Accept invite (#447)

app/graphql/mutations/invites/accept.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module Mutations
+  module Invites
+    class Accept < BaseMutation
+      graphql_name 'AcceptInvite'
+      description 'Accepts a new Invite'
+
+      argument :email, String, required: true
+      argument :password, String, required: true
+      argument :token, String, required: true, description: 'Uniq token of the Invite'
+
+      type Types::Payloads::RegisterUserType
+
+      def resolve(**args)
+        result = ::Invites::AcceptService.new.call(**args)
+
+        result.success? ? result : result_error(result)
+      end
+    end
+  end
+end

app/graphql/types/mutation_type.rb

@@ -50,6 +50,7 @@ class MutationType < Types::BaseObject
     field :create_customer_wallet_transaction, mutation: Mutations::WalletTransactions::Create
 
     field :create_invite, mutation: Mutations::Invites::Create
+    field :accept_invite, mutation: Mutations::Invites::Accept
     field :revoke_invite, mutation: Mutations::Invites::Revoke
     field :revoke_membership, mutation: Mutations::Memberships::Revoke
   end

app/models/invite.rb

@@ -19,4 +19,9 @@ def mark_as_revoked!(timestamp = Time.current)
     self.revoked_at ||= timestamp
     revoked!
   end
+
+  def mark_as_accepted!(timestamp = Time.current)
+    self.accepted_at ||= timestamp
+    accepted!
+  end
 end

app/services/invites/accept_service.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+module Invites
+  class AcceptService < BaseService
+    def call(**args)
+      invite = Invite.find_by(token: args[:token], status: :pending)
+      return result.not_found_failure!(resource: 'invite') unless invite
+
+      ActiveRecord::Base.transaction do
+        result = UsersService.new.register_from_invite(
+          args[:email],
+          args[:password],
+          invite.organization_id,
+        )
+
+        invite.recipient = result.membership
+
+        invite.mark_as_accepted!
+
+        result
+      end
+    end
+  end
+end

app/services/users_service.rb

@@ -24,15 +24,8 @@ def register(email, password, organization_name)
 
     ActiveRecord::Base.transaction do
       result.organization = Organization.create!(name: organization_name)
-      result.user.password = password
-      result.user.save!
-      result.token = generate_token
 
-      result.membership = Membership.create!(
-        user: result.user,
-        organization: result.organization,
-        role: :admin
-      )
+      create_user_and_membership(result, password)
     end
 
     SegmentIdentifyJob.perform_later(membership_id: "membership/#{result.membership.id}")
@@ -41,6 +34,20 @@ def register(email, password, organization_name)
     result
   end
 
+  def register_from_invite(email, password, organization_id)
+    result.user = User.find_or_initialize_by(email: email)
+
+    return result.fail!(code: 'user_already_exists') if result.user.id
+
+    ActiveRecord::Base.transaction do
+      result.organization = Organization.find(organization_id)
+
+      create_user_and_membership(result, password)
+    end
+
+    result
+  end
+
   def new_token(user)
     result.user = user
     result.token = generate_token
@@ -49,6 +56,24 @@ def new_token(user)
 
   private
 
+  def create_user_and_membership(result, password)
+    ActiveRecord::Base.transaction do
+      result.user.password = password
+      result.user.save!
+
+      result.token = generate_token
+
+      result.membership = Membership.create!(
+        user: result.user,
+        organization: result.organization,
+      )
+
+      result
+    end
+  rescue ActiveRecord::RecordInvalid => e
+    result.record_validation_failure!(record: e.record)
+  end
+
   def generate_token
     JWT.encode(payload, ENV['SECRET_KEY_BASE'], 'HS256')
   rescue StandardError => e

schema.graphql

@@ -1,3 +1,20 @@
+"""
+Autogenerated input type of AcceptInvite
+"""
+input AcceptInviteInput {
+  """
+  A unique identifier for the client performing the mutation.
+  """
+  clientMutationId: String
+  email: String!
+  password: String!
+
+  """
+  Uniq token of the Invite
+  """
+  token: String!
+}
+
 type AddOn {
   amountCents: Int!
   amountCurrency: CurrencyEnum!
@@ -2770,6 +2787,16 @@ enum MembershipStatus {
 }
 
 type Mutation {
+  """
+  Accepts a new Invite
+  """
+  acceptInvite(
+    """
+    Parameters for AcceptInvite
+    """
+    input: AcceptInviteInput!
+  ): RegisterUser
+
   """
   Add or update Stripe API keys to the organization
   """

schema.json

@@ -9,6 +9,77 @@
       },
       "subscriptionType": null,
       "types": [
+        {
+          "kind": "INPUT_OBJECT",
+          "name": "AcceptInviteInput",
+          "description": "Autogenerated input type of AcceptInvite",
+          "interfaces": null,
+          "possibleTypes": null,
+          "fields": null,
+          "inputFields": [
+            {
+              "name": "clientMutationId",
+              "description": "A unique identifier for the client performing the mutation.",
+              "type": {
+                "kind": "SCALAR",
+                "name": "String",
+                "ofType": null
+              },
+              "defaultValue": null,
+              "isDeprecated": false,
+              "deprecationReason": null
+            },
+            {
+              "name": "email",
+              "description": null,
+              "type": {
+                "kind": "NON_NULL",
+                "name": null,
+                "ofType": {
+                  "kind": "SCALAR",
+                  "name": "String",
+                  "ofType": null
+                }
+              },
+              "defaultValue": null,
+              "isDeprecated": false,
+              "deprecationReason": null
+            },
+            {
+              "name": "password",
+              "description": null,
+              "type": {
+                "kind": "NON_NULL",
+                "name": null,
+                "ofType": {
+                  "kind": "SCALAR",
+                  "name": "String",
+                  "ofType": null
+                }
+              },
+              "defaultValue": null,
+              "isDeprecated": false,
+              "deprecationReason": null
+            },
+            {
+              "name": "token",
+              "description": "Uniq token of the Invite",
+              "type": {
+                "kind": "NON_NULL",
+                "name": null,
+                "ofType": {
+                  "kind": "SCALAR",
+                  "name": "String",
+                  "ofType": null
+                }
+              },
+              "defaultValue": null,
+              "isDeprecated": false,
+              "deprecationReason": null
+            }
+          ],
+          "enumValues": null
+        },
         {
           "kind": "OBJECT",
           "name": "AddOn",
@@ -9260,6 +9331,35 @@
           ],
           "possibleTypes": null,
           "fields": [
+            {
+              "name": "acceptInvite",
+              "description": "Accepts a new Invite",
+              "type": {
+                "kind": "OBJECT",
+                "name": "RegisterUser",
+                "ofType": null
+              },
+              "isDeprecated": false,
+              "deprecationReason": null,
+              "args": [
+                {
+                  "name": "input",
+                  "description": "Parameters for AcceptInvite",
+                  "type": {
+                    "kind": "NON_NULL",
+                    "name": null,
+                    "ofType": {
+                      "kind": "INPUT_OBJECT",
+                      "name": "AcceptInviteInput",
+                      "ofType": null
+                    }
+                  },
+                  "defaultValue": null,
+                  "isDeprecated": false,
+                  "deprecationReason": null
+                }
+              ]
+            },
             {
               "name": "addStripePaymentProvider",
               "description": "Add or update Stripe API keys to the organization",

spec/graphql/mutations/invites/accept_spec.rb

@@ -0,0 +1,93 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Mutations::Invites::Accept, type: :graphql do
+  let(:membership) { create(:membership) }
+  let(:organization) { membership.organization }
+  let(:password) { Faker::Internet.password }
+
+  let(:mutation) do
+    <<~GQL
+      mutation($input: AcceptInviteInput!) {
+        acceptInvite(input: $input) {
+          token
+          user {
+            id
+            email
+          }
+        }
+      }
+    GQL
+  end
+
+  describe 'Invite revoke mutation' do
+    context 'with a new user' do
+      let(:invite) { create(:invite, organization: organization) }
+
+      it 'accepts the invite ' do
+        result = execute_graphql(
+          current_user: membership.user,
+          current_organization: organization,
+          query: mutation,
+          variables: {
+            input: {
+              email: invite.email,
+              password: password,
+              token: invite.token,
+            },
+          },
+        )
+
+        data = result['data']['acceptInvite']
+
+        expect(data['user']['email']).to eq(invite.email)
+        expect(data['token']).to be_present
+      end
+    end
+
+    context 'when invite is revoked' do
+      let(:invite) { create(:invite, organization: organization, status: :revoked) }
+
+      it 'returns an error' do
+        result = execute_graphql(
+          current_user: membership.user,
+          current_organization: organization,
+          query: mutation,
+          variables: {
+            input: {
+              email: invite.email,
+              password: password,
+              token: invite.token,
+            },
+          },
+        )
+
+        expect(result['errors'].first['extensions']['status']).to eq(404)
+        expect(result['errors'].first['extensions']['code']).to eq('invite_not_found')
+      end
+    end
+
+    context 'when invite is already accepted' do
+      let(:invite) { create(:invite, organization: organization, status: :accepted) }
+
+      it 'returns an error' do
+        result = execute_graphql(
+          current_user: membership.user,
+          current_organization: organization,
+          query: mutation,
+          variables: {
+            input: {
+              email: invite.email,
+              password: password,
+              token: invite.token,
+            },
+          },
+        )
+
+        expect(result['errors'].first['extensions']['status']).to eq(404)
+        expect(result['errors'].first['extensions']['code']).to eq('invite_not_found')
+      end
+    end
+  end
+end

spec/models/invite_spec.rb

@@ -15,6 +15,18 @@
     end
   end
 
+  describe '#mark_as_accepted' do
+    let(:invite) { create(:invite) }
+
+    it 'accepts the invite with a Time' do
+      freeze_time do
+        expect { invite.mark_as_accepted! }
+          .to change { invite.reload.status }.from('pending').to('accepted')
+          .and change(invite, :accepted_at).from(nil).to(Time.current)
+      end
+    end
+  end
+
   describe 'Invite email' do
     let(:invite) { build(:invite) }