mirror of
https://github.com/we-promise/sure.git
synced 2026-04-09 23:34:50 +00:00
9410e5b38d
* third party provider scoping * Simplify logic and allow only admins to mange providers * Broadcast fixes * FIX tests and build * Fixes * Reviews * Scope merchants * DRY fixes
92 lines
3.1 KiB
Ruby
92 lines
3.1 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
module Api
|
|
module V1
|
|
# API v1 endpoint for merchants
|
|
# Provides read-only access to family and provider merchants
|
|
#
|
|
# @example List all merchants
|
|
# GET /api/v1/merchants
|
|
#
|
|
# @example Get a specific merchant
|
|
# GET /api/v1/merchants/:id
|
|
#
|
|
class MerchantsController < BaseController
|
|
before_action -> { authorize_scope!(:read) }
|
|
|
|
# List all merchants available to the family
|
|
#
|
|
# Returns both family-owned merchants and provider merchants
|
|
# that are assigned to the family's transactions.
|
|
#
|
|
# @return [Array<Hash>] JSON array of merchant objects
|
|
def index
|
|
family = current_resource_owner.family
|
|
user = current_resource_owner
|
|
|
|
# Single query with OR conditions - more efficient than Ruby deduplication
|
|
family_merchant_ids = family.merchants.select(:id)
|
|
accessible_account_ids = family.accounts.accessible_by(user).select(:id)
|
|
provider_merchant_ids = Transaction.joins(:entry)
|
|
.where(entries: { account_id: accessible_account_ids })
|
|
.where.not(merchant_id: nil)
|
|
.select(:merchant_id)
|
|
|
|
@merchants = Merchant
|
|
.where(id: family_merchant_ids)
|
|
.or(Merchant.where(id: provider_merchant_ids, type: "ProviderMerchant"))
|
|
.distinct
|
|
.alphabetically
|
|
|
|
render json: @merchants.map { |m| merchant_json(m) }
|
|
rescue StandardError => e
|
|
Rails.logger.error("API Merchants Error: #{e.message}")
|
|
render json: { error: "Failed to fetch merchants" }, status: :internal_server_error
|
|
end
|
|
|
|
# Get a specific merchant by ID
|
|
#
|
|
# Returns a merchant if it belongs to the family or is assigned
|
|
# to any of the family's transactions.
|
|
#
|
|
# @param id [String] The merchant ID
|
|
# @return [Hash] JSON merchant object or error
|
|
def show
|
|
family = current_resource_owner.family
|
|
user = current_resource_owner
|
|
|
|
@merchant = family.merchants.find_by(id: params[:id]) ||
|
|
Merchant.joins(transactions: :entry)
|
|
.where(entries: { account_id: family.accounts.accessible_by(user).select(:id) })
|
|
.distinct
|
|
.find_by(id: params[:id])
|
|
|
|
if @merchant
|
|
render json: merchant_json(@merchant)
|
|
else
|
|
render json: { error: "Merchant not found" }, status: :not_found
|
|
end
|
|
rescue StandardError => e
|
|
Rails.logger.error("API Merchant Show Error: #{e.message}")
|
|
render json: { error: "Failed to fetch merchant" }, status: :internal_server_error
|
|
end
|
|
|
|
private
|
|
|
|
# Serialize a merchant to JSON format
|
|
#
|
|
# @param merchant [Merchant] The merchant to serialize
|
|
# @return [Hash] JSON-serializable hash
|
|
def merchant_json(merchant)
|
|
{
|
|
id: merchant.id,
|
|
name: merchant.name,
|
|
type: merchant.type,
|
|
created_at: merchant.created_at,
|
|
updated_at: merchant.updated_at
|
|
}
|
|
end
|
|
end
|
|
end
|
|
end
|