huginn/app/controllers/web_requests_controller.rb

# This controller is designed to allow your Agents to receive cross-site Webhooks (POSTs), or to output data streams.
# When a POST or GET is received, your Agent will have #receive_web_request called on itself with the incoming params,
# method, and requested content-type.
#
# Requests are routed as follows:
#   http://yourserver.com/users/:user_id/web_requests/:agent_id/:secret
# where :user_id is a User's id, :agent_id is an Agent's id, and :secret is a token that should be user-specifiable in
# an Agent that implements #receive_web_request. It is highly recommended that every Agent verify this token whenever
# #receive_web_request is called. For example, one of your Agent's options could be :secret and you could compare this
# value to params[:secret] whenever #receive_web_request is called on your Agent, rejecting invalid requests.
#
# Your Agent's #receive_web_request method should return an Array of json_or_string_response, status_code,
# optional mime type, and optional hash of custom response headers.  For example:
#   [{status: "success"}, 200]
# or
#   ["not found", 404, 'text/plain']
# or
#   ["<status>success</status>", 200, 'text/xml', {"Access-Control-Allow-Origin" => "*"}]

class WebRequestsController < ApplicationController
  skip_before_action :verify_authenticity_token
  skip_before_action :authenticate_user!
  wrap_parameters false

  def handle_request
    user = User.find_by_id(params[:user_id])
    if user
      agent = user.agents.find_by_id(params[:agent_id])
      if agent
        content, status, content_type, headers = agent.trigger_web_request(request)

        if headers.present?
          headers.each do |k, v|
            response.headers[k] = v
          end
        end

        status ||= 200

        if status.to_s.in?(%w[301 302])
          redirect_to(content, allow_other_host: true, status:)
        elsif content.is_a?(String)
          render plain: content, status:, content_type: content_type || 'text/plain'
        elsif content.is_a?(Hash)
          render(json: content, status:)
        else
          head(status)
        end
      else
        render plain: 'agent not found', status: 404
      end
    else
      render plain: 'user not found', status: 404
    end
  end

  # legacy
  def update_location
    if user = User.find_by_id(params[:user_id])
      secret = params[:secret]
      user.agents.of_type(Agents::UserLocationAgent).each do |agent|
        agent.trigger_web_request(request) if agent.options[:secret] == secret
      end
      render plain: 'ok'
    else
      render plain: 'user not found', status: :not_found
    end
  end
end