docbrown/app/controllers/video_states_controller.rb

class VideoStatesController < ApplicationController
  skip_before_action :verify_authenticity_token
  # Not authorized using pundit because user this is not accessed via user session
  # This is purely for responding to AWS video state changes.

  def create
    unless valid_user
      render json: { message: "invalid_user" }, status: 422
      return
    end
    begin
      logger.info "VIDEO STATES: #{params}"
      request_json = JSON.parse(request.raw_post, symbolize_names: true)
      logger.info "VIDEO STATES: #{request_json}"
    rescue StandardError
    end
    request_json = JSON.parse(request.raw_post, symbolize_names: true)
    message_json = JSON.parse(request_json[:Message], symbolize_names: true)
    @article = Article.find_by_video_code(message_json[:input][:key])
    @article.update(video_state: "COMPLETED") # Only is called on completion
    NotifyMailer.video_upload_complete_email(@article).deliver
    render json: { message: "Video state updated" }
  end

  def valid_user
    user = User.find_by_secret(params[:key])
    user = nil unless user.has_role?(:super_admin)
    user
  end
end