app.rb

require 'rubygems'
require 'bundler/setup'
require 'active_record'

unless defined?(Rake::REDUCE_COMPAT)
  module Rake
    REDUCE_COMPAT = true
  end
end

Bundler.require

Dotenv.load
ENV['RACK_ENV'] ||= 'development'

set :database_file, File.join(File.dirname(__FILE__), 'config', 'database.yml')

['config', 'initializers', 'lib', 'models', 'mailers', 'workers'].each do |path|
  Dir[File.dirname(__FILE__)+"/#{path}/*.rb"].each { |file| require file }
end

trello = Trello.client

use OmniAuth::Builder do
  provider :trello,
           Trello.key,
           Trello.secret,
           app_name: 'BetterTrelloNotifications',
           scope: 'read,write,account',
           expiration: 'never'
end

helpers do
  def current_user
    return @current_user if defined?(@current_user)
    @current_user = User.find_by_id(session[:user_id]) if session[:user_id]
  end

  def user_signed_in?
    current_user.present?
  end
end

register do
  def require_user(*)
    condition do
      unless user_signed_in?
        if params[:email]
          session[:email] = Email.verifier.verify(params[:email])
        end

        session[:desired_location] = request.path_info
        redirect to('/sign_in')
      end
    end
  end
end

get '/' do
  erb :root
end

head '/webhook' do
end

post '/webhook' do
  logger.info params.inspect

  body = request.body.read

  trello.verify_webhook!(body, "#{ENV.fetch('CANONICAL_URL')}#{request.env['PATH_INFO']}", env['HTTP_X_TRELLO_WEBHOOK'])

  Delayed::Job.enqueue(TrelloWebhookWorker.new(body))

  'ok'
end

post "/emails/mailgun" do
  Mailgun.verify_webhook!(params)
  Email.create!(mailgun_data: params.reject { |k, v| k.to_s.starts_with?('attachment-') })

  'OK'
end

get '/emails/authorize' do
  email = Email.verifier.verify(params[:email])

  if user_signed_in? && current_user.has_authed_trello?
    current_user.authorize_email!(email)
    "Ok, you're all set"
  else
    session[:email] = email
    redirect to('/auth/trello')
  end
end

%w(get post).each do |method|
  send(method, '/auth/trello/callback') do
    if user = User.find_by_email(session[:email]) || current_user
      user.associate_trello_auth!(env['omniauth.auth'])
    else
      user = User.find_or_create_from_omniauth!(env['omniauth.auth'])
    end

    session[:user_id] = user.id

    user.authorize_email!(session.delete(:email)) if session[:email]

    flash[:notice] = "Ok, you're all set"
    redirect to(session.delete(:desired_location) || '/')
  end
end

get '/auth/failure' do
  params[:message]
end

get '/sign_out' do
  session.delete(:user_id)

  redirect to('/')
end

get '/sign_in' do
  if user_signed_in?
    redirect to('/')
  else
    redirect to('/auth/trello')
  end
end

get '/email_preferences', require_user: true do
  @boards = current_user.visible_boards

  erb :email_preferences
end

post '/email_preferences/update', require_user: true do
  prefs = (params[:email_preferences].presence || {}).each_with_object({}) { |(id, _), h| h[id] = 'true' }
  current_user.update!(email_preferences: prefs)

  flash[:notice] = "Success!"
  redirect to('/email_preferences')
end

error Trello::InvalidWebhook, Mailgun::InvalidSignature do
  logger.error "Webhook couldn't be verified!"
  status 400
end

error TrelloIdentity::NotAnOrgMember do
  logger.error "Someone in the wrong org tried to join"
  logger.error env['omniauth.auth'].inspect

  status 401
end