docbrown/app/controllers/feedback_messages_controller.rb

42 lines
1.3 KiB
Ruby

class FeedbackMessagesController < ApplicationController
# No authorization required for entirely public controller
skip_before_action :verify_authenticity_token
def create
flash.clear
rate_limit!(:feedback_message_creation)
params = feedback_message_params.merge(reporter_id: current_user&.id)
@feedback_message = FeedbackMessage.new(params)
if recaptcha_verified? && @feedback_message.save
Slack::Messengers::Feedback.call(
user: current_user,
type: feedback_message_params[:feedback_type],
category: feedback_message_params[:category],
reported_url: feedback_message_params[:reported_url],
message: feedback_message_params[:message],
)
rate_limiter.track_limit_by_action(:feedback_message_creation)
redirect_to feedback_messages_path
else
@previous_message = feedback_message_params[:message]
flash[:notice] = "Make sure the forms are filled 🤖"
render "pages/report-abuse"
end
end
private
def recaptcha_verified?
recaptcha_params = { secret_key: ApplicationConfig["RECAPTCHA_SECRET"] }
params["g-recaptcha-response"] && verify_recaptcha(recaptcha_params)
end
def feedback_message_params
allowed_params = %i[message feedback_type category reported_url]
params.require(:feedback_message).permit(allowed_params)
end
end