internetee-registry/app/controllers/api/v1/bounces_controller.rb

module Api
  module V1
    class BouncesController < BaseController
      before_action :validate_shared_key_integrity

      # POST api/v1/bounces/
      def create
        return head(:bad_request) unless bounce_params[:bounce][:bouncedRecipients].any?

        BouncedMailAddress.record(bounce_params)
        head(:created)
      rescue ActionController::ParameterMissing
        head(:bad_request)
      end

      def bounce_params
        params.require(:data).require(:bounce).require(:bouncedRecipients).each do |r|
          r.require(:emailAddress)
        end

        params.require(:data)
      end

      private

      def validate_shared_key_integrity
        api_key = "Basic #{ENV['rwhois_bounces_api_shared_key']}"
        head(:unauthorized) unless api_key == request.authorization
      end
    end
  end
end