# frozen_string_literal: true class SubmissionsPreviewController < ApplicationController skip_before_action :authenticate_user! skip_authorization_check TTL = 40.minutes def show submitter = Submitter.find_signed(params[:sig], purpose: :download_completed) if params[:sig].present? signature_valid = if submitter && submitter.submission.slug == params[:slug] @submission = submitter.submission true end @submission ||= Submission.find_by!(slug: params[:slug]) if !@submission.submitters.all?(&:completed_at?) && current_user.blank? raise ActionController::RoutingError, 'Not Found' end if !submission_valid_ttl?(@submission) && !signature_valid Rollbar.info("TTL: #{@submission.id}") if defined?(Rollbar) return redirect_to submissions_preview_completed_path(@submission.slug) end @submission = Submissions.preload_with_pages(@submission) render 'submissions/show', layout: 'plain' end def completed @submission = Submission.find_by!(slug: params[:submissions_preview_slug]) render :completed, layout: 'form' end private def submission_valid_ttl?(submission) return true if current_user && current_user.account.submissions.exists?(id: submission.id) last_submitter = submission.submitters.select(&:completed_at?).max_by(&:completed_at) last_submitter && last_submitter.completed_at > TTL.ago end end