20136b7ac8
* add base controller for public api * add dossiers controller with basic checks * create the dossier * ensure content-type is json * prefill dossier with given values * mark a dossier as prefilled When a dossier is prefilled, it's allowed not to have a user. Plus, we add a secure token to the dossier, which we will need later to set a user after sign in / sign up. * set user as owner of an orphan prefilled dossier When a visitor comes from the dossier_url answered by the public api, the dossier is orphan: - when the user is already authenticated: they become the owner - when the user is not authenticated: they can sign in / sign up / france_connect and then they become the owner So here is the procedure: - allow to sign in / sign up / france connect when user is unauthenticated - set dossier ownership when the dossier is orphan - check dossier ownership when the dossier is not - redirect to brouillon path when user is signed in and owner * mark the dossier as prefilled when it's prefilled (even with a GET request, because it will be useful later on, for exmample in order to cleanup the unused prefilled dossiers) * system spec: prefilling dossier with post request |
||
---|---|---|
.. | ||
administrateurs | ||
agent_connect | ||
api | ||
application_controller | ||
champs | ||
concerns | ||
devise | ||
experts | ||
france_connect | ||
instructeurs | ||
manager | ||
super_admins | ||
users | ||
admin_controller.rb | ||
api_controller.rb | ||
api_geo_test_controller.rb | ||
api_tokens_controller.rb | ||
application_controller.rb | ||
attachments_controller.rb | ||
graphql_controller.rb | ||
invites_controller.rb | ||
password_complexity_controller.rb | ||
ping_controller.rb | ||
prefill_descriptions_controller.rb | ||
recherche_controller.rb | ||
root_controller.rb | ||
saml_idp_controller.rb | ||
stats_controller.rb | ||
super_admins_controller.rb | ||
support_controller.rb | ||
targeted_user_links_controller.rb | ||
webhook_controller.rb |