docbrown/app/controllers/users_controller.rb

class UsersController < ApplicationController
  before_action :set_user, only: %i[show update destroy finish_signup]
  before_action :set_no_cache_header, except: [:index]

  def index
    #Soft internal deprecation. Should be removed at some point.
    return redirect_to "/" unless current_user
    @users = case params[:user_board].downcase
             when "following" then current_user.following_users
             when "followers" then current_user.user_followers
             end
  end

  # GET /settings/@tab
  def edit
    @user = current_user
    @tab_list = tab_list(@user)
    unless @user
      redirect_to "/enter"
      return
    end
    @tab = params["tab"]
    handle_settings_tab
    # authorize! :update, @user
  end

  # PATCH/PUT /users/:id.:format
  def update
    @user = current_user
    @tab_list = tab_list(@user)
    @tab = params["user"]["tab"] || "profile"
    if !@user.banned && @user.update(user_params)
      RssReader.new.delay.fetch_user(@user) if @user.feed_url.present?
      notice = "Your profile was successfully updated."
      follow_hiring_tag(@user)
      redirect_to "/settings/#{@tab}", notice: notice
    else
      render :edit
    end
  end

  def onboarding_update
    current_user.saw_onboarding = true
    if current_user.save!
      respond_to do |format|
        format.json { render json: { outcome: 'onboarding closed' } }
      end
    else
      respond_to do |format|
        format.json { render json: { outcome: 'onboarding opened' } }
      end
    end
  end

  def join_org
    if @organization = Organization.find_by_secret(params[:org_secret])
      current_user.update(organization_id: @organization.id)
      redirect_to "/settings/organization",
        notice: "You have joined the #{@organization.name} organization."
    else
      not_found
    end
  end

  def leave_org
    current_user.update(organization_id: nil, org_admin: nil)
    redirect_to "/settings/organization",
      notice: "You have left your organization."
  end

  def add_org_admin
    raise unless current_user.org_admin
    user = User.find(params[:user_id])
    raise unless current_user.organization_id == user.organization_id
    user.update(org_admin: true)
    user.add_role :analytics_beta_tester if user.organization.approved
    redirect_to "/settings/organization",
      notice: "#{user.name} is now an admin."
  end

  def remove_org_admin
    raise unless current_user.org_admin
    raise if current_user.id == params[:user_id]
    user = User.find(params[:user_id])
    raise unless current_user.organization_id == user.organization_id
    user.update(org_admin: false)
    redirect_to "/settings/organization",
      notice: "#{user.name} is no longer an admin."
  end

  def remove_from_org
    raise unless current_user.org_admin
    raise if current_user.id == params[:user_id]
    user = User.find(params[:user_id])
    user.update(organization_id: nil)
    redirect_to "/settings/organization",
      notice: "#{user.name} is no longer part of your organization."
  end

  def signout_confirm; end

  # GET/PATCH /users/:id/finish_signup
  def finish_signup
    # authorize! :update, @user
    if request.patch? && params[:user] # && params[:user][:email]
      if @user.update(user_params)
        # @user.skip_reconfirmation!
        sign_in(@user, bypass: true)
        redirect_to "/", notice: "Your profile was successfully updated."
      else
        @show_errors = true
      end
    end
  end

  def follow_hiring_tag(user)
    return unless user.looking_for_work?
    user.delay.follow(Tag.find_by(name: "hiring"))
  end

  def handle_settings_tab
    return @tab = "profile" if @tab.blank?
    case @tab
    when "organization"
      @organization = @user.organization || Organization.new
    when "switch-organizations"
      @organization = Organization.new
    when "integrations"
      if current_user.identities.where(provider: "github").any?
        @client = Octokit::Client.
          new(access_token: current_user.identities.where(provider: "github").last.token)
      end
    when "billing"
      @customer = Stripe::Customer.retrieve(current_user.stripe_id_code) if current_user.stripe_id_code
    when "membership"
      if current_user.monthly_dues.zero?
      redirect_to "/membership"
        return
      end
    end
  end

  private

  def set_user
    @user = User.find(params[:id])
  end

  def user_params
    accessible = %i[name
                    email
                    username
                    profile_image
                    website_url
                    summary
                    email_newsletter
                    email_membership_newsletter
                    email_comment_notifications
                    email_mention_notifications
                    email_follower_notifications
                    email_unread_notifications
                    bg_color_hex
                    text_color_hex
                    employer_name
                    employer_url
                    employment_title
                    currently_learning
                    available_for
                    mostly_work_with
                    currently_hacking_on
                    location
                    email_public
                    education
                    looking_for_work
                    looking_for_work_publicly
                    contact_consent
                    feed_url
                    feed_mark_canonical
                    prefer_language_en
                    prefer_language_ja
                    prefer_language_es
                    prefer_language_fr
                    prefer_language_it
                    display_sponsors
                    permit_adjacent_sponsors
                    feed_admin_publish_permission]
    accessible << %i[password password_confirmation] unless params[:user][:password].blank?
    params.require(:user).
      permit(accessible).
      transform_values do |value|
        if value.class.name == "String"
          ActionController::Base.helpers.strip_tags(value)
        else
          value
        end
      end
  end
end