Version bump 0.2.0

* New Top & Application Menus
* Move quickbooks stats into QBO settings page
* Fixed New vehicle for customer link
* Added issue linking from hashtag numbers in QBO invoice line items
* Cleaned up customer & vehicle lists
* Implemented delete calls from web hook
* Added webhook token verification
* More...

app/controllers/qbo_controller.rb

@@ -11,6 +11,8 @@
 class QboController < ApplicationController
   unloadable
   
+  require 'openssl'
+  
   include AuthHelper
   
   before_filter :require_user, :except => :qbo_webhook
@@ -64,41 +66,52 @@ class QboController < ApplicationController
   # Quickbooks Webhook Callback
   def qbo_webhook
     
-    if request.headers['Content-Type'] == 'application/json'
-      data = JSON.parse(request.body.read)
-    else
-      # application/x-www-form-urlencoded
-      data = params.as_json
-    end
-    # Process the information
-    entities = data['eventNotifications'][0]['dataChangeEvent']['entities']
-    entities.each do |entity|
-      id = entity['id'].to_i
-      name = entity['name']
-      
-      # TODO rename all other models!
-      name.prepend("Qbo") if not name.eql? "Customer"
-      
-      # Magicly initialize the correct class
-      obj = name.constantize
-      
-      # for merge events
-      obj.delete(entity['deletedId']) if entity['deletedId']
-      
-      #Check to see if we are deleting a record
-      if entity['operation'].eql? "Delete"
-          obj.delete(id)
-      #if not then update!
+    # check the payload
+    signature = request.headers['intuit-signature']
+    key = Setting.plugin_redmine_qbo['settingsWebhookToken']
+    data = request.body.read
+    hash = Base64.encode64(OpenSSL::HMAC.digest(OpenSSL::Digest::Digest.new('sha256'), key, data)).strip()
+    
+    # proceed if the request is good
+    if hash.eql? signature
+      if request.headers['content-type'] == 'application/json'
+        data = JSON.parse(data)
       else
-        obj.sync_by_id(id)
+        # application/x-www-form-urlencoded
+        data = params.as_json
       end
+      # Process the information
+      entities = data['eventNotifications'][0]['dataChangeEvent']['entities']
+      entities.each do |entity|
+        id = entity['id'].to_i
+        name = entity['name']
+        
+        # TODO rename all other models!
+        name.prepend("Qbo") if not name.eql? "Customer"
+        
+        # Magicly initialize the correct class
+        obj = name.constantize
+        
+        # for merge events
+        obj.destroy(entity['deletedId']) if entity['deletedId']
+        
+        #Check to see if we are deleting a record
+        if entity['operation'].eql? "Delete"
+            obj.destroy(id)
+        #if not then update!
+        else
+          obj.sync_by_id(id)
+        end
+      end
+      
+      # Record that last time we updated
+      Qbo.update_time_stamp
+      
+      # The webhook doesn't require a response but let's make sure we don't send anything
+      render :nothing => true
+    else
+      render nothing: true, status: 400
     end
-    
-    # Record that last time we updated
-    Qbo.update_time_stamp
-    
-    # The webhook doesn't require a response but let's make sure we don't send anything
-    render :nothing => true
   end
 
   #

app/controllers/vehicles_controller.rb

@@ -18,6 +18,14 @@ class VehiclesController < ApplicationController
   
   # display a list of all vehicles
   def index
+    if params[:customer_id]
+      begin
+        @vehicles = Customer.find_by_id(params[:customer_id]).vehicles.paginate(:page => params[:page])
+      rescue ActiveRecord::RecordNotFound
+        render_404
+      end
+    end
+    
     if params[:search]
       @vehicles = Vehicle.search(params[:search]).paginate(:page => params[:page])
       if only_one_non_zero?(@vehicles)
@@ -30,6 +38,9 @@ class VehiclesController < ApplicationController
   def new
     @vehicle = Vehicle.new
     @customers = Customer.all.order(:name)
+    if params[:customer]
+      @customer = Customer.find_by_id(params[:customer])
+    end
   end
 
   # create a new vehicle
@@ -92,6 +103,15 @@ class VehiclesController < ApplicationController
     end
   end
   
+  # returns a dynamic list of vehicles owned by a customer
+  def update_vehicles
+    @vehicles = Customer.find_by_id(params[:customer_id].to_i).vehicles
+    respond_to do |format|
+      format.html { render(:text => "not implemented") }
+      format.js
+    end
+  end
+  
   private
   
   def only_one_non_zero?( array )

app/models/qbo_invoice.rb

@@ -46,11 +46,23 @@ class QboInvoice < ActiveRecord::Base
   end
   
   def self.sync_by_id(id)
+    #update the information in the database
     invoice = get_base.service.fetch_by_id(id) 
     qbo_invoice = find_or_create_by(id: invoice.id) 
     qbo_invoice.doc_number = invoice.doc_number 
     qbo_invoice.id = invoice.id
     qbo_invoice.save! 
+    
+    # Scan the line items for hashtags and attach to the applicable issues
+    invoice.line_items.each { |line|
+      if line.description
+        line.description.scan(/#(\w+)/).flatten.each { |issue|
+          i = Issue.find_by_id(issue.to_i)
+          i.qbo_invoice = QboInvoice.find_by_id(invoice.id.to_i)
+          i.save!
+        }
+      end
+    }
   end
   
   def self.update(id)

app/views/customers/_details.html.erb

@@ -30,8 +30,7 @@
         <td><%= customer.issues.count %></td>
     </tr>
     
-        <tr>
-      <td/>
+    <tr>
       <td>
         <%= button_to "Edit Customer", edit_customer_path(customer), method: :get%> 
       </td>

app/views/customers/show.html.erb

@@ -1,7 +1,12 @@
 <h1>Customer #<%= @customer.id %></h1> 
 <br/> 
+<h2>Details:</h2>
 <%= render :partial => 'customers/details', locals: {customer: @customer} %>
 <br/>
+<h2>Vehicles:</h2>
 <%= render :partial => 'vehicles/list' %>
+<%= button_to "New Vehicle", new_customer_vehicle_path(@customer), method: :get %>
 <br/>
+<br/>
+<h2>Issues:</h2>
 <%= render :partial => 'issues/list_simple', locals: {issues: @issues} %>

app/views/qbo/_settings.html.erb

@@ -46,6 +46,15 @@ intuit.ipp.anywhere.setup({menuProxy: '/path/to/blue-dot', grantUrl: '<%= qbo_au
                            name="settings[settingsOAuthConsumerSecret]" >
       </td>
     </tr>
+    
+    <tr>
+      <th>Intuit QBO Webhook Token</th>
+      <td>
+        <input type="text" style="width:350px" id="settingsWebhookToken"
+                           value="<%= settings['settingsWebhookToken'] %>"
+                           name="settings[settingsWebhookToken]" >
+      </td>
+    </tr>
 
      <tr>
        <th>Token Expires At</th>
@@ -63,6 +72,36 @@ intuit.ipp.anywhere.setup({menuProxy: '/path/to/blue-dot', grantUrl: '<%= qbo_au
 <br/>
 Note: You need to authenticate after saving your key and secret above
 <br/>
+<br/>
 
 <!-- this will display a button that the user clicks to start the flow -->
 <ipp:connectToIntuit></ipp:connectToIntuit>
+
+<br/>
+<br/>
+
+<div>
+    <b>Customer Count:</b> <%= Customer.count%>
+    </div>
+      
+    <div>
+        <b>Item Count:</b> <%= QboItem.count %>
+    </div>
+      
+    <div>
+        <b>Employee Count:</b> <%= QboEmployee.count %>
+    </div>
+    
+    <div>
+        <b>Invoice Count:</b> <%= QboInvoice.count %>
+    </div>
+    
+    <div>
+        <b>Estimate Count:</b> <%= QboEstimate.count %>
+    </div>
+      
+    <br/>
+    
+    <div>
+        <b>Last Sync: </b> <%= Qbo.last_sync %> <%= link_to " Sync Now", qbo_sync_path %>
+</div>

app/views/vehicles/_details.html.erb

@@ -3,7 +3,7 @@
   
     <tr>
       <th>Customer</th>
-      <td><%= vehicle.customer.name %></td>
+      <td><%= link_to vehicle.customer.name, customer_path(vehicle.customer) %></td>
     </tr>
   
     <tr>

app/views/vehicles/_form.html.erb

@@ -6,7 +6,7 @@
         <div class="clearfix">
           Customer: 
           <div class="input">
-            <%= f.collection_select :customer_id, @customers, :id, :name, include_blank: true, :selected => @customer, :required => true%>
+            <%= f.collection_select :customer_id, @customers, :id, :name, include_blank: true, :selected => params[:customer_id], :required => true%>
             </div>
         </div>
         

app/views/vehicles/_list.html.erb

@@ -16,8 +16,6 @@
     </div>
     <br/>
   <% end %>
-  
-  <br/>
 
   <div class="actions">
     <%= will_paginate @vehicles %>

app/views/vehicles/_vehicle.html.erb

@@ -0,0 +1 @@
+<option value="<%= vehicle.id %>"><%= vehicle.to_s.titleize %></option>

app/views/vehicles/update_vehicles.js.erb

@@ -0,0 +1 @@
+$("#issue_vehicles_id").empty().append("<%= escape_javascript(render(:partial => @vehicles)) %>")

assets/javascripts/vehicles.js

@@ -0,0 +1,16 @@
+# Place all the behaviors and hooks related to the matching controller here.
+# All this logic will automatically be available in application.js.
+# You can use CoffeeScript in this file: http://coffeescript.org/
+
+$ ->
+  $(document).on 'change', '#issue_customer_id', (evt) ->
+    $.ajax 'update_vehicles',
+      type: 'GET'
+      dataType: 'script'
+      data: {
+        customer_id: $("#issue_customer_id option:selected").val()
+      }
+      error: (jqXHR, textStatus, errorThrown) ->
+        console.log("AJAX Error: #{textStatus}")
+      success: (data, textStatus, jqXHR) ->
+console.log("Dynamic vehicle select OK!")

config/routes.rb

@@ -20,5 +20,11 @@ get 'qbo/invoice/:id', :to => 'invoice#show', as: :invoice
 
 post 'qbo/webhook', :to => 'qbo#qbo_webhook'
 
+#ajax
+get "update_vehicles" => 'vehicles#update_vehicles', as: 'update_vehicles'
+
+resources :customers do
+  resources :vehicles
+end
+
 resources :vehicles
-resources :customers

init.rb

@@ -25,7 +25,7 @@ Redmine::Plugin.register :redmine_qbo do
     name 'Redmine Quickbooks Online plugin'
     author 'Rick Barrette'
     description 'This is a plugin for Redmine to intergrate with Quickbooks Online to allow for seamless intergration CRM and invoicing of completed issues'
-    version '0.0.8'
+    version '0.2.0'
     url 'https://github.com/rickbarrette/redmine_qbo'
     author_url 'http://rickbarrette.org'
     settings :default => {'empty' => true}, :partial => 'qbo/settings'
@@ -46,8 +46,12 @@ Redmine::Plugin.register :redmine_qbo do
     WillPaginate.per_page = 10
 
     # Register QBO top menu item
-    menu :top_menu, :qbo, { :controller => :qbo, :action => :index }, :caption => 'Quickbooks', :if => Proc.new { User.current.admin? }
-    menu :top_menu, :vehicles, { :controller => :vehicles, :action => :index }, :caption => 'Vehicles', :if => Proc.new { User.current.logged? }
+    #menu :top_menu, :qbo, { :controller => :qbo, :action => :index }, :caption => 'Quickbooks', :if => Proc.new { User.current.admin? }
     menu :top_menu, :customers, { :controller => :customers, :action => :index }, :caption => 'Customers', :if => Proc.new { User.current.logged? }
-
+    menu :top_menu, :vehicles, { :controller => :vehicles, :action => :index }, :caption => 'Vehicles', :if => Proc.new { User.current.logged? }
+    
+    menu :application_menu, :new_customer, { :controller => :customers, :action => :new }, :caption => 'New Customer', :if => Proc.new { User.current.logged? }
+    
+    permission :customers, { :customers => [:index, :new] }, :public => false
+    menu :project_menu, :customers, { :controller => 'customers', :action => 'new' }, :caption => 'New Customer', :after => :activity, :param => :project_id
 end

lib/issues_form_hook_listener.rb

@@ -10,6 +10,11 @@
 
 class IssuesFormHookListener < Redmine::Hook::ViewListener
   
+  # Load the javascript
+  def view_layouts_base_html_head(context = {})
+    javascript_include_tag 'vehicles', :plugin => 'redmine_qbo'
+  end
+  
   # Edit Issue Form
   # Show a dropdown for quickbooks contacts
   def view_issues_form_details_bottom(context={})

lib/issues_show_hook_listener.rb

@@ -50,6 +50,8 @@ class IssuesShowHookListener < Redmine::Hook::ViewListener
       #do nothing
     end
     
+    split_vin = vin.scan(/.{1,9}/) if vin
+    
     return "
     <div class=\"attributes\">
     
@@ -82,7 +84,7 @@ class IssuesShowHookListener < Redmine::Hook::ViewListener
         
       <div class=\"vehicle_vin attribute\">
         <div class=\"label\"><span>VIN</span>:</div>
-        <div class=\"value\">#{vin.gsub(/(.{9})/, '\1 ') if vin}</div>
+        <div class=\"value\">#{split_vin[0] if split_vin}<b>#{split_vin[1] if split_vin}</b></div>
       </div>
       
       <div class=\"vehicle_notes attribute\">