demarches-normaliennes/app/controllers/webhook_controller.rb

class WebhookController < ActionController::Base
  before_action :verify_signature!
  skip_before_action :verify_authenticity_token

  def helpscout_support_dev
    if tagged_dev? && status_active?
      send_mattermost_notification(message_to_mattermost_channel)
    end

    head :no_content
  end

  def helpscout
    email = params[:customer][:email].downcase
    user = User.find_by(email: email)

    if user.nil?
      head :not_found

    else
      instructeur = user.instructeur
      administrateur = user.administrateur

      url = manager_user_url(user)
      html = [link_to_manager(user, url)]

      if instructeur
        url = manager_instructeur_url(instructeur)
        html << link_to_manager(instructeur, url)
      end

      if administrateur
        url = manager_administrateur_url(administrateur)
        html << link_to_manager(administrateur, url)
      end

      html << email_link_to_manager(user)

      render json: { html: html.join('<br>') }
    end
  end

  private

  def send_mattermost_notification(text)
    return if Rails.application.secrets.dig(:mattermost, :support_webhook_url).blank?

    Net::HTTP.post(
      URI.parse(Rails.application.secrets.mattermost[:support_webhook_url]),
      { "text": text }.to_json,
     "Content-Type" => "application/json"
    )
  end

  def message_to_mattermost_channel
    %Q(
Nouveau bug taggué #dev : https://secure.helpscout.net/conversation/#{params["id"]}/#{params["number"]}?folderId=#{params["folderId"]}

> #{params['webhook']['preview']}

**personnes impliquées** : #{threads.map { |thread| thread['createdBy']['email'] }.uniq.join(", ")}
**utilisateur en attente depuis** : #{params['customerWaitingSince']['friendly']})
  end

  def threads
    params['_embedded']['threads']
  end

  def tagged_dev?
    params["tags"].any? { _1['tag'].include?('dev') }
  end

  def status_active?
    params["status"] == 'active'
  end

  def link_to_manager(model, url)
    "<a target='_blank' href='#{url}' rel='noopener'>#{model.model_name.human}##{model.id}</a>"
  end

  def email_link_to_manager(user)
    url = emails_manager_user_url(user)
    "<a target='_blank' href='#{url}' rel='noopener'>Emails##{user.id}</a>"
  end

  def verify_signature!
    if generate_body_signature(request.body.read) != request.headers['X-Helpscout-Signature']
      request_http_token_authentication
    end
  end

  def generate_body_signature(body)
    Base64.strict_encode64(OpenSSL::HMAC.digest('sha1',
      Rails.application.secrets.helpscout[:webhook_secret],
      body))
  end
end