4b8576aec3
* Use constants for controller permitted params * User constants for controller set 2 Co-authored-by: Ben Halpern <bendhalpern@gmail.com>
77 lines
2.6 KiB
Ruby
77 lines
2.6 KiB
Ruby
class FeedbackMessagesController < ApplicationController
|
|
# No authorization required for entirely public controller
|
|
skip_before_action :verify_authenticity_token
|
|
FLASH_MESSAGE = "Make sure the forms are filled. 🤖 Other possible errors: "\
|
|
"%<errors>s".freeze
|
|
FEEDBACK_ALLOWED_PARAMS = %i[message feedback_type category reported_url offender_id].freeze
|
|
|
|
def create
|
|
flash.clear
|
|
|
|
params = feedback_message_params.merge(reporter_id: current_user&.id)
|
|
@feedback_message = FeedbackMessage.new(params)
|
|
|
|
recaptcha_enabled = ReCaptcha::CheckEnabled.call(current_user)
|
|
if (!recaptcha_enabled || recaptcha_verified? || connect_feedback?) && !rate_limit? && @feedback_message.save
|
|
Slack::Messengers::Feedback.call(
|
|
user: current_user,
|
|
type: feedback_message_params[:feedback_type],
|
|
category: feedback_message_params[:category],
|
|
reported_url: feedback_message_params[:reported_url],
|
|
message: feedback_message_params[:message],
|
|
)
|
|
rate_limiter.track_limit_by_action(:feedback_message_creation)
|
|
|
|
if user_signed_in?
|
|
Rails.cache.fetch("user-#{current_user.id}-feedback-response-sent-at", expires_in: 24.hours) do
|
|
NotifyMailer.with(email_to: current_user.email).feedback_response_email.deliver_later
|
|
Time.current
|
|
end
|
|
end
|
|
|
|
respond_to do |format|
|
|
format.html { redirect_to feedback_messages_path }
|
|
format.json { render json: { success: true, message: "Your report is submitted" } }
|
|
end
|
|
else
|
|
@previous_message = feedback_message_params[:message]
|
|
flash[:notice] = format(FLASH_MESSAGE, errors: @feedback_message.errors_as_sentence.presence || "N/A")
|
|
|
|
respond_to do |format|
|
|
format.html { render "pages/report_abuse" }
|
|
format.json do
|
|
render json: {
|
|
success: false,
|
|
message: @feedback_message.errors_as_sentence,
|
|
status: :bad_request
|
|
}
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def recaptcha_verified?
|
|
recaptcha_params = { secret_key: Settings::Authentication.recaptcha_secret_key }
|
|
params["g-recaptcha-response"] && verify_recaptcha(recaptcha_params)
|
|
end
|
|
|
|
def connect_feedback?
|
|
feedback_message_params[:feedback_type] == "connect"
|
|
end
|
|
|
|
def feedback_message_params
|
|
params.require(:feedback_message).permit(FEEDBACK_ALLOWED_PARAMS)
|
|
end
|
|
|
|
def rate_limit?
|
|
begin
|
|
rate_limit!(:feedback_message_creation)
|
|
rescue StandardError => e
|
|
@feedback_message.errors.add(:feedback_message_creation, e.message)
|
|
return true
|
|
end
|
|
false
|
|
end
|
|
end
|