create customer service auth

app/controllers/application_controller.rb

@@ -6,19 +6,35 @@ class ApplicationController < ActionController::API
   attr_reader :current_user
 
   def authenticate
-    return user_invalid! unless authorization_header
+    if authorization_header
+      authenticate_user
+    elsif customer_service_auth_key
+      authenticate_customer_service
+    else
+      user_invalid!
+    end
+  end
+
+  private
 
+  def authenticate_user
     user = User.find_or_initialize_by({
                                         email: user_auth_params['email'],
                                         google_id: user_auth_params['google_id']
                                       })
     return user_invalid! unless user.valid?
 
     save_user!(user)
-
     @current_user = user
   end
 
+  def authenticate_customer_service
+    customer_service_auth = CustomerServiceAuth.find_by(auth_key: customer_service_auth_key)
+    return user_invalid! unless customer_service_auth
+
+    @current_user = customer_service_auth.customer
+  end
+
   def save_user!(user)
     if user.new_record?
       user.first_name = user_auth_params['first_name']
@@ -45,6 +61,10 @@ def authorization_header
     request.headers['Authorization']
   end
 
+  def customer_service_auth_key
+    request.headers['Customer-Service-Auth-Key']
+  end
+
   def user_auth_params
     return @user_auth_params if @user_auth_params
 

app/models/customer_service_auth.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+# == Schema Information
+#
+# Table name: customer_service_auths
+#
+#  id          :bigint           not null, primary key
+#  auth_key    :string
+#  created_at  :datetime         not null
+#  updated_at  :datetime         not null
+#  customer_id :bigint           not null
+#
+# Indexes
+#
+#  index_customer_service_auths_on_customer_id  (customer_id)
+#
+# Foreign Keys
+#
+#  fk_rails_...  (customer_id => customers.id)
+#
+
+class CustomerServiceAuth < ApplicationRecord
+  belongs_to :customer
+
+  before_create :generate_auth_key
+
+  private
+
+  def generate_auth_key
+    self.auth_key = SecureRandom.hex(10) # Generates a random hex string of 20 characters
+  end
+end

db/migrate/20240605181342_create_customer_api_auth.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+class CreateCustomerApiAuth < ActiveRecord::Migration[7.0]
+  def change
+    create_table :customer_api_auths do |t|
+      t.string :auth_key
+      t.references :customer, null: false, foreign_key: true
+
+      t.timestamps
+    end
+  end
+end

db/migrate/20240605181504_create_customer_service_auths.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+class CreateCustomerServiceAuths < ActiveRecord::Migration[7.0]
+  def change
+    create_table :customer_service_auths do |t|
+      t.string :auth_key
+      t.references :customer, null: false, foreign_key: true
+
+      t.timestamps
+    end
+  end
+end

spec/factories/customer_service_auths.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+# == Schema Information
+#
+# Table name: customer_service_auths
+#
+#  id          :bigint           not null, primary key
+#  auth_key    :string
+#  created_at  :datetime         not null
+#  updated_at  :datetime         not null
+#  customer_id :bigint           not null
+#
+# Indexes
+#
+#  index_customer_service_auths_on_customer_id  (customer_id)
+#
+# Foreign Keys
+#
+#  fk_rails_...  (customer_id => customers.id)
+#
+FactoryBot.define do
+  factory :customer_service_auth do
+    auth_key { 'MyString' }
+    customer { nil }
+  end
+end

spec/models/customer_service_auth_spec.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+# == Schema Information
+#
+# Table name: customer_service_auths
+#
+#  id          :bigint           not null, primary key
+#  auth_key    :string
+#  created_at  :datetime         not null
+#  updated_at  :datetime         not null
+#  customer_id :bigint           not null
+#
+# Indexes
+#
+#  index_customer_service_auths_on_customer_id  (customer_id)
+#
+# Foreign Keys
+#
+#  fk_rails_...  (customer_id => customers.id)
+#
+require 'rails_helper'
+
+RSpec.describe CustomerServiceAuth, type: :model do
+  pending "add some examples to (or delete) #{__FILE__}"
+end