# frozen_string_literal: true module Api class SubmissionsController < ApiBaseController load_and_authorize_resource :template, only: :create load_and_authorize_resource :submission, only: %i[show index destroy] before_action only: :create do authorize!(:create, Submission) end def index submissions = Submissions.search(@submissions, params[:q]) submissions = submissions.where(template_id: params[:template_id]) if params[:template_id].present? if params[:template_folder].present? submissions = submissions.joins(template: :folder).where(folder: { name: params[:template_folder] }) end submissions = paginate(submissions.preload(:created_by_user, :template, :submitters, audit_trail_attachment: :blob)) render json: { data: submissions.as_json(serialize_params), pagination: { count: submissions.size, next: submissions.last&.id, prev: submissions.first&.id } } end def show submitters = @submission.submitters.preload(documents_attachments: :blob, attachments_attachments: :blob) serialized_submitters = submitters.map do |submitter| Submissions::EnsureResultGenerated.call(submitter) if submitter.completed_at? Submitters::SerializeForApi.call(submitter) end json = @submission.as_json( serialize_params.deep_merge( include: { submission_events: { only: %i[id submitter_id event_type event_timestamp] } } ) ) if submitters.all?(&:completed_at?) last_submitter = submitters.max_by(&:completed_at) json[:documents] = serialized_submitters.find { |e| e['id'] == last_submitter.id }['documents'] json[:status] = 'completed' json[:completed_at] = last_submitter.completed_at else json[:documents] = [] json[:status] = 'pending' json[:completed_at] = nil end json[:submitters] = serialized_submitters render json: end def create Params::SubmissionCreateValidator.call(params, dry_run: !Docuseal.multitenant?) return render json: { error: 'Template not found' }, status: :unprocessable_entity if @template.nil? if @template.fields.blank? Rollbar.error("Template does not contain fields: #{@template.id}") if defined?(Rollbar) return render json: { error: 'Template does not contain fields' }, status: :unprocessable_entity end params[:send_email] = true unless params.key?(:send_email) params[:send_sms] = false unless params.key?(:send_sms) submissions = create_submissions(@template, params) Submissions.send_signature_requests(submissions) render json: submissions.flat_map(&:submitters) rescue Submitters::NormalizeValues::UnknownFieldName, Submitters::NormalizeValues::UnknownSubmitterName => e render json: { error: e.message }, status: :unprocessable_entity end def destroy @submission.update!(archived_at: Time.current) render json: @submission.as_json(only: %i[id], methods: %i[archived_at]) end private def create_submissions(template, params) is_send_email = !params[:send_email].in?(['false', false]) if (emails = (params[:emails] || params[:email]).presence) && (params[:submission].blank? && params[:submitters].blank?) Submissions.create_from_emails(template:, user: current_user, source: :api, mark_as_sent: is_send_email, emails:, params:) else submissions_attrs, attachments = Submissions::NormalizeParamUtils.normalize_submissions_params!(submissions_params, template) submissions = Submissions.create_from_submitters( template:, user: current_user, source: :api, mark_as_sent: is_send_email, submitters_order: params[:submitters_order] || params[:order] || 'preserved', submissions_attrs:, params: ) Submissions::NormalizeParamUtils.save_default_value_attachments!(attachments, submissions.flat_map(&:submitters)) submissions end end def serialize_params { only: %i[id source submitters_order created_at updated_at archived_at], methods: %i[audit_log_url], include: { submitters: { only: %i[id slug uuid name email phone completed_at opened_at sent_at created_at updated_at external_id metadata], methods: %i[status application_key] }, template: { only: %i[id name created_at updated_at] }, created_by_user: { only: %i[id email first_name last_name] } } } end def submissions_params permitted_attrs = [ :send_email, :send_sms, :bcc_completed, :completed_redirect_url, { message: %i[subject body], submitters: [[:send_email, :send_sms, :completed_redirect_url, :uuid, :name, :email, :role, :completed, :phone, :application_key, :external_id, { metadata: {}, values: {}, readonly_fields: [], message: %i[subject body], fields: [%i[name default_value title description readonly validation_pattern invalid_message]] }]] } ] if params.key?(:submitters) params.permit(*permitted_attrs) else key = params.key?(:submission) ? :submission : :submissions params.permit( key => [permitted_attrs] ).fetch(key, []) end end end end