Merge branch 'coinbase'

app/controllers/user_upgrades_controller.rb

@@ -1,41 +1,21 @@
 class UserUpgradesController < ApplicationController
-  before_filter :member_only
+  before_filter :member_only, :only => [:new, :show]
+  helper_method :encrypt_custom, :coinbase
+  force_ssl :if => :ssl_enabled?
 
   def create
-    if params[:desc] == "Upgrade to Gold"
-      level = User::Levels::GOLD
-      cost = 2000
+    if params[:order][:status] == "completed"
+      user_id, level = decrypt_custom
+      user = User.find(user_id)
 
-    elsif params[:desc] == "Upgrade to Platinum"
-      level = User::Levels::PLATINUM
-      cost = 4000
+      if user.level < User::Levels::PLATINUM && level >= User::Levels::GOLD && level <= User::Levels::PLATINUM
+        user.promote_to!(level, :skip_feedback => true)
+      end
 
-    elsif params[:desc] == "Upgrade Gold to Platinum" && CurrentUser.user.level == User::Levels::GOLD
-      level = User::Levels::PLATINUM
-      cost = 2000
-
-    else
-      render :text => "invalid desc", :status => 422
-      return
-    end
-
-    @user = CurrentUser.user
-    stripe_token = params[:stripeToken]
-
-    begin
-      charge = Stripe::Charge.create(
-        :amount => cost,
-        :currency => "usd",
-        :card => params[:stripeToken],
-        :description => params[:desc]
-      )
-      @user.promote_to!(level, :skip_feedback => true)
-      UserMailer.upgrade(@user, params[:email]).deliver
       flash[:success] = true
-    rescue Stripe::CardError => e
-      flash[:error] = e.message
+    else
+      flash[:error] = true
     end
-
     redirect_to user_upgrade_path
   end
 
@@ -47,4 +27,26 @@ class UserUpgradesController < ApplicationController
 
   def show
   end
+
+  def encrypt_custom(level)
+    crypt.encrypt_and_sign("#{CurrentUser.user.id},#{level}")
+  end
+
+  def coinbase
+    @coinbase_api ||= Coinbase::Client.new(Danbooru.config.coinbase_api_key, Danbooru.config.coinbase_api_secret)
+  end
+
+  private
+
+  def decrypt_custom
+    crypt.decrypt_and_verify(params[:order][:custom]).split(/,/).map(&:to_i)
+  end
+
+  def crypt
+    ActiveSupport::MessageEncryptor.new(Danbooru.config.coinbase_secret)
+  end
+
+  def ssl_enabled?
+    !Rails.env.development? && !Rails.env.test?
+  end
 end