demarches-normaliennes/app/controllers/webhook_controller.rb
2019-11-04 18:36:52 +01:00

49 lines
1.2 KiB
Ruby

class WebhookController < ActionController::Base
before_action :verify_signature!, only: :helpscout
def helpscout
email = params[:customer][:email].downcase
user = User.find_by(email: email)
if user.nil?
head :not_found
else
instructeur = user.instructeur
administrateur = user.administrateur
url = manager_user_url(user)
html = [link_to_manager(user, url)]
if instructeur
url = manager_instructeur_url(instructeur)
html << link_to_manager(instructeur, url)
end
if administrateur
url = manager_administrateur_url(administrateur)
html << link_to_manager(administrateur, url)
end
render json: { html: html.join('<br>') }
end
end
private
def link_to_manager(model, url)
"<a target='_blank' href='#{url}' rel='noopener'>#{model.model_name.human}##{model.id}</a>"
end
def verify_signature!
if generate_body_signature(request.body.read) != request.headers['X-Helpscout-Signature']
request_http_token_authentication
end
end
def generate_body_signature(body)
Base64.strict_encode64(OpenSSL::HMAC.digest('sha1',
Rails.application.secrets.helpscout[:webhook_secret],
body))
end
end