You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
docuseal/app/services/external_auth_service.rb

76 lines
2.1 KiB

# frozen_string_literal: true
class ExternalAuthService
def initialize(params)
@params = params
end
def authenticate_user
user = if @params[:account].present?
find_or_create_user_with_account
elsif @params[:partnership].present?
find_or_create_user_with_partnership
else
raise ArgumentError, 'Either account or partnership params must be provided'
end
user.access_token.token
end
private
def find_or_create_user_with_account
account = Account.find_or_create_by_external_id(
@params[:account][:external_id]&.to_i,
@params[:account][:name],
{
locale: @params[:account][:locale] || 'en-US',
timezone: @params[:account][:timezone] || 'UTC'
}
)
User.find_or_create_by_external_id(
account,
@params[:user][:external_id]&.to_i,
user_attributes
)
end
def find_or_create_user_with_partnership
# Ensure partnerships exist in DocuSeal before creating the user
# We need these partnerships to exist for templates and authorization to work
ensure_partnerships_exist
# For partnership users, we don't store any partnership relationship
# They get authorized via API request context (accessible_partnership_ids)
# Just ensure the user exists in DocuSeal for authentication
User.find_by(external_user_id: @params[:user][:external_id]&.to_i) ||
User.create!(
user_attributes.merge(
external_user_id: @params[:user][:external_id]&.to_i,
password: SecureRandom.hex(16)
# NOTE: No account_id or partnership_id - authorization comes from API context
)
)
end
def ensure_partnerships_exist
# Create the partnership if it doesn't exist in DocuSeal
return if @params[:partnership].blank?
Partnership.find_or_create_by_external_id(
@params[:partnership][:external_id],
@params[:partnership][:name]
)
end
def user_attributes
{
email: @params[:user][:email],
first_name: @params[:user][:first_name],
last_name: @params[:user][:last_name],
role: 'admin'
}
end
end