mirror of https://github.com/docusealco/docuseal
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
70 lines
2.2 KiB
70 lines
2.2 KiB
# frozen_string_literal: true
|
|
|
|
class StartFormEmail2faSendController < ApplicationController
|
|
layout 'form'
|
|
|
|
around_action :with_browser_locale
|
|
|
|
skip_before_action :authenticate_user!
|
|
skip_authorization_check
|
|
|
|
before_action :load_template
|
|
before_action :authorize_start!
|
|
|
|
def create
|
|
@submitter = @template.submissions.new(account_id: @template.account_id)
|
|
.submitters.new(**submitter_params, account_id: @template.account_id)
|
|
|
|
if @submitter.email.blank?
|
|
return redirect_to start_form_path(@template.slug), alert: I18n.t(:provide_your_email_to_start)
|
|
end
|
|
|
|
Submitters.send_shared_link_email_verification_code(@submitter, request:)
|
|
|
|
redir_params = { notice: I18n.t(:code_has_been_resent) } if params[:resend]
|
|
|
|
redirect_to start_form_path(@template.slug, params: submitter_params.merge(email_verification: true)),
|
|
**redir_params
|
|
rescue Submitters::BouncedEmail => e
|
|
@error_message = e.message
|
|
|
|
render 'start_form/error', status: :unprocessable_content
|
|
rescue Submitters::UnableToSendCode => e
|
|
redirect_to start_form_path(@template.slug, params: submitter_params.merge(email_verification: true)),
|
|
alert: e.message
|
|
end
|
|
|
|
private
|
|
|
|
def load_template
|
|
@template = Template.find_by!(slug: params[:slug])
|
|
end
|
|
|
|
def authorize_start!
|
|
is_archived = @template.archived_at? || @template.account.archived_at?
|
|
|
|
return redirect_to start_form_path(@template.slug) if is_archived
|
|
|
|
return if (@template.shared_link? || (current_user && current_ability.can?(:read, @template))) &&
|
|
(@template.preferences['shared_link_2fa'] == true || submitter_exists?(@template, params))
|
|
|
|
Rollbar.warning("Not 2FA shared template: #{@template.id}") if defined?(Rollbar)
|
|
|
|
redirect_to start_form_path(@template.slug)
|
|
end
|
|
|
|
def submitter_exists?(template, params)
|
|
email = Submissions.normalize_email(params.dig(:submitter, :email))
|
|
|
|
return false if email.blank?
|
|
|
|
Submitters::StartForm.build_submitters_scope(template, exclude_completed: true).exists?(email:)
|
|
end
|
|
|
|
def submitter_params
|
|
params.require(:submitter).permit(:name, :email, :phone).tap do |attrs|
|
|
attrs[:email] = Submissions.normalize_email(attrs[:email])
|
|
end
|
|
end
|
|
end
|