Add contacts, keyrelays, poll

app/controllers/epp/contacts_controller.rb

@@ -1,9 +1,197 @@
 class Epp::ContactsController < ApplicationController
-  protect_from_forgery with: :null_session
+  include Epp::Common
+  include Shared::UserStamper ## Refactor this?
+  helper WhodunnitHelper ## Refactor this?
+
+  def user_for_paper_trail ## Refactor this?
+    current_epp_user ? "#{current_epp_user.id}-EppUser" : nil
+  end
 
   def create
+    @contact = Contact.new(contact_and_address_attributes)
+    @contact.registrar = current_epp_user.registrar
+    render_epp_response '/epp/contacts/create' and return if stamp(@contact) && @contact.save
+    handle_errors(@contact)
+  end
+
+  def update
+    # FIXME: Update returns 2303 update multiple times
+    code = params_hash['epp']['command']['update']['update'][:id]
+    @contact = Contact.where(code: code).first
+    # if update_rights? && stamp(@contact) && @contact.update_attributes(contact_and_address_attributes(:update))
+    if owner? && stamp(@contact) && @contact.update_attributes(contact_and_address_attributes(:update))
+      render_epp_response 'epp/contacts/update'
+    else
+      contact_exists?(code)
+      handle_errors(@contact) and return
+    end
+  end
+
+  # rubocop:disable Metrics/CyclomaticComplexity
+  def delete
+    @contact = find_contact
+    handle_errors(@contact) and return unless rights? # owner?
+    handle_errors(@contact) and return unless @contact
+    handle_errors(@contact) and return unless @contact.destroy_and_clean
+
+    render_epp_response '/epp/contacts/delete'
+  end
+  # rubocop:enable Metrics/CyclomaticComplexity
+
+  def check
+    ph = params_hash['epp']['command']['check']['check']
+    @contacts = Contact.check_availability(ph[:id])
+    render_epp_response '/epp/contacts/check'
   end
 
   def info
+    handle_errors(@contact) and return unless @contact && rights?
+    # handle_errors(@contact) and return unless rights?
+    @disclosure = ContactDisclosure.default_values.merge(@contact.disclosure.try(:as_hash) || {})
+    @disclosure_policy = @contact.disclosure.try(:attributes_with_flag)
+    @owner = owner?(false)
+    # need to reload contact eagerly
+    @contact = find_contact('with eager load') if @owner # for clarity, could just be true
+    render_epp_response 'epp/contacts/info'
+  end
+
+  def renew
+    epp_errors << { code: '2101', msg: t(:'errors.messages.unimplemented_command') }
+    handle_errors
+  end
+
+  ## HELPER METHODS
+
+  private
+
+  ## CREATE
+  def validate_create
+    @ph = params_hash['epp']['command']['create']['create']
+    return false unless validate_params
+    xml_attrs_present?(@ph, [%w(postalInfo name), %w(postalInfo addr city), %w(postalInfo addr cc),
+                             %w(ident), %w(voice), %w(email)])
+
+    epp_errors.empty?
+  end
+
+  ## UPDATE
+  def validate_update
+    @ph = params_hash['epp']['command']['update']['update']
+    update_attrs_present?
+    # xml_attrs_present?(@ph, [['id'], %w(authInfo pw)])
+    xml_attrs_present?(@ph, [['id']])
+  end
+
+  def contact_exists?(code)
+    return true if @contact.is_a?(Contact)
+    epp_errors << { code: '2303', msg: t('errors.messages.epp_obj_does_not_exist'),
+                    value: { obj: 'id', val: code } }
+  end
+
+  def update_attrs_present?
+    return true if parsed_frame.css('add').present?
+    return true if parsed_frame.css('rem').present?
+    return true if parsed_frame.css('chg').present?
+    epp_errors << { code: '2003', msg: I18n.t('errors.messages.required_parameter_missing', key: 'add, rem or chg') }
+  end
+
+  ## DELETE
+  def validate_delete
+    @ph = params_hash['epp']['command']['delete']['delete']
+    xml_attrs_present?(@ph, [['id']])
+  end
+
+  ## check
+  def validate_check
+    @ph = params_hash['epp']['command']['check']['check']
+    xml_attrs_present?(@ph, [['id']])
+  end
+
+  ## info
+  def validate_info # and process
+    @ph = params_hash['epp']['command']['info']['info']
+    return false unless xml_attrs_present?(@ph, [['id']])
+    @contact = find_contact
+    return false unless @contact
+    return true if current_epp_user.registrar == @contact.registrar || xml_attrs_present?(@ph, [%w(authInfo pw)])
+    false
+  end
+
+  ## SHARED
+
+  def find_contact(eager_load = nil)
+    if eager_load
+      contact = Contact.includes(address: :country).find_by(code: @ph[:id])
+    else
+      contact = Contact.find_by(code: @ph[:id])
+    end
+    unless contact
+      epp_errors << { code: '2303',
+                      msg: t('errors.messages.epp_obj_does_not_exist'),
+                      value: { obj: 'id', val: @ph[:id] } }
+    end
+    contact
+  end
+
+  def owner?(with_errors = true)
+    return false unless find_contact
+    return true if @contact.registrar == current_epp_user.registrar
+    return false unless with_errors
+    epp_errors << { code: '2201', msg: t('errors.messages.epp_authorization_error') }
+    false
+  end
+
+  def rights?
+    pw = @ph.try(:[], :authInfo).try(:[], :pw)
+
+    return true if current_epp_user.try(:registrar) == @contact.try(:registrar)
+    return true if pw && @contact.auth_info_matches(pw) # @contact.try(:auth_info_matches, pw)
+
+    epp_errors << { code: '2200', msg: t('errors.messages.epp_authentication_error') }
+    false
+  end
+
+  def update_rights?
+    pw = @ph.try(:[], :authInfo).try(:[], :pw)
+    return true if pw && @contact.auth_info_matches(pw)
+    epp_errors << { code: '2200', msg: t('errors.messages.epp_authentication_error') }
+    false
+  end
+
+  def contact_and_address_attributes(type = :create)
+    case type
+    when :update
+      # TODO: support for rem/add
+      contact_hash = merge_attribute_hash(@ph[:chg], type).delete_if { |_k, v| v.empty? }
+    else
+      contact_hash = merge_attribute_hash(@ph, type)
+    end
+    contact_hash[:ident_type] = ident_type unless ident_type.nil?
+    contact_hash
+  end
+
+  def merge_attribute_hash(prms, type)
+    contact_hash = Contact.extract_attributes(prms, type)
+    contact_hash = contact_hash.merge(
+      Address.extract_attributes((prms.try(:[], :postalInfo) || []))
+    )
+    contact_hash[:disclosure_attributes] =
+      ContactDisclosure.extract_attributes(parsed_frame)
+
+    contact_hash
+  end
+
+  def ident_type
+    result = parsed_frame.css('ident').first.try(:attributes).try(:[], 'type').try(:value)
+    return nil unless result
+
+    Contact::IDENT_TYPES.any? { |type| return type if result.include?(type) }
+    nil
+  end
+
+  def validate_params
+    return true if @ph
+    epp_errors << { code: '2001', msg: t(:'errors.messages.epp_command_syntax_error') }
+    false
   end
 end