docuseal/app/controllers/user_initials_controller.rb

# frozen_string_literal: true

class UserInitialsController < ApplicationController
  before_action :load_user_config
  authorize_resource :user_config

  def edit; end

  def update
    file = params[:file]

    return redirect_to settings_profile_index_path, notice: I18n.t('unable_to_save_initials') if file.blank?

    extension = File.extname(file.original_filename).delete_prefix('.').downcase

    if Submitters::DANGEROUS_EXTENSIONS.include?(extension)
      raise Submitters::MaliciousFileExtension, "File type '.#{extension}' is not allowed."
    end

    blob = ActiveStorage::Blob.create_and_upload!(io: file.open,
                                                  filename: file.original_filename,
                                                  content_type: file.content_type)

    attachment = ActiveStorage::Attachment.create!(
      blob:,
      name: 'initials',
      record: current_user
    )

    if @user_config.update(value: attachment.uuid)
      redirect_to settings_profile_index_path, notice: I18n.t('initials_has_been_saved')
    else
      redirect_to settings_profile_index_path, notice: I18n.t('unable_to_save_initials')
    end
  end

  def destroy
    @user_config.destroy

    redirect_to settings_profile_index_path, notice: I18n.t('initials_has_been_removed')
  end

  private

  def load_user_config
    @user_config =
      UserConfig.find_or_initialize_by(user: current_user, key: UserConfig::INITIALS_KEY)
  end
end