openfoodfoundation/openfoodnetwork

# frozen_string_literal: true

require 'open_food_network/permissions'

module Admin
  class SubscriptionsController < Admin::ResourceController
    before_action :load_shops, only: [:index]
    before_action :load_form_data, only: [:new, :edit]
    before_action :strip_banned_attrs, only: [:update]
    before_action :wrap_nested_attrs, only: [:create, :update]
    before_action :check_for_open_orders, only: [:cancel, :pause]
    before_action :check_for_canceled_orders, only: [:unpause]
    respond_to :json

    def index
      respond_to do |format|
        format.html do
          if view_context.subscriptions_setup_complete?(@shops)
            @order_cycles = OrderCycle.joins(:schedules).managed_by(spree_current_user)
              .includes([:distributors, :cached_incoming_exchanges])
            @payment_methods = Spree::PaymentMethod.managed_by(spree_current_user)
              .includes(:taggings)
            @payment_method_tags = payment_method_tags_by_id
            @shipping_methods = Spree::ShippingMethod.managed_by(spree_current_user)
          else
            @shop = @shops.first
            render :setup_explanation
          end
        end
        format.json {
          render_as_json @collection, ams_prefix: params[:ams_prefix],
                                      payment_method_tags: payment_method_tags_by_id
        }
      end
    end

    def new
      @subscription.bill_address = Spree::Address.new
      @subscription.ship_address = Spree::Address.new
    end

    def create
      save_form_and_render(false)
    end

    def update
      save_form_and_render
    end

    def cancel
      @subscription.cancel(@open_orders_to_keep || [])

      respond_with(@subscription) do |format|
        format.json { render_as_json @subscription }
      end
    end

    def pause
      unless params[:open_orders] == 'keep'
        @subscription.proxy_orders.placed_and_open.each(&:cancel)
      end

      @subscription.update(paused_at: Time.zone.now)
      render_as_json @subscription
    end

    def unpause
      save_form_and_render(true, unpause: true)
    end

    private

    def save_form_and_render(render_issues = true, options = {})
      form = OrderManagement::Subscriptions::Form.new(@subscription, subscription_params, options)
      unless form.save
        render json: { errors: form.json_errors }, status: :unprocessable_entity
        return
      end

      if render_issues
        render_as_json @subscription, order_update_issues: form.order_update_issues
      else
        render_as_json @subscription
      end
    end

    def permissions
      return @permissions unless @permissions.nil?

      @permissions = OpenFoodNetwork::Permissions.new(spree_current_user)
    end

    def collection
      if request.format.json?
        permissions.editable_subscriptions.ransack(params[:q]).result
          .preload([:shop, :customer, :schedule, :subscription_line_items, :ship_address,
                    :bill_address, { proxy_orders: { order: :order_cycle } }])
      else
        Subscription.where("1=0")
      end
    end

    def load_shops
      @shops = Enterprise.managed_by(spree_current_user)
        .is_distributor.where(enable_subscriptions: true)
    end

    def load_form_data
      @customers = Customer.of(@subscription.shop)
      @schedules = Schedule.with_coordinator(@subscription.shop)
      @payment_methods = Spree::PaymentMethod.for_distributor(@subscription.shop).for_subscriptions
      @shipping_methods = Spree::ShippingMethod.for_distributor(@subscription.shop)
      @order_cycles = OrderCycle.joins(:schedules).managed_by(spree_current_user)
    end

    # Wrap :subscription_line_items_attributes in :subscription root
    def wrap_nested_attrs
      if raw_params[:subscription_line_items].is_a? Array
        attributes = raw_params[:subscription_line_items].map do |sli|
          sli.slice(*SubscriptionLineItem.attribute_names + ["_destroy"])
        end
        subscription_params[:subscription_line_items_attributes] = attributes
      end
      wrap_bill_address_attrs if params[:bill_address]
      wrap_ship_address_attrs if params[:ship_address]
    end

    def wrap_bill_address_attrs
      subscription_params[:bill_address_attributes] =
        raw_params[:bill_address].slice(*Spree::Address.attribute_names)
    end

    def wrap_ship_address_attrs
      subscription_params[:ship_address_attributes] =
        raw_params[:ship_address].slice(*Spree::Address.attribute_names)
    end

    def check_for_open_orders
      return if params[:open_orders] == 'cancel'

      @open_orders_to_keep = @subscription.proxy_orders.placed_and_open.pluck(:id)
      return if @open_orders_to_keep.empty? || params[:open_orders] == 'keep'

      render json: {
               errors: { open_orders: t('admin.subscriptions.confirm_cancel_open_orders_msg') }
             },
             status: :conflict
    end

    def check_for_canceled_orders
      return if params[:canceled_orders] == 'notified'
      return if @subscription.proxy_orders.active.canceled.empty?

      render json: {
               errors: { canceled_orders: t('admin.subscriptions.resume_canceled_orders_msg') }
             },
             status: :conflict
    end

    def strip_banned_attrs
      subscription_params.delete :schedule_id
      subscription_params.delete :customer_id
    end

    # Overriding Spree method to load data from params here so that
    # we can authorise #create using an object with required attributes
    def build_resource
      Subscription.new(subscription_params)
    end

    def ams_prefix_whitelist
      [:index]
    end

    def managed_enterprise_id
      Enterprise.managed_by(spree_current_user).select('enterprises.id').
        find_by(id: params[:enterprise_id])
    end

    def subscription_params
      @subscription_params ||= PermittedAttributes::Subscription.new(params).call.
        to_h.with_indifferent_access
    end

    def payment_method_tags_by_id
      @payment_method_tags_by_id ||= BatchTaggableTagsQuery.call(
        Spree::PaymentMethod.from(managed_enterprise_id)
      )
    end
  end
end