etsy: only generate linking urls upon demand

README.md

@@ -6,17 +6,18 @@
 - [ ] Etsy (WIP)
     - [ ] GET ETSY AUTH (WIP)
         - [x] move auth state stuff to database (out of cache)
-        - [ ] only generate a sign up link IF they click the link on the accounts page
+        - [x] only generate a sign up link IF they click the link on the accounts page
         - [ ] get api key approved
-    - [o] NEEDS TESTING - Get new access token using refresh token flow
+    - [?] Get new access token using refresh token flow
     - [ ] make a FK between the etsy_store_events table and etsy_users table (store_id columns don't match types)
 - [ ] Auth0
     - [ ] get off dev api key?
-    - [ ] Get new access token using refresh token flow
-        - [ ] test
-    - [ ] Get new refresh token flow
+    - [x] Get new access token using refresh token flow
         - [ ] test
     - [ ] Social connections login
+    - [ ] automatically clean up access tokens and state when expired
+        - [ ] access tokens
+        - [ ] state
 - [ ] Complete this design document?
 - [ ] Complete defining this roadmap checklist
 - [ ] Website displaying an audit of store events

internal/site/templates/page_bodies/accounts/{acctID}/index.html.tmpl

@@ -12,7 +12,7 @@
 {{- else }}
 	<h3>
 		{{/* TODO: create this link dynamically, not EVERYTIME THE PAGE IS LOADED */}}
-		<a href="{{ .Etsy.GenerateConnectionURLForNewAccount $acctID.ID }}">
+		<a href="{{ printf "/webhooks/etsy/%d/new-account-link" $acctID.ID }}">
 			Link Your Etsy Store!
 		</a>
 	</h3>

internal/webhooks/etsy/webhooks.go

@@ -11,18 +11,42 @@ import (
 	"ruben/inventory2/internal/domains/raw_events"
 )
 
-type Config struct {
+type (
+	Webhooks struct {
+		cfg  Config
+		db   *raw_events.Store
+		etsy *etsy.Platform
+	}
+
+	Config struct {
 		OAuthRedirectURIWithAcctIDParam string
 	}
+)
 
 func NewWebhookHandler(
 	db *raw_events.Store,
 	platform *etsy.Platform,
 	cfg Config,
 ) http.Handler {
+	h := Webhooks{
+		cfg:  cfg,
+		db:   db,
+		etsy: platform,
+	}
+
 	mux := http.NewServeMux()
 
-	mux.HandleFunc("POST /test", func(w http.ResponseWriter, r *http.Request) {
+	mux.HandleFunc("POST /test", h.test)
+
+	mux.HandleFunc("GET "+h.cfg.OAuthRedirectURIWithAcctIDParam, h.redirectURI)
+
+	mux.HandleFunc("GET /{acctID}/new-account-link", h.newAccountLink)
+
+	return mux
+}
+
+// POST /test
+func (h Webhooks) test(w http.ResponseWriter, r *http.Request) {
 	var body json.RawMessage
 	if err := json.NewDecoder(r.Body).Decode(&body); err != nil {
 		http.Error(w, "Failed to decode body as json: "+err.Error(), 500)
@@ -39,7 +63,7 @@ func NewWebhookHandler(
 		storeID = payloadObject.StoreID
 	}
 
-		err := db.Save(r.Context(), &raw_events.Event{
+	err := h.db.Save(r.Context(), &raw_events.Event{
 		Platform:       "etsy",
 		StoreID:        storeID,
 		EventID:        fmt.Sprint(ts.Unix()),
@@ -52,9 +76,10 @@ func NewWebhookHandler(
 	}
 
 	w.WriteHeader(201)
-	})
+}
 
-	mux.HandleFunc("GET "+cfg.OAuthRedirectURIWithAcctIDParam, func(w http.ResponseWriter, r *http.Request) {
+// GET h.cfg.OAuthRedirectURIWithAcctIDParam
+func (h Webhooks) redirectURI(w http.ResponseWriter, r *http.Request) {
 	// get account id for the request
 
 	acctID, err := strconv.ParseInt(r.PathValue("acctID"), 10, 64)
@@ -82,14 +107,14 @@ func NewWebhookHandler(
 			acctID,
 		)
 
-			platform.InvalidateState(ctx, state)
+		h.etsy.InvalidateState(ctx, state)
 
 		return
 	}
 
 	// validate the state to prevent CSRF attacks
 
-		ok, err := platform.HandleNewAuthCode(ctx, acctID, state, q.Get("code"))
+	ok, err := h.etsy.HandleNewAuthCode(ctx, acctID, state, q.Get("code"))
 	if err != nil {
 		w.WriteHeader(http.StatusForbidden)
 		fmt.Println("failed to handle new auth code:", err)
@@ -100,10 +125,25 @@ func NewWebhookHandler(
 		return
 	}
 
-		// TODO: response with a redirect to the user's account page (SUCCESS - new sign up or login)!
+	// redirect to the user's account page
 
 	http.Redirect(w, r, fmt.Sprintf("/accounts/%d", acctID), http.StatusSeeOther)
-	})
-
-	return mux
+}
+
+// GET /{acctID}/new-account-link
+func (h Webhooks) newAccountLink(w http.ResponseWriter, r *http.Request) {
+	acctIDStr := r.PathValue("acctID")
+	acctID, err := strconv.ParseInt(acctIDStr, 10, 64)
+	if err != nil {
+		http.Error(w, fmt.Sprintf("account %s not found", acctIDStr), http.StatusNotFound)
+		return
+	}
+
+	u, err := h.etsy.GenerateConnectionURLForNewAccount(r.Context(), acctID)
+	if err != nil {
+		http.Error(w, fmt.Sprintf("failed to generate url for account %d: %v", acctID, err), http.StatusInternalServerError)
+		return
+	}
+
+	http.Redirect(w, r, u.String(), http.StatusTemporaryRedirect)
 }