spree_cm_commissioner 2.13.3 → 2.13.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f8c022ba33110958bd0da63395b5e814fb1c5d82469b4801a134b5697dde8a7b
-  data.tar.gz: 30f528c86e5b3cd05e22c4ad44fa85d68a0446065c25b1d30b790897afd73f5f
+  metadata.gz: 565fc705e24c32c2f3bd35aad88607d80d7f26b1bab3ff62dc64e2890202ed9a
+  data.tar.gz: b6647ca2838265f710f999389157765f24ba1baf92369521aab95a711779a0d9
 SHA512:
-  metadata.gz: fdb920f19e40a0634796748e15283642dcec8bbcc5d75ff4140628b2c4146e424a987f88c89c14e211e16f0646cae97964af025620aecc69457e518df5cbf1c7
-  data.tar.gz: '09ce9911bf7008a80d729b93890f06f24b2deb98e00be9f811550c5803daa49fcb57e94c40decdfdc88e90e8e0a908964984ad7d8c3b146a10e331c93573da15'
+  metadata.gz: 36a8d1f75f387fb33ab1d394ee91e61ce6c1179bbf2323352f1d56e3bbb303942d57af72933910e8017f184dcf0a24174a12f70ec4a69e42309cbec47fe9cdd7
+  data.tar.gz: d7dc21e3383b9784c9b0cef12c354f4a3d4d3535fe122b666b8abdd3b4e4fea4660f321ada830e83fdb409ebd8d2d91ed9fa6295b1801371d803475334431860

data/.env.example

@@ -50,7 +50,6 @@ DISTANCE_SIGNING_KEY=hei********************VY
 # Cache durations (in seconds) for different content types
 # See: app/controllers/concerns/spree_cm_commissioner/content_cachable.rb
 CACHE_AUTO_INVALIDATION_DISABLED="" # Set to yes to disable CDN cache invalidation entirely (kill switch)
-CACHE_CDN_MAX_AGE=86400 # CDN/server-side cache duration for all responses
 CACHE_STATIC_MAX_AGE=86400 # Static content (countries, provinces, seat layouts, CMS pages) - 1 day
 CACHE_SEMI_STATIC_MAX_AGE=3600 # Semi-static content (menus, homepage backgrounds, routes) - 1 hour
 CACHE_MODERATE_MAX_AGE=1800 # Moderate freshness (products, events, vendors) - 30 minutes

data/Gemfile.lock

@@ -34,7 +34,7 @@ GIT
 PATH
   remote: .
   specs:
-    spree_cm_commissioner (2.13.3)
+    spree_cm_commissioner (2.13.4)
       activerecord-multi-tenant
       activerecord_json_validator (~> 2.1, >= 2.1.3)
       aws-sdk-cloudfront

data/app/assets/config/spree_cm_commissioner_manifest.js

@@ -1,5 +1,4 @@
 //= link_tree ../images
-//= link spree_cm_commissioner/backend/invoice.css
 
 //= link spree_cm_commissioner/telegram/all.js
 //= link spree_cm_commissioner/telegram/all.css

data/app/assets/javascripts/spree_cm_commissioner/backend.js

@@ -2,14 +2,6 @@
 //= require map/map-picker
 //= require spree_cm_commissioner/routes
 //= require spree_cm_commissioner/calendar
-//= require spree_cm_commissioner/role_form
-//= require spree_cm_commissioner/address_hide_form
 //= require spree_cm_commissioner/annual_calendar_form
-//= require spree_cm_commissioner/report_hide_filter
-//= require spree_cm_commissioner/update_popup_confirmation
-//= require spree_cm_commissioner/vehicle_seat
-//= require spree_cm_commissioner/selected_field_filter_origin_destination
-//= require spree_cm_commissioner/location_checkbox_manager
-//= require spree_cm_commissioner/trip_stop_selection
 //= require spree_cm_commissioner/tenant_payment_icon_fields
 //= require spree_cm_commissioner/copy_to_clipboard

data/app/assets/stylesheets/spree_cm_commissioner/backend/commissioner_admin.css.scss

@@ -2,5 +2,4 @@
 @import "spree_cm_commissioner/backend/calendar";
 @import "spree_cm_commissioner/backend/service_calendar";
 @import "spree_cm_commissioner/backend/guest_qr_code";
-@import "spree_cm_commissioner/backend/vehicle_seat";
 @import "spree_cm_commissioner/backend/tenant_payment_icon_fields";

data/app/controllers/concerns/spree_cm_commissioner/content_cachable.rb

@@ -24,7 +24,7 @@ module SpreeCmCommissioner
       MenusController
       HomepageBackgroundController
       HomepageDataController
-      PopularRoutesController
+      PopularRoutePlacesController
       RoutePlacesController
       ShowsController
       EpisodesController
@@ -46,7 +46,6 @@ module SpreeCmCommissioner
       AccommodationsController
       VendorsController
       VendorPhotosController
-      DynamicFieldsController
     ].freeze
 
     # Priority 4: High Freshness (5 minutes)
@@ -54,12 +53,9 @@ module SpreeCmCommissioner
       TripsController
       TripSearchController
       VotingContestantsController
+      DynamicFieldsController
     ].freeze
 
-    def shared_max_age
-      ENV.fetch('CACHE_CDN_MAX_AGE', 1.day.to_i).to_i
-    end
-
     # Override This Method based on your UseCase
     # Or let it auto-detect based on controller name
     def client_max_age
@@ -78,12 +74,18 @@ module SpreeCmCommissioner
       end
     end
 
+    # Defaults to the client TTL so a tier's max-age bounds CDN staleness too: most endpoints
+    # (e.g. trips, trip search) have no invalidation on change, and an unlisted controller
+    # (max-age 0) must not be CDN-cached at all.
+    def shared_max_age
+      client_max_age
+    end
+
     def set_cache_control_for_cdn
       return if response.committed?
       return if response.status != 200
 
-      # max-age: browser/client cache, s-maxage: CDN/server cache
-      # Allow client caching for mobile apps while keeping CDN cache longer
+      # max-age: browser/client cache, s-maxage: CDN cache
       response.headers['Cache-Control'] = "public, max-age=#{client_max_age}, s-maxage=#{shared_max_age}"
 
       # Expires: Absolute timestamp when cache becomes stale (HTTP/1.0 fallback)

data/app/controllers/spree/admin/base_controller_decorator.rb

@@ -1,10 +1,6 @@
 module Spree
   module Admin
     module BaseControllerDecorator
-      def self.prepended(base)
-        base.before_action :redirect_to_billing, if: -> { Spree::Store.default.code.include?('billing') }
-      end
-
       # even db in read only mode, authorizor still need to run Warden callbacks which will write to db
       # this include update tracked fields such as sign_in_count, last_sign_in_at, etc.
       def authorize!(*args)
@@ -44,14 +40,6 @@ module Spree
 
         redirect_back fallback_location: admin_root_path
       end
-
-      private
-
-      def redirect_to_billing
-        return if request.path.include?('/billing')
-
-        redirect_to billing_root_url unless spree_current_user.super_admin?
-      end
     end
   end
 end

data/app/controllers/spree/admin/oauth_application_api_keys_controller.rb

@@ -0,0 +1,118 @@
+module Spree
+  module Admin
+    # A mini app's API key as its own resource: POST mints one, PATCH restores a previous one, DELETE
+    # revokes it. Each asks for nothing else, so no ordinary save of the application can reach the key.
+    class OauthApplicationApiKeysController < Spree::Admin::BaseController
+      before_action :load_oauth_application
+
+      # A minted key is one the admin has no other copy of, so it is handed to the page this redirects
+      # to and shown there once. Stashed only if the save went through — a key that never reached the
+      # row is not one to hand out.
+      def create
+        minted = change_api_key(:saved) { save_api_key(nil) }
+
+        session[:minted_api_key] = @oauth_application.mini_app.api_key if minted
+      end
+
+      # Puts back a key this application used to hold, named by the version that recorded it. The value
+      # never travels through the request — the admin picks one and the plaintext is read out of history
+      # here, so no key can be typed in and nothing weak can get in.
+      def update
+        key = api_key_history.key_for(params[:version_id])
+
+        if key.blank?
+          flash[:error] = I18n.t('mini_apps.api_key.not_restorable')
+          return redirect_to_application
+        end
+
+        change_api_key(:restored) { save_api_key(key, source: 'restored') }
+      end
+
+      # Leaves the mini app with no key at all, rather than handing the partner a working one they never
+      # asked for — what a leak calls for. #create puts one back.
+      def destroy
+        mini_app = @oauth_application.mini_app
+
+        # Said plainly rather than reporting a revoke that removed nothing.
+        if mini_app&.supports_api_key? && mini_app.api_key.blank?
+          flash[:error] = I18n.t('mini_apps.api_key.nothing_to_revoke')
+          return redirect_to_application
+        end
+
+        change_api_key(:revoked) do
+          mini_app.revoke_api_key!
+          @oauth_application.save
+        end
+      end
+
+      # The dialog's contents, fetched when it is opened. Reading history costs a scan of the
+      # application's versions, which is not worth doing on every render of the edit page.
+      def history
+        render partial: 'spree/admin/oauth_applications/api_key_restore_list',
+               locals: { application: @oauth_application, entries: api_key_history.entries },
+               layout: false
+      end
+
+      private
+
+      # Authorized as an edit of the application, not as create/destroy of a key. Spelled out because
+      # #model_class only tells BaseController the class, never this row.
+      def load_oauth_application
+        @oauth_application = Spree::OauthApplication.find(params[:oauth_application_id])
+
+        authorize! :update, @oauth_application
+      end
+
+      def model_class
+        Spree::OauthApplication
+      end
+
+      # The gate every key change passes. Replacing, restoring or clearing a live key changes what the
+      # partner has to send, so it costs the application's name typed back — checked here because a
+      # hand-made request walks past the dialog. A mini app with no key yet is asked for nothing.
+      #
+      # Returns whether this request changed the key. A `flash[:success]` check would also see the
+      # previous request's flash, and #create would reveal a key it never minted.
+      def change_api_key(success)
+        mini_app = @oauth_application.mini_app
+        changed = false
+
+        if mini_app.nil? || !mini_app.supports_api_key?
+          flash[:error] = I18n.t('mini_apps.api_key.unsupported')
+        elsif confirmation_mismatched?(mini_app)
+          flash[:error] = I18n.t('mini_apps.api_key.confirmation_mismatched')
+        elsif yield
+          flash[:success] = I18n.t("mini_apps.api_key.#{success}")
+          changed = true
+        else
+          # The key's own validations still apply — a restored one another application has since taken
+          # lands here.
+          flash[:error] = @oauth_application.errors.full_messages.to_sentence
+        end
+
+        redirect_to_application
+
+        changed
+      end
+
+      def save_api_key(value, source: nil)
+        @oauth_application.mini_app.replace_api_key!(value, actor: try_spree_current_user, source: source)
+        @oauth_application.save
+      end
+
+      def api_key_history
+        SpreeCmCommissioner::MiniAppProvider::ApiKeyHistory.new(@oauth_application)
+      end
+
+      def confirmation_mismatched?(mini_app)
+        return false if mini_app.api_key.blank?
+
+        params[:api_key_confirm].to_s.strip != @oauth_application.name
+      end
+
+      def redirect_to_application
+        redirect_to spree.edit_admin_oauth_application_path(@oauth_application)
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/oauth_applications_controller.rb

@@ -5,8 +5,18 @@ module Spree
       # Edit forms allow users to modify scopes without forced default
       before_action :set_default_scopes, only: [:new]
 
+      # Declared after ResourceController's own callbacks so @object is loaded by the time it runs.
+      before_action :take_minted_api_key, only: [:edit]
+
       private
 
+      # Written by OauthApplicationApiKeysController#create and read here, because this is the page that
+      # shows it. The session rather than the flash, because the admin layout renders whichever flash
+      # entry happens to be first. Deleted as it is read, so it is on screen for exactly one render.
+      def take_minted_api_key
+        @minted_api_key = session.delete(:minted_api_key)
+      end
+
       def create_turbo_stream_enabled?
         true
       end

data/app/controllers/spree/api/v2/storefront/dynamic_field_options_controller.rb

@@ -3,6 +3,8 @@ module Spree
     module V2
       module Storefront
         class DynamicFieldOptionsController < ::Spree::Api::V2::ResourceController
+          before_action :ensure_dynamic_field_enabled_for_product, if: -> { params[:product_id].present? }
+
           # override
           def collection
             return @collection if defined?(@collection)
@@ -17,6 +19,16 @@ module Spree
             @collection
           end
 
+          private
+
+          # Only the product-scoped route checks this; the legacy flat route serves any field by id.
+          def ensure_dynamic_field_enabled_for_product
+            SpreeCmCommissioner::ProductDynamicField.find_by!(
+              product_id: params[:product_id],
+              dynamic_field_id: params[:dynamic_field_id]
+            )
+          end
+
           # override
           def collection_serializer
             SpreeCmCommissioner::V2::Storefront::DynamicFieldOptionSerializer

data/app/controllers/spree/api/v2/storefront/trip_search_controller.rb

@@ -25,11 +25,6 @@ module Spree
 
           private
 
-          # override from ContentCacheable
-          def max_age
-            CACHE_EXPIRES_IN.to_i
-          end
-
           # override
           def collection_cache_key
             cache_key_parts = [

data/app/controllers/spree/api/v2/tenant/trip_search_controller.rb

@@ -25,11 +25,6 @@ module Spree
 
           private
 
-          # override from ContentCacheable
-          def max_age
-            CACHE_EXPIRES_IN.to_i
-          end
-
           # override
           def collection_cache_key
             cache_key_parts = [

data/app/helpers/spree/{billing → admin}/navigation_helper_decorator.rb

@@ -1,13 +1,6 @@
 module Spree
-  module Billing
+  module Admin
     module NavigationHelperDecorator
-      def billing_main_menu_tree(text, icon: nil, sub_menu: nil, url: '#')
-        content_tag :li, class: 'sidebar-menu-item d-block w-100 text-muted' do
-          main_menu_item(text, url: url, icon: icon) +
-            render(partial: "spree/billing/shared/sub_menu/#{sub_menu}")
-        end
-      end
-
       def customer_per_page_dropdown
         per_page_default = Spree::Backend::Config.admin_orders_per_page
         per_page_options = %w[24 48 120 200 400 600]
@@ -23,4 +16,4 @@ module Spree
   end
 end
 
-Spree::Admin::NavigationHelper.prepend(Spree::Billing::NavigationHelperDecorator)
+Spree::Admin::NavigationHelper.prepend(Spree::Admin::NavigationHelperDecorator)

data/app/interactors/spree_cm_commissioner/user_acleda_bank_web_app_authenticator.rb

@@ -0,0 +1,38 @@
+module SpreeCmCommissioner
+  # Authenticates an ACLEDA Mini App session_key (a JWT minted by
+  # Vpago::AcledaMiniApp::Session::Create, signed with the user's secure_token).
+  #
+  # Unlike the Vattanac authenticator, this enforces the JWT signature: a token
+  # must be signed with the user's secure_token or it is rejected.
+  class UserAcledaBankWebAppAuthenticator < BaseInteractor
+    delegate :session_key, to: :context
+
+    def call
+      return context.fail!(message: 'Invalid token') unless payload
+      return context.fail!(message: 'User not found') unless user
+      return context.fail!(message: 'Invalid token signature') unless valid_signature?
+
+      context.user = user
+    rescue JWT::DecodeError => e
+      context.fail!(message: "Decode error: #{e.message}")
+    end
+
+    private
+
+    # Unverified decode, only to read user_id. The signature is enforced
+    # separately in #valid_signature?.
+    def payload
+      @payload ||= SpreeCmCommissioner::UserSessionJwtToken.decode(session_key)
+    end
+
+    def user
+      @user ||= Spree::User.find_by(id: payload['user_id']) if payload
+    end
+
+    # UserSessionJwtToken.decode returns nil when the signature does not verify
+    # against the user's secure_token, so a forged/tampered token fails here.
+    def valid_signature?
+      SpreeCmCommissioner::UserSessionJwtToken.decode(session_key, user.secure_token).present?
+    end
+  end
+end

data/app/interactors/spree_cm_commissioner/user_wing_bank_web_app_authenticator.rb

@@ -0,0 +1,39 @@
+module SpreeCmCommissioner
+  # Authenticates a Wing Mini App session_key (a JWT minted by
+  # Vpago::WingMiniApp::Session::Create, signed with the user's secure_token).
+  #
+  # Same shape as UserAcledaBankWebAppAuthenticator: the JWT signature is enforced
+  # here — a token must be signed with the user's secure_token or it is rejected.
+  class UserWingBankWebAppAuthenticator < BaseInteractor
+    delegate :session_key, to: :context
+
+    def call
+      return context.fail!(message: 'Invalid token') unless payload
+      return context.fail!(message: 'User not found') unless user
+      return context.fail!(message: 'Invalid token signature') unless valid_signature?
+
+      context.user = user
+      reject_unauthenticatable_user!(context.user)
+    rescue JWT::DecodeError => e
+      context.fail!(message: "Decode error: #{e.message}")
+    end
+
+    private
+
+    # Unverified decode, only to read user_id. The signature is enforced
+    # separately in #valid_signature?.
+    def payload
+      @payload ||= SpreeCmCommissioner::UserSessionJwtToken.decode(session_key)
+    end
+
+    def user
+      @user ||= Spree::User.find_by(id: payload['user_id']) if payload
+    end
+
+    # UserSessionJwtToken.decode returns nil when the signature does not verify
+    # against the user's secure_token, so a forged/tampered token fails here.
+    def valid_signature?
+      SpreeCmCommissioner::UserSessionJwtToken.decode(session_key, user.secure_token).present?
+    end
+  end
+end

data/app/models/concerns/spree_cm_commissioner/oauth_application/mini_app.rb

@@ -0,0 +1,72 @@
+module SpreeCmCommissioner
+  module OauthApplication
+    # Lets a Spree::OauthApplication stand for a mini app — the storefront a partner embeds in its
+    # own banking app. `provider` names which one; its settings live on a MiniAppProvider class.
+    module MiniApp
+      extend ActiveSupport::Concern
+
+      included do
+        # Deterministic so `find_by` and the unique index keep working: calls are looked up by key.
+        encrypts :api_key, deterministic: true
+
+        # '' encrypts to a non-empty ciphertext, which the partial index cannot tell from a real key.
+        before_validation { self.api_key = nil if api_key.blank? }
+
+        # Unique: a keyless call is traced back by provider alone.
+        validates :provider,
+                  inclusion: { in: -> (_application) { MiniAppProvider::Base.providers.map(&:provider) } },
+                  uniqueness: true,
+                  allow_blank: true
+
+        # `is`, not a minimum: a short or padded key saves fine, then fails every call the partner makes.
+        validates :api_key, uniqueness: true, allow_blank: true
+        validates :api_key, length: { is: MiniAppProvider::Base::API_KEY_LENGTH },
+                            format: { without: /\s/, message: 'cannot contain spaces' }, # rubocop:disable Rails/I18nLocaleTexts
+                            allow_blank: true
+
+        # Rules that do not parse stop matching silently and lock the mini app out.
+        validate do
+          mini_app&.invalid_ip_rules&.each do |name|
+            errors.add(:base, I18n.t('mini_apps.ip_rules.invalid', name: name.to_s.humanize))
+          end
+        end
+      end
+
+      class_methods do
+        # Authenticated lookup. The provider must match the row the key found, or one mini app's key
+        # would open another's flow. `api_key:` has no default: a missing header fails loudly here
+        # instead of falling through to #keyless_mini_app_for, where nothing is checked.
+        def mini_app_for(provider, api_key:)
+          return nil if api_key.blank?
+
+          application = find_by(api_key: api_key)
+          return nil unless application && application.provider.to_s == provider.to_s
+
+          mini_app = application.mini_app
+
+          mini_app if mini_app&.supports_api_key?
+        end
+
+        # For mini apps with no key to send — the partner only opens a WebView, so the customer's
+        # browser arrives, not the partner's server. Refuses any provider that does have a key, so
+        # nothing reaches a key-using mini app without it.
+        def keyless_mini_app_for(provider)
+          mini_app = find_by(provider: provider.to_s)&.mini_app
+
+          mini_app unless mini_app.nil? || mini_app.supports_api_key?
+        end
+      end
+
+      def mini_app
+        @mini_app ||= MiniAppProvider::Base.for(self)
+      end
+
+      # Preferences belonging to other mini apps are ignored rather than written to `settings`.
+      def mini_app_attributes=(attributes)
+        attributes.each do |name, value|
+          mini_app.public_send("#{name}=", value) if mini_app.respond_to?("#{name}=")
+        end
+      end
+    end
+  end
+end

data/app/models/spree_cm_commissioner/dynamic_field.rb

@@ -4,7 +4,7 @@ module SpreeCmCommissioner
 
     belongs_to :vendor, class_name: 'Spree::Vendor', optional: false
 
-    has_many :dynamic_field_options, class_name: 'SpreeCmCommissioner::DynamicFieldOption', dependent: :destroy
+    has_many :dynamic_field_options, -> { order(:position) }, class_name: 'SpreeCmCommissioner::DynamicFieldOption', dependent: :destroy
     has_many :guest_dynamic_fields, class_name: 'SpreeCmCommissioner::GuestDynamicField', dependent: :destroy
     has_many :product_dynamic_fields, class_name: 'SpreeCmCommissioner::ProductDynamicField', dependent: :destroy
 
@@ -19,6 +19,7 @@ module SpreeCmCommissioner
     validate :validate_data_fill_stage_phase
 
     after_commit :enqueue_data_fill_stage_maintenance_for_products, on: %i[update], if: :saved_change_to_data_fill_stage?
+    after_commit :enqueue_cache_invalidation_for_products, on: %i[update]
 
     scope :with_dynamic_field_options, -> { includes(dynamic_field_options: :dynamic_field) }
 
@@ -57,6 +58,16 @@ module SpreeCmCommissioner
       end
     end
 
+    # Destroy isn't handled here: by after_commit the join rows are gone, and each
+    # ProductDynamicField destroyed with this field enqueues its own product.
+    def enqueue_cache_invalidation_for_products
+      product_dynamic_fields.distinct.pluck(:product_id).each do |product_id|
+        SpreeCmCommissioner::MaintenanceTasks::CacheInvalidation
+          .pending
+          .create_or_find_by(maintainable_type: 'Spree::Product', maintainable_id: product_id)
+      end
+    end
+
     def validate_data_fill_stage_phase
       return if data_fill_stage.blank?
 

data/app/models/spree_cm_commissioner/dynamic_field_option.rb

@@ -11,8 +11,19 @@ module SpreeCmCommissioner
     validates :status, presence: true
     validate :parent_field_must_be_selection_type
 
+    after_commit :enqueue_cache_invalidation_for_products
+
     private
 
+    # Options are embedded in the storefront dynamic_fields response of every product using the parent field.
+    def enqueue_cache_invalidation_for_products
+      SpreeCmCommissioner::ProductDynamicField.where(dynamic_field_id: dynamic_field_id).distinct.pluck(:product_id).each do |product_id|
+        SpreeCmCommissioner::MaintenanceTasks::CacheInvalidation
+          .pending
+          .create_or_find_by(maintainable_type: 'Spree::Product', maintainable_id: product_id)
+      end
+    end
+
     def parent_field_must_be_selection_type
       return unless dynamic_field
 

data/app/models/spree_cm_commissioner/guest.rb

@@ -311,6 +311,14 @@ module SpreeCmCommissioner
       Array(public_metadata['eligible_check_in_session_ids']).map(&:to_i)
     end
 
+    # The buyer's order that took over this ticket. Nil until a transfer out of this guest completes,
+    # which is also when the guest is marked transferred.
+    def transferred_to_order
+      return nil unless transferred?
+
+      ticket_transfers.completed.order(:completed_at).last&.order
+    end
+
     # Set by TicketTransfers::TransferGuest when this guest was created to receive a transferred ticket
     def from_transfer?
       ActiveModel::Type::Boolean.new.cast(public_metadata['from_transfer']) || false

data/app/models/spree_cm_commissioner/mini_app_provider/acleda_bank.rb

@@ -0,0 +1,28 @@
+module SpreeCmCommissioner
+  module MiniAppProvider
+    class AcledaBank < Base
+      # The HMAC key ACLEDA signs each session request with, kept here rather than in
+      # Doorkeeper's own `secret`: whether that column stays readable depends on
+      # `hash_application_secrets`, which the engines turn on and cm-market-server
+      # comments out, and a key that has to be recomputed cannot rest on which
+      # initializer ran last.
+      preference :secret_key, :string, default: ''
+
+      def self.credential
+        :secret_key
+      end
+
+      def self.supports_api_key?
+        true
+      end
+
+      def self.preference_groups
+        {
+          credentials: %i[secret_key],
+          ip_rules: IP_RULES,
+          rate_limits: RATE_LIMITS
+        }
+      end
+    end
+  end
+end