Gribouillis / Scrawl

connect.rb

class ConnectController

  def authorize
    redirect_to stripe_authorize_url
  end
  
  def callback
    if code = params[:code]
      auth_token = client.auth_code.get_token(code)
      current_user.update!(token: auth_token)
      flash.notice = 'Connected to Stripe.'
    elsif error = params[:error]
      flash.alert = case error
        when 'access_denied' then 'Access denied.'
      end
    end

    redirect_to params[:state]
  end

private

  def client
    OAuth2::Client.new(
      ENV['STRIPE_ID'],
      ENV['STRIPE_SECRET'],
      site: STRIPE_URL )
  end
  
  def stripe_authorize_url
    client.auth_code.authorize_url(
      scope: 'read_write',
      state: request.referer,
      stripe_user: stripe_user_attributes,
      redirect_uri: oauth_callback_url )
  end
end