class UserUpgradesController < ApplicationController before_filter :member_only, :only => [:new, :show] helper_method :user force_ssl :if => :ssl_enabled? skip_before_action :verify_authenticity_token, only: [:create] def create if params[:stripeToken] create_stripe end end def new end def show end def user if params[:user_id] User.find(params[:user_id]) else CurrentUser.user end end private def create_stripe @user = user if params[:desc] == "Upgrade to Gold" level = User::Levels::GOLD cost = 2000 elsif params[:desc] == "Upgrade to Platinum" level = User::Levels::PLATINUM cost = 4000 elsif params[:desc] == "Upgrade Gold to Platinum" && @user.level == User::Levels::GOLD level = User::Levels::PLATINUM cost = 2000 else raise "Invalid desc" end begin charge = Stripe::Charge.create( :amount => cost, :currency => "usd", :card => params[:stripeToken], :description => params[:desc] ) @user.promote_to!(level, :skip_feedback => true) flash[:success] = true rescue Stripe::CardError => e flash[:error] = e.message end redirect_to user_upgrade_path end def ssl_enabled? !Rails.env.development? && !Rails.env.test? end end