cloudspokes/cs-website-cms

class ApplicationController < ActionController::Base
  protect_from_forgery

  # show the errors in dev
  unless Rails.env.development?
    rescue_from ApiExceptions::EntityNotFoundError, :with => :entity_not_found
    rescue_from ApiExceptions::WTFError, :with => :something_bad_happened
    rescue_from ApiExceptions::AccessDenied, :with => :entity_access_denied
    rescue_from ApiExceptions::SFDCError, :with => :sfdc_error
  end

  before_filter :set_access_token
  before_filter :set_gon_variables
  before_filter :get_platform_stats
  before_filter :get_cms_data

  after_filter  :set_csrf_cookie_for_madison

  helper_method :banner_data

  def set_access_token
    ApiModel.access_token = current_access_token
  end    

  def set_gon_variables
    gon.cs_api_url = ENV['CS_API_URL']
    gon.website_url = ENV['WEBSITE_URL']
  end 

  def get_cms_data
    @cms_headline = REDIS.get "cms:headline"
  end   

  def get_platform_stats
    @platform_stats = CsPlatform.stats  
  end    

  def banner_data
    @banner_data ||= begin
      data = JSON.parse(REDIS.get("cs:banner_data")) rescue nil
      if data.nil?
        data = YAML.load_file(Rails.root.join("config/banner_data.yml"))
        REDIS.set("cs:banner_data", data.to_json)
      end

      data
    end
  end

  def show_welcome_page?
    false
  end

  def entity_not_found(exception)
    redirect_to '/not_found'
  end

  def entity_access_denied
    redirect_to '/access_denied'
  end    

  def something_bad_happened
    redirect_to '/bad'
  end      

  # handle any errors thrown from sfdc calls
  def sfdc_error(exception)
    case exception.code
    when "INVALID_SESSION_ID"
      if current_user
        Rails.logger.fatal "[FATAL] Handling Invalid SFDC Session for #{current_user.username}. Token last refreshed at #{current_user.last_access_token_refresh_at}. Should token be expired: #{Time.now.utc > 45.minutes.since(current_user.last_access_token_refresh_at.getutc)}"
        current_user.handle_invalid_session_id
        redirect_to '/whoops'
      end
    else
      Rails.logger.fatal "[FATAL] SFDCError but no handler found for #{exception.code}: #{exception.message}. URL: #{exception.url}"
      redirect_to '/bad'
    end
  end     

  def guest_access_token
    User.guest_access_token
  end  

  def admin_access_token
    User.admin_access_token
  end    

  def set_csrf_cookie_for_madison
    cookies['XSRF-TOKEN'] = form_authenticity_token if protect_against_forgery?
  end      

  protected

    def verified_request?
      super || form_authenticity_token == request.headers['X_XSRF_TOKEN']
    end  

  private

    def after_sign_in_path_for(resource)
      request.env['omniauth.origin'] || stored_location_for(resource) || challenges_path
    end  

    def current_access_token
      if current_user
        if current_user.access_token
          current_user.last_access_token_refresh_at = Date.yesterday if current_user.last_access_token_refresh_at.nil?
          logger.info "[ACCESS_TOKEN] Has access token expired?: #{Time.now.utc} (Now) > 45 minutes past last refresh #{current_user.last_access_token_refresh_at.getutc} - expired? #{Time.now.utc > 45.minutes.since(current_user.last_access_token_refresh_at.getutc)}"
          # check and see if it's an hour old
          if Time.now.utc > 45.minutes.since(current_user.last_access_token_refresh_at.getutc)
            logger.info "[ACCESS_TOKEN] Updating token from salesforce"
            current_user.update_with_sfdc_info     
          else
            logger.info "[ACCESS_TOKEN] Returning current access token in db"
            current_user.access_token
          end
        else
          current_user.update_with_sfdc_info
        end
      end
    end 

end