postal/app/controllers/domains_controller.rb

# frozen_string_literal: true

class DomainsController < ApplicationController

  include WithinOrganization

  before_action do
    if params[:server_id]
      @server = organization.servers.present.find_by_permalink!(params[:server_id])
      params[:id] && @domain = @server.domains.find_by_uuid!(params[:id])
    else
      params[:id] && @domain = organization.domains.find_by_uuid!(params[:id])
    end
  end

  def index
    if @server
      @domains = @server.domains.order(:name).to_a
    else
      @domains = organization.domains.order(:name).to_a
    end
  end

  def new
    @domain = @server ? @server.domains.build : organization.domains.build
  end

  def create
    scope = @server ? @server.domains : organization.domains
    @domain = scope.build(params.require(:domain).permit(:name, :verification_method))

    if current_user.admin?
      @domain.verification_method = "DNS"
      @domain.verified_at = Time.now
    end

    if @domain.save
      if @domain.verified?
        redirect_to_with_json [:setup, organization, @server, @domain]
      else
        redirect_to_with_json [:verify, organization, @server, @domain]
      end
    else
      render_form_errors "new", @domain
    end
  end

  def destroy
    @domain.destroy
    redirect_to_with_json [organization, @server, :domains]
  end

  def verify
    if @domain.verified?
      redirect_to [organization, @server, :domains], alert: "#{@domain.name} has already been verified."
      return
    end

    return unless request.post?

    case @domain.verification_method
    when "DNS"
      if @domain.verify_with_dns
        redirect_to_with_json [:setup, organization, @server, @domain], notice: "#{@domain.name} has been verified successfully. You now need to configure your DNS records."
      else
        respond_to do |wants|
          wants.html { flash.now[:alert] = "We couldn't verify your domain. Please double check you've added the TXT record correctly." }
          wants.json { render json: { flash: { alert: "We couldn't verify your domain. Please double check you've added the TXT record correctly." } } }
        end
      end
    when "Email"
      if params[:code]
        if @domain.verification_token == params[:code].to_s.strip
          @domain.mark_as_verified
          redirect_to_with_json [:setup, organization, @server, @domain], notice: "#{@domain.name} has been verified successfully. You now need to configure your DNS records."
        else
          respond_to do |wants|
            wants.html { flash.now[:alert] = "Invalid verification code. Please check and try again." }
            wants.json { render json: { flash: { alert: "Invalid verification code. Please check and try again." } } }
          end
        end
      elsif params[:email_address].present?
        raise Postal::Error, "Invalid email address" unless @domain.verification_email_addresses.include?(params[:email_address])

        AppMailer.verify_domain(@domain, params[:email_address], current_user).deliver
        if @domain.owner.is_a?(Server)
          redirect_to_with_json verify_organization_server_domain_path(organization, @server, @domain, email_address: params[:email_address])
        else
          redirect_to_with_json verify_organization_domain_path(organization, @domain, email_address: params[:email_address])
        end
      end
    end
  end

  def setup
    return if @domain.verified?

    redirect_to [:verify, organization, @server, @domain], alert: "You can't set up DNS for this domain until it has been verified."
  end

  def regenerate_dkim
    if @domain.pending_dkim_key?
      redirect_to_with_json [:setup, organization, @server, @domain],
                            alert: "A DKIM key change is already in progress for #{@domain.name}. Publish the new " \
                                   "record shown below, or cancel the change, before generating another key."
      return
    end

    was_verified = @domain.dkim_status == "OK"
    @domain.regenerate_dkim_key!
    if was_verified
      redirect_to_with_json [:setup, organization, @server, @domain],
                            notice: "A new DKIM key has been generated for #{@domain.name}. Add the new DNS record below — " \
                                    "your existing key will remain active until the new record has been verified. Keep the " \
                                    "old DNS record published afterward while messages signed with it may still be queued, " \
                                    "held, or available for redelivery."
    else
      redirect_to_with_json [:setup, organization, @server, @domain], notice: "A new DKIM key has been generated for #{@domain.name}. Update your DKIM DNS record with the new value below."
    end
  end

  def cancel_dkim_regeneration
    @domain.cancel_pending_dkim_key!
    redirect_to_with_json [:setup, organization, @server, @domain], notice: "The pending DKIM key for #{@domain.name} has been discarded. Your existing key remains active."
  end

  def check
    had_pending_dkim_key = @domain.pending_dkim_key?
    previous_dkim_record_name = @domain.dkim_record_name
    if @domain.check_dns(:manual)
      if had_pending_dkim_key && !@domain.pending_dkim_key?
        redirect_to_with_json [:setup, organization, @server, @domain],
                              notice: "Your DNS records for #{@domain.name} look good! Your new DKIM key is now active. " \
                                      "Keep the old record at #{previous_dkim_record_name} published while messages " \
                                      "signed with the old key may still be queued, held, or available for redelivery."
      elsif @domain.pending_dkim_key?
        redirect_to_with_json [:setup, organization, @server, @domain],
                              alert: "We couldn't verify the record for your new DKIM key yet. Your existing key remains " \
                                     "active. Check below for the expected record details."
      else
        redirect_to_with_json [organization, @server, :domains], notice: "Your DNS records for #{@domain.name} look good!"
      end
    else
      redirect_to_with_json [:setup, organization, @server, @domain], alert: "There seems to be something wrong with your DNS records. Check below for information."
    end
  end

end