workarea-storefront 3.4.12

data/app/controllers/workarea/storefront/checkout/payment_controller.rb

@@ -0,0 +1,21 @@
+module Workarea
+  module Storefront
+    module Checkout
+      class PaymentController < CheckoutsController
+        # GET /checkout/payment
+        def payment
+          @step = Storefront::Checkout::PaymentViewModel.new(
+            payment_step,
+            view_model_options
+          )
+        end
+
+        private
+
+        def payment_step
+          @payment_step ||= Workarea::Checkout::Steps::Payment.new(current_checkout)
+        end
+      end
+    end
+  end
+end

data/app/controllers/workarea/storefront/checkout/place_order_controller.rb

@@ -0,0 +1,65 @@
+module Workarea
+  module Storefront
+    module Checkout
+      class PlaceOrderController < PaymentController
+        # PATCH /checkout/place_order
+        def place_order
+          payment_step.update(params)
+
+          if payment_step.complete?
+            try_place_order
+          else
+            incomplete_place_order
+          end
+        end
+
+        # GET /checkout/confirmation
+        def confirmation
+          redirect_to cart_path and return unless completed_order.present?
+
+          @content = Storefront::Checkout::ConfirmationViewModel.new
+          @order = Storefront::OrderViewModel.new(completed_order)
+        end
+
+        private
+
+        def try_place_order
+          if current_checkout.place_order
+            completed_place_order
+          else
+            incomplete_place_order
+          end
+        end
+
+        def completed_place_order
+          OrderMailer.confirmation(current_order.id).deliver_later
+          self.completed_order = current_order
+          clear_current_order
+
+          flash[:success] = t('workarea.storefront.flash_messages.order_placed')
+          redirect_to finished_checkout_destination
+        end
+
+        def incomplete_place_order
+          if current_checkout.shipping.try(:errors).present?
+            flash[:error] = current_checkout.shipping.errors.to_a.to_sentence
+            redirect_to checkout_shipping_path
+          else
+            flash[:error] = t('workarea.storefront.flash_messages.order_place_error')
+
+            payment
+            render :payment
+          end
+        end
+
+        def finished_checkout_destination
+          if current_admin.present? && current_admin.orders_access?
+            admin.order_path(completed_order)
+          else
+            checkout_confirmation_path
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/workarea/storefront/checkout/shipping_controller.rb

@@ -0,0 +1,53 @@
+module Workarea
+  module Storefront
+    module Checkout
+      class ShippingController < CheckoutsController
+        # GET /checkout/shipping
+        def shipping
+          @step ||= Storefront::Checkout::ShippingViewModel.new(
+            shipping_step,
+            view_model_options
+          )
+        end
+
+        # PATCH /checkout/payment
+        def update_shipping
+          shipping_step.update(params)
+
+          if request.xhr?
+            updated_shipping_step_summary
+          elsif shipping_step.complete?
+            completed_shipping_step
+          else
+            incomplete_shipping_step
+          end
+        end
+
+        private
+
+        def shipping_step
+          @shipping_step ||= Workarea::Checkout::Steps::Shipping.new(current_checkout)
+        end
+
+        def updated_shipping_step_summary
+          Pricing.perform(current_order, current_shippings)
+
+          shipping
+          render :summary
+        end
+
+        def completed_shipping_step
+          flash[:success] = t('workarea.storefront.flash_messages.shipping_options_saved')
+          redirect_to checkout_payment_path
+        end
+
+        def incomplete_shipping_step
+          Pricing.perform(current_order, current_shippings)
+
+          shipping
+          render :shipping
+        end
+      end
+    end
+  end
+end

data/app/controllers/workarea/storefront/checkouts_controller.rb

@@ -0,0 +1,102 @@
+module Workarea
+  module Storefront
+    class CheckoutsController < Storefront::ApplicationController
+      layout :checkout_layout
+
+      before_action :validate_checkout, only: :new
+      before_action :validate_checkout_expiry, except: [:new, :confirmation]
+      before_action :set_checkout_user, except: [:place_order, :confirmation]
+      around_action :with_order_lock, unless: -> { request.get? }
+      before_action :check_inventory, only: [:new, :place_order]
+      before_action :touch_checkout, except: [:new, :confirmation]
+      before_action :setup_view_models, except: :confirmation
+      before_action { params.permit! } # TODO consider another, better way to handle this
+
+      # GET /checkout
+      def new
+        redirect_to_next_step
+      end
+
+      private
+
+      def redirect_to_next_step
+        if current_checkout.complete?
+          flash[:info] = t('workarea.storefront.flash_messages.review_your_order')
+          redirect_to checkout_payment_path
+        else
+          redirect_to checkout_addresses_path
+        end
+      end
+
+      def checkout_layout
+        request.xhr? ? false : 'workarea/storefront/checkout'
+      end
+
+      def touch_checkout
+        return unless current_order
+
+        current_order.touch_checkout!(
+          ip_address: request.remote_ip,
+          user_activity_id: current_user_activity_id,
+          checkout_by_id: current_admin.try(:id) || current_user.try(:id),
+          source: current_admin.present? ? 'admin' : 'storefront',
+          traffic_referrer: current_referrer,
+          user_agent: request.user_agent
+        )
+      end
+
+      def with_order_lock
+        current_order.lock!
+        yield
+      rescue Workarea::Lock::Locked
+        flash[:error] = t('workarea.storefront.flash_messages.checkout_lock_error')
+
+        if request.xhr?
+          head :conflict
+        else
+          redirect_to cart_path
+        end
+
+        return false
+      ensure
+        current_order.unlock! if current_order
+      end
+
+      def validate_checkout_expiry
+        if !current_order || current_order.started_checkout? && !current_order.checking_out?
+          flash[:warning] = t('workarea.storefront.flash_messages.checkout_expired')
+
+          if request.xhr?
+            flash.keep
+            render js: "window.location = '#{cart_path}'", status: 422
+          else
+            redirect_to cart_path
+          end
+
+          return false
+        end
+      end
+
+      def setup_view_models
+        Pricing.perform(current_order, current_shippings)
+
+        @cart = CartViewModel.new(current_order, view_model_options)
+        @summary = Checkout::SummaryViewModel.new(
+          current_checkout,
+          view_model_options
+        )
+      end
+
+      def set_checkout_user
+        return if current_order.checking_out?
+
+        if current_user.present?
+          current_checkout.start_as(current_user)
+        else
+          current_checkout.start_as(:guest)
+          logout
+        end
+      end
+    end
+  end
+end

data/app/controllers/workarea/storefront/contacts_controller.rb

@@ -0,0 +1,28 @@
+module Workarea
+  class Storefront::ContactsController < Storefront::ApplicationController
+    def show
+      model = Inquiry.new(inquiry_params)
+      @inquiry = Storefront::InquiryViewModel.new(model)
+    end
+
+    def create
+      inquiry = Inquiry.new(inquiry_params)
+
+      if inquiry.save
+        flash[:success] = t('workarea.storefront.flash_messages.contact_message_sent')
+        Storefront::InquiryMailer.created(inquiry.id.to_s).deliver_later
+        redirect_to contact_path
+      else
+        flash[:error] = t('workarea.storefront.flash_messages.contact_error')
+        @inquiry = Storefront::InquiryViewModel.new(inquiry)
+        render :show
+      end
+    end
+
+    private
+
+    def inquiry_params
+      params.permit(:name, :email, :order_id, :subject, :message)
+    end
+  end
+end

data/app/controllers/workarea/storefront/content_areas_controller.rb

@@ -0,0 +1,15 @@
+module Workarea
+  module Storefront
+    class ContentAreasController < Storefront::ApplicationController
+      layout 'workarea/storefront/empty'
+
+      before_action :require_login
+      before_action :require_admin
+
+      def show
+        @content = ContentViewModel.new(Content.find(params[:id]))
+        @area_id = params[:area_id]
+      end
+    end
+  end
+end

data/app/controllers/workarea/storefront/content_blocks_controller.rb

@@ -0,0 +1,51 @@
+module Workarea
+  class Storefront::ContentBlocksController < Storefront::ApplicationController
+    layout 'workarea/storefront/empty'
+
+    before_action :require_login
+    before_action :require_admin
+    before_action :disable_xss_protection
+
+    def new
+      @content = Content.find(params[:content_id])
+      block = @content.blocks.build(type_id: params[:type_id])
+      block.data = block.type.defaults
+      @block = Storefront::ContentBlockViewModel.wrap(block, view_model_options)
+
+      render :show
+    end
+
+    def show
+      @content = Content.from_block(params[:id])
+      block = @content.blocks.find(params[:id])
+
+      @block = Storefront::ContentBlockViewModel.wrap(block, view_model_options)
+    end
+
+    def draft
+      draft = Content::BlockDraft.find(params[:id])
+
+      @content = draft.content
+      @block = Storefront::ContentBlockViewModel.wrap(
+        draft.to_block,
+        view_model_options
+      )
+
+      render :show
+    end
+
+    private
+
+    def require_admin
+      unless current_admin.present?
+        flash[:error] = 'You are not authorized to perform this action'
+        redirect_to auth_failure_destination
+        return false
+      end
+    end
+
+    def disable_xss_protection
+      response.headers['X-XSS-Protection'] = '0'
+    end
+  end
+end

data/app/controllers/workarea/storefront/current_checkout.rb

@@ -0,0 +1,114 @@
+module Workarea
+  module Storefront
+    module CurrentCheckout
+      extend ActiveSupport::Concern
+
+      included do
+        helper_method :current_order
+        after_action :set_session_order_id
+      end
+
+      # The current order for the current session.
+      #
+      # @return [Order]
+      #
+      def current_order
+        @current_order ||= Order.find_current(
+          id: session[:order_id],
+          user_id: cookies.signed[:user_id]
+        )
+      end
+
+      # Sets the current order on the session.
+      #
+      def current_order=(order)
+        @current_order = order
+        session[:order_id] = order.try(:id)
+      end
+
+      # Removes the current order from the session.
+      #
+      def clear_current_order
+        session.delete(:order_id)
+        @current_order = nil
+      end
+
+      # Sets a temporary cookie of the order ID to represent an order that
+      # was just completed in checkout. Used to show the order confirmation
+      # page.
+      #
+      def completed_order=(order)
+        cookies.signed[:completed_order] = {
+          value: order.id,
+          expires: Workarea.config.completed_order_timeout.from_now
+        }
+
+        @completed_order = order
+      end
+
+      # Get the last completed order based on the cookie. Used to show the
+      # order confirmation page.
+      #
+      # @return [Order]
+      #
+      def completed_order
+        if cookies.signed[:completed_order].present?
+          @completed_order ||= Order.find(cookies.signed[:completed_order])
+        end
+      end
+
+      # Get the current checkout for the session.
+      #
+      # @return [Checkout]
+      #
+      def current_checkout
+        @current_checkout ||= Workarea::Checkout.new(current_order, current_user)
+      end
+
+      # Get the current shipping for the session.
+      #
+      # @return [Shipping]
+      #
+      def current_shipping
+        current_checkout.shipping
+      end
+
+      # Get all shippings for the session.
+      #
+      # @return [Array<Shipping>]
+      #
+      def current_shippings
+        current_checkout.shippings
+      end
+
+      private
+
+      def set_session_order_id
+        if @current_order.present? && @current_order.persisted?
+          session[:order_id] = @current_order.id
+        end
+      end
+
+      def validate_checkout
+        if !current_order || current_order.no_items?
+          flash[:error] = t('workarea.storefront.flash_messages.items_required')
+          redirect_to cart_path
+          return false
+        end
+      end
+
+      def check_inventory
+        return true unless current_order
+
+        reservation = InventoryAdjustment.new(current_order).tap(&:perform)
+
+        if reservation.errors.present?
+          flash[:error] = reservation.errors.to_sentence
+          redirect_to cart_path and return false
+        else
+          return true
+        end
+      end
+    end
+  end
+end