spree_legacy_api_v2 1.0.0

data/app/controllers/spree/api/v2/platform/resource_controller.rb

@@ -0,0 +1,154 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class ResourceController < ::Spree::Api::V2::ResourceController
+          # doorkeeper scopes usage: https://github.com/doorkeeper-gem/doorkeeper/wiki/Using-Scopes
+          before_action :validate_token_client
+          before_action -> { doorkeeper_authorize! :read, :admin }
+          before_action -> { doorkeeper_authorize! :write, :admin }, if: :write_request?
+
+          # optional authorization if using a user token instead of app token
+          before_action :authorize_spree_user
+
+          # index and show actions are defined in Spree::Api::V2::ResourceController
+
+          def create
+            resource = model_class.new(permitted_resource_params)
+            ensure_current_store(resource)
+
+            if resource.save
+              render_serialized_payload(201) { serialize_resource(resource) }
+            else
+              render_error_payload(resource.errors)
+            end
+          end
+
+          def update
+            resource.assign_attributes(permitted_resource_params)
+            ensure_current_store(resource)
+
+            if resource.save
+              render_serialized_payload { serialize_resource(resource) }
+            else
+              render_error_payload(resource.errors)
+            end
+          end
+
+          def destroy
+            if resource.destroy
+              head 204
+            else
+              render_error_payload(resource.errors)
+            end
+          end
+
+          protected
+
+          def resource_serializer
+            serializer_base_name = model_class.to_s.sub('Spree::', '')
+            "Spree::Api::V2::Platform::#{serializer_base_name}Serializer".constantize
+          end
+
+          def collection_serializer
+            resource_serializer
+          end
+
+          # overwriting to utilize ransack gem for filtering
+          # https://github.com/activerecord-hackery/ransack#search-matchers
+          def collection
+            @collection ||= scope.ransack(params[:filter]).result
+          end
+
+          # overwriting to skip cancancan check if API is consumed by an application
+          def scope
+            return super if spree_current_user.present?
+
+            super(skip_cancancan: true)
+          end
+
+          # We're overwriting this method because the original one calls `dookreeper_authorize`
+          # which breaks our application authorizations defined on top of this controller
+          def spree_current_user
+            return nil unless doorkeeper_token
+            return nil if doorkeeper_token.resource_owner_id.nil?
+            return @spree_current_user if @spree_current_user
+
+            @spree_current_user ||= doorkeeper_token.resource_owner
+          end
+
+          def access_denied(exception)
+            access_denied_401(exception)
+          end
+
+          def validate_token_client
+            return if doorkeeper_token.nil?
+
+            raise Doorkeeper::Errors::DoorkeeperError if doorkeeper_token.application.nil?
+          end
+
+          # if using a user oAuth token we need to check CanCanCan abilities
+          # defined in https://github.com/spree/spree/blob/main/core/app/models/spree/ability.rb
+          def authorize_spree_user
+            return if spree_current_user.nil?
+
+            case action_name
+            when 'create'
+              spree_authorize! :create, model_class
+            when 'destroy'
+              spree_authorize! :destroy, resource
+            when 'index'
+              spree_authorize! :read, model_class
+            when 'show'
+              spree_authorize! :read, resource
+            else
+              spree_authorize! :update, resource
+            end
+          end
+
+          def model_param_name
+            model_class.to_s.demodulize.underscore
+          end
+
+          def spree_permitted_attributes
+            store_ids = if model_class.method_defined?(:stores)
+                          [{ store_ids: [] }]
+                        else
+                          []
+                        end
+
+            model_class.json_api_permitted_attributes + store_ids + metadata_params + metafields_params
+          end
+
+          def metadata_params
+            if model_class.include?(Metadata)
+              [{ public_metadata: {}, private_metadata: {} }]
+            else
+              []
+            end
+          end
+
+          def metafields_params
+            if Spree::MetafieldDefinition.available_resources.map(&:name).include?(model_class.name) && model_class.method_defined?(:metafields)
+              [{ metafields_attributes: Spree::PermittedAttributes.metafield_attributes }]
+            else
+              []
+            end
+          end
+
+          def permitted_resource_params
+            params.require(model_param_name).permit(spree_permitted_attributes)
+          end
+
+          def allowed_sort_attributes
+            (super << spree_permitted_attributes).uniq.compact
+          end
+
+          def write_request?
+            %w[put patch post delete].include?(request.request_method.downcase)
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/roles_controller.rb

@@ -0,0 +1,19 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class RolesController < ResourceController
+          private
+
+          def model_class
+            Spree::Role
+          end
+
+          def resource_serializer
+            Spree.api.platform_role_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/shipments_controller.rb

@@ -0,0 +1,147 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class ShipmentsController < ResourceController
+          include NumberResource
+
+          before_action :load_variant, only: %i[transfer_to_location transfer_to_shipment]
+
+          SHIPMENT_STATES = %w[ready ship cancel resume pend]
+
+          def create
+            # FIXME: support saving metadata
+            result = create_service.call(
+              store: current_store,
+              shipment_attributes: params.require(:shipment).permit(
+                :order_id, :stock_location_id, :variant_id, :quantity
+              )
+            )
+            render_result(result, 201)
+          end
+
+          def update
+            result = update_service.call(shipment: resource, shipment_attributes: permitted_resource_params)
+            render_result(result)
+          end
+
+          SHIPMENT_STATES.each do |state|
+            define_method state do
+              result = change_state_service.call(shipment: resource, state: state)
+              render_result(result)
+            end
+          end
+
+          def add_item
+            result = add_item_service.call(
+              shipment: resource,
+              variant_id: params.dig(:shipment, :variant_id),
+              quantity: params.dig(:shipment, :quantity)
+            )
+            render_result(result)
+          end
+
+          def remove_item
+            result = remove_item_service.call(
+              shipment: resource,
+              variant_id: params.dig(:shipment, :variant_id),
+              quantity: params.dig(:shipment, :quantity)
+            )
+
+            if result.success?
+              if result.value == :shipment_deleted
+                head 204
+              else
+                render_serialized_payload { serialize_resource(result.value) }
+              end
+            else
+              render_error_payload(result.error)
+            end
+          end
+
+          def transfer_to_location
+            stock_location = Spree::StockLocation.find(params.dig(:shipment, :stock_location_id))
+            quantity = params.dig(:shipment, :quantity)&.to_i || 1
+
+            unless quantity > 0
+              render_error_payload("#{I18n.t('spree.api.shipment_transfer_errors_occurred')} \n #{I18n.t('spree.api.negative_quantity')}")
+              return
+            end
+
+            transfer = resource.transfer_to_location(@variant, quantity, stock_location)
+            if transfer.valid? && transfer.run!
+              render json: { message: I18n.t('spree.api.shipment_transfer_success') }, status: 201
+            else
+              render_error_payload(transfer.errors)
+            end
+          end
+
+          def transfer_to_shipment
+            target_shipment = Spree::Shipment.find_by!(number: params.dig(:shipment, :target_shipment_number))
+            quantity = params.dig(:shipment, :quantity)&.to_i || 1
+
+            error =
+              if quantity < 0 && target_shipment == resource
+                "#{I18n.t('spree.api.negative_quantity')}, \n#{I18n.t('spree.api.wrong_shipment_target')}"
+              elsif target_shipment == resource
+                I18n.t('spree.api.wrong_shipment_target')
+              elsif quantity < 0
+                I18n.t('spree.api.negative_quantity')
+              end
+
+            if error
+              render_error_payload("#{I18n.t('spree.api.shipment_transfer_errors_occurred')} \n#{error}")
+            else
+              transfer = resource.transfer_to_shipment(@variant, quantity, target_shipment)
+              if transfer.valid? && transfer.run!
+                render json: { message: I18n.t('spree.api.shipment_transfer_success') }, status: 201
+              else
+                render_error_payload(transfer.errors)
+              end
+            end
+          end
+
+          private
+
+          def model_class
+            Spree::Shipment
+          end
+
+          def load_variant
+            @variant = current_store.variants.find_by(id: params.dig(:shipment, :variant_id))
+          end
+
+          def spree_permitted_attributes
+            Spree::Shipment.json_api_permitted_attributes + [
+              :selected_shipping_rate_id
+            ]
+          end
+
+          def create_service
+            Spree.api.platform_shipment_create_service
+          end
+
+          def update_service
+            Spree.api.platform_shipment_update_service
+          end
+
+          def change_state_service
+            Spree.api.platform_shipment_change_state_service
+          end
+
+          def add_item_service
+            Spree.api.platform_shipment_add_item_service
+          end
+
+          def remove_item_service
+            Spree.api.platform_shipment_remove_item_service
+          end
+
+          def resource_serializer
+            Spree.api.platform_shipment_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/shipping_categories_controller.rb

@@ -0,0 +1,19 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class ShippingCategoriesController < ResourceController
+          private
+
+          def model_class
+            Spree::ShippingCategory
+          end
+
+          def resource_serializer
+            Spree.api.platform_shipping_category_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/shipping_methods_controller.rb

@@ -0,0 +1,28 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class ShippingMethodsController < ResourceController
+          private
+
+          def model_class
+            Spree::ShippingMethod
+          end
+
+          def spree_permitted_attributes
+            super + [
+              {
+                shipping_category_ids: [],
+                calculator_attributes: {}
+              }
+            ]
+          end
+
+          def resource_serializer
+            Spree.api.platform_shipping_method_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/states_controller.rb

@@ -0,0 +1,23 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class StatesController < ResourceController
+          private
+
+          def model_class
+            Spree::State
+          end
+
+          def scope_includes
+            [:country]
+          end
+
+          def resource_serializer
+            Spree.api.platform_state_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/stock_items_controller.rb

@@ -0,0 +1,23 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class StockItemsController < ResourceController
+          private
+
+          def model_class
+            Spree::StockItem
+          end
+
+          def scope_includes
+            [:variant, :stock_location]
+          end
+
+          def resource_serializer
+            Spree.api.platform_stock_item_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/stock_locations_controller.rb

@@ -0,0 +1,23 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class StockLocationsController < ResourceController
+          private
+
+          def model_class
+            Spree::StockLocation
+          end
+
+          def scope_includes
+            [:country]
+          end
+
+          def resource_serializer
+            Spree.api.platform_stock_location_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/store_credit_categories_controller.rb

@@ -0,0 +1,19 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class StoreCreditCategoriesController < ResourceController
+          private
+
+          def model_class
+            Spree::StoreCreditCategory
+          end
+
+          def resource_serializer
+            Spree.api.platform_store_credit_category_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/store_credit_types_controller.rb

@@ -0,0 +1,19 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class StoreCreditTypesController < ResourceController
+          private
+
+          def model_class
+            Spree::StoreCreditType
+          end
+
+          def resource_serializer
+            Spree.api.platform_store_credit_type_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/store_credits_controller.rb

@@ -0,0 +1,23 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class StoreCreditsController < ResourceController
+          private
+
+          def model_class
+            Spree::StoreCredit
+          end
+
+          def scope_includes
+            [:user, :created_by, :category, :credit_type]
+          end
+
+          def resource_serializer
+            Spree.api.platform_store_credit_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/tax_categories_controller.rb

@@ -0,0 +1,23 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class TaxCategoriesController < ResourceController
+          private
+
+          def model_class
+            Spree::TaxCategory
+          end
+
+          def scope_includes
+            [:tax_rates]
+          end
+
+          def resource_serializer
+            Spree.api.platform_tax_category_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/tax_rates_controller.rb

@@ -0,0 +1,27 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class TaxRatesController < ResourceController
+          private
+
+          def model_class
+            Spree::TaxRate
+          end
+
+          def scope_includes
+            [:zone, :tax_category]
+          end
+
+          def spree_permitted_attributes
+            super + [calculator_attributes: Spree::Calculator.json_api_permitted_attributes]
+          end
+
+          def resource_serializer
+            Spree.api.platform_tax_rate_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/taxonomies_controller.rb

@@ -0,0 +1,23 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class TaxonomiesController < ResourceController
+          private
+
+          def model_class
+            Spree::Taxonomy
+          end
+
+          def scope_includes
+            [:taxons, :root]
+          end
+
+          def resource_serializer
+            Spree.api.platform_taxonomy_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/taxons_controller.rb

@@ -0,0 +1,59 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class TaxonsController < ResourceController
+          include ::Spree::Api::V2::Platform::NestedSetRepositionConcern
+
+          private
+
+          def successful_reposition_actions
+            reload_taxon_and_set_new_permalink(resource)
+            update_permalinks_on_child_taxons
+
+            render_serialized_payload { serialize_resource(resource) }
+          end
+
+          def reload_taxon_and_set_new_permalink(taxon)
+            taxon.reload
+            taxon.set_permalink
+            taxon.save!
+          end
+
+          def update_permalinks_on_child_taxons
+            resource.descendants.each do |taxon|
+              reload_taxon_and_set_new_permalink(taxon)
+            end
+          end
+
+          def model_class
+            Spree::Taxon
+          end
+
+          def scope_includes
+            node_includes = %i[icon parent taxonomy]
+
+            {
+              parent: node_includes,
+              children: node_includes,
+              taxonomy: [root: node_includes],
+              icon: [attachment_attachment: :blob]
+            }
+          end
+
+          def serializer_params
+            super.merge(include_products: action_name == 'show')
+          end
+
+          def spree_permitted_attributes
+            super + [:new_parent_id, :new_position_idx]
+          end
+
+          def resource_serializer
+            Spree.api.platform_taxon_serializer
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/platform/users_controller.rb

@@ -0,0 +1,37 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class UsersController < ResourceController
+          private
+
+          def model_class
+            Spree.user_class
+          end
+
+          def resource_serializer
+            Spree.api.platform_user_serializer
+          end
+
+          def scope_includes
+            [:ship_address, :bill_address]
+          end
+
+          # we need to define this here as developers can configure their own `user_class`
+          def model_param_name
+            'user'
+          end
+
+          def spree_permitted_attributes
+            super + [:password, :password_confirmation]
+          end
+
+          # we need to override this method to avoid trying to create user role when creating a user
+          def ensure_current_store(_resource)
+            # do nothing
+          end
+        end
+      end
+    end
+  end
+end