class EppController < ApplicationController protect_from_forgery with: :null_session before_action :validate_request layout false helper_method :current_epp_user def params_hash # TODO: THIS IS DEPRECATED AND WILL BE REMOVED IN FUTURE @params_hash ||= Hash.from_xml(params[:frame]).with_indifferent_access end # SESSION MANAGEMENT def epp_session cookie = env['rack.request.cookie_hash'] || {} EppSession.find_or_initialize_by(session_id: cookie['session']) end def current_epp_user @current_epp_user ||= EppUser.find(epp_session[:epp_user_id]) if epp_session[:epp_user_id] end # ERROR + RESPONSE HANDLING def epp_errors @errors ||= [] end def handle_errors(obj = nil) @errors ||= [] if obj obj.construct_epp_errors @errors += obj.errors[:epp_errors] end # for debugging @errors << { code: '1', msg: 'handle_errors was executed when there were actually no errors' } if @errors.blank? @errors.uniq! render_epp_response '/epp/error' end def render_epp_response(*args) @response = render_to_string(*args) render xml: @response write_to_epp_log end # VALIDATION def validate_request validation_method = "validate_#{params[:action]}" return unless respond_to?(validation_method, true) handle_errors and return unless send(validation_method) end def epp_request_valid?(*selectors) selectors.each do |selector| el = params[:parsed_frame].css(selector).first epp_errors << { code: '2003', msg: I18n.t('errors.messages.required_parameter_missing', key: el.try(:name) || selector) } if el.nil? || el.text.blank? end epp_errors.empty? end def xml_attrs_present?(ph, attributes) # TODO: THIS IS DEPRECATED AND WILL BE REMOVED IN FUTURE attributes.each do |x| epp_errors << { code: '2003', msg: I18n.t('errors.messages.required_parameter_missing', key: x.last) } unless has_attribute(ph, x) end epp_errors.empty? end # rubocop: disable Style/PredicateName def has_attribute(ph, path) # TODO: THIS IS DEPRECATED AND WILL BE REMOVED IN FUTURE path.reduce(ph) do |location, key| location.respond_to?(:keys) ? location[key] : nil end end # rubocop: enable Style/PredicateName def write_to_epp_log request_command = params[:command] || params[:action] # error receives :command, other methods receive :action ApiLog::EppLog.create({ request: params[:raw_frame] || params[:frame], request_command: request_command, request_successful: epp_errors.empty?, request_object: params[:epp_object_type], # TODO: fix this for login and logout response: @response, api_user_name: @epp_user.try(:to_s) || current_epp_user.try(:to_s), api_user_registrar: @epp_user.try(:registrar).try(:to_s) || current_epp_user.try(:registrar).try(:to_s), ip: request.ip }) end end