docuseal/app/controllers/submissions_download_controller.rb

# frozen_string_literal: true

class SubmissionsDownloadController < ApplicationController
  skip_before_action :authenticate_user!
  skip_authorization_check

  TTL = 20.minutes

  def index
    submitter = Submitter.find_by!(slug: params[:submitter_slug])

    Submissions::EnsureResultGenerated.call(submitter)

    last_submitter = submitter.submission.submitters.where.not(completed_at: nil).order(:completed_at).last

    Submissions::EnsureResultGenerated.call(last_submitter)

    return head :not_found unless last_submitter.completed_at?

    if last_submitter.completed_at < TTL.ago &&
       (current_user.nil? || !current_user.account.submitters.exists?(id: last_submitter.id))
      Rollbar.info("TTL: #{last_submitter.id}") if defined?(Rollbar)

      return head :not_found
    end

    urls =
      Submitters.select_attachments_for_download(last_submitter).map do |attachment|
        ActiveStorage::Blob.proxy_url(attachment.blob)
      end

    render json: urls
  end
end