ -0,0 +1,23 @@
+module Spree
+  module Admin
+    class PostsController < ResourceController
+      def select_options
+        render json: current_store.posts.published.to_tom_select_json
+      end
+
+      private
+
+      def collection
+        return @collection if @collection.present?
+
+        @collection = super
+
+        params[:q] ||= {}
+        params[:q][:s] ||= 'published_at desc'
+
+        @search = @collection.ransack(params[:q])
+        @collection = @search.result.page(params[:page]).per(params[:per_page])
+      end
+    end
+  end
+end