gitcoinco/code_fund_ads

class UsersController < ApplicationController
  include Sortable
  include Scopable

  before_action :authenticate_user!
  before_action :authenticate_administrator!, except: [:show, :edit, :update]
  before_action :set_user, only: [:show, :edit, :update, :destroy]
  before_action :set_current_organization_for_admin, only: [:show]
  before_action :set_organization, only: [:index], if: -> { params[:organization_id].present? }
  skip_before_action :authenticate_user!, if: -> { params[:redir].present? }
  skip_before_action :authenticate_administrator!, if: -> { params[:redir].present? }

  set_default_sorted_by :first_name

  def index
    users = scope_list(User).includes(:avatar_attachment).include_image_count.order(order_by)
    @pagy, @users = pagy(users, page: @page)
  end

  def new
    @user = User.new
    @user.organization_users.build
  end

  def create
    @user = User.new(user_params)

    respond_to do |format|
      if @user.save
        CheckConsolidatedScreeningListJob.perform_later @user
        format.html do
          return redirect_to(params[:redir]) if params[:redir].present?
          redirect_to success_url, notice: "User was successfully created."
        end
        format.json { render :show, status: :created, location: @user }
      else
        format.html do
          return redirect_to(params[:redir]) if params[:redir].present?
          render :new
        end
        format.json { render json: @user.errors, status: :unprocessable_entity }
      end
    end
  end

  def edit
    @user.organization_users.build(role: "") unless @user.organization_users.exists?
  end

  def update
    respond_to do |format|
      if @user.update(user_params)
        CheckConsolidatedScreeningListJob.perform_later @user
        format.html { redirect_to @user, notice: "User was successfully updated." }
        format.json { render :show, status: :ok, location: @user }
      else
        format.html { render :edit }
        format.json { render json: @user.errors, status: :unprocessable_entity }
      end
    end
  end

  def destroy
    @user.destroy
    respond_to do |format|
      format.html { redirect_to users_url, notice: "User was successfully destroyed." }
      format.json { head :no_content }
    end
  end

  private

  def set_user
    @user = if authorized_user.can_admin_system? && params[:id] != "me"
      User.find(params[:id])
    else
      current_user
    end
  end

  def set_organization
    @organization ||= Current.organization
  end

  def set_current_organization_for_admin
    return unless authorized_user.can_admin_system?
    if @user.default_organization
      Current.organization = @user.default_organization
      session[:organization_id] = @user.default_organization&.id
    end
  end

  def set_sortable_columns
    @sortable_columns ||= %w[
      company_name
      created_at
      email
      first_name
      last_name
      last_sign_in_at
      updated_at
    ]
  end

  def set_scopable_values
    @scopable_values ||= %w[all administrators advertisers publishers].flatten
  end

  def user_params
    params.require(:user).permit(
      :address_1,
      :address_2,
      :avatar,
      :bio,
      :city,
      :company_name,
      :country,
      :email,
      :first_name,
      :github_username,
      :last_name,
      :linkedin_username,
      :paypal_email,
      :postal_code,
      :region,
      :twitter_username,
      :us_resident,
      :website_url,
      skills: [],
      organization_users_attributes: [:organization_id, :role, :id]
    ).tap do |whitelisted|
      if authorized_user.can_admin_system?
        whitelisted[:api_access] = params[:user][:api_access]
        whitelisted[:roles] = params[:user][:roles]
        whitelisted[:status] = params[:user][:status]
        whitelisted[:record_inbound_emails] = params[:user][:record_inbound_emails]
      end
    end
  end
end