1 files changed, 61 insertions, 0 deletions
diff --git a/billing/app/controllers/customer_controller.rb b/billing/app/controllers/customer_controller.rb
new file mode 100644
index 0000000..14ea8a7
--- /dev/null
+++ b/billing/app/controllers/customer_controller.rb
@@ -0,0 +1,61 @@
+class CustomerController < BillingBaseController
+  before_filter :authorize
+  def show
+    customer.with_braintree_data!
+    @default_cc = customer.default_credit_card #TODO not actually right way
+    @active_subscription = customer.subscriptions
+    @transactions = customer.braintree_customer.transactions
+  end
+
+  def new
+    if customer.has_payment_info?
+      redirect_to edit_customer_path(customer), :notice => 'Here is your saved customer data'
+    else
+      fetch_new_transparent_redirect_data
+    end
+  end
+
+  def edit
+    fetch_edit_transparent_redirect_data
+  end
+
+  def confirm
+    @result = Braintree::TransparentRedirect.confirm(request.query_string)
+
+    if @result.success?
+      customer.braintree_customer =  @result.customer
+      customer.save
+      render :action => "confirm"
+    elsif customer.has_payment_info?
+      fetch_edit_transparent_redirect_data
+      render :action => "edit"
+    else
+      fetch_new_transparent_redirect_data
+      render :action => "new"
+    end
+  end
+
+  protected
+
+  def fetch_new_transparent_redirect_data
+    @tr_data = Braintree::TransparentRedirect.
+      create_customer_data(:redirect_url => confirm_customer_url)
+  end
+
+  def fetch_edit_transparent_redirect_data
+    customer.with_braintree_data!
+    @default_cc = customer.default_credit_card
+    @tr_data = Braintree::TransparentRedirect.
+      update_customer_data(:redirect_url => confirm_customer_url,
+                           :customer_id => customer.braintree_customer_id) ##??
+  end
+
+  def customer
+    @customer ||= Customer.find(params[:id]) if params[:id]  # edit, show
+    @customer ||= Customer.find_by_user_id(current_user.id)  # confirm
+    @customer ||= Customer.new(user: current_user)
+    # TODO will want case for admins, presumably
+    access_denied unless @customer.user == current_user
+    return @customer
+  end
+end