discourse/app/models/invite.rb

require_dependency 'trashable'

class Invite < ActiveRecord::Base
  include Trashable

  belongs_to :user
  belongs_to :topic
  belongs_to :invited_by, class_name: 'User'

  has_many :topic_invites
  has_many :topics, through: :topic_invites, source: :topic
  validates_presence_of :email
  validates_presence_of :invited_by_id

  before_create do
    self.invite_key ||= SecureRandom.hex
  end

  before_save do
    self.email = Email.downcase(email)
  end

  validate :user_doesnt_already_exist
  attr_accessor :email_already_exists

  def user_doesnt_already_exist
    @email_already_exists = false
    return if email.blank?
    u = User.where("email = ?", Email.downcase(email)).first
    if u && u.id != self.user_id
      @email_already_exists = true
      errors.add(:email)
    end
  end

  def redeemed?
    redeemed_at.present?
  end

  def expired?
    created_at < SiteSetting.invite_expiry_days.days.ago
  end

  # link_valid? indicates whether the invite link can be used to log in to the site
  def link_valid?
    invalidated_at.nil?
  end

  def redeem
    InviteRedeemer.new(self).redeem unless expired? || destroyed? || !link_valid?
  end


  # Create an invite for a user, supplying an optional topic
  #
  # Return the previously existing invite if already exists. Returns nil if the invite can't be created.
  def self.invite_by_email(email, invited_by, topic=nil)
    lower_email = Email.downcase(email)
    invite = Invite.with_deleted
                   .where('invited_by_id = ? and email = ?', invited_by.id, lower_email)
                   .order('created_at DESC')
                   .first

    if invite && invite.expired?
      invite.destroy
      invite = nil
    end

    if invite.blank?
      invite = Invite.create(invited_by: invited_by, email: lower_email)
      unless invite.valid?
        topic.grant_permission_to_user(lower_email) if topic.present? && topic.email_already_exists_for?(invite)
        return
      end
    end

    # Recover deleted invites if we invite them again
    invite.recover! if invite.deleted_at.present?

    topic.topic_invites.create(invite_id: invite.id) if topic.present?
    Jobs.enqueue(:invite_email, invite_id: invite.id)
    invite
  end

  def self.find_all_invites_from(inviter)
    Invite.where(invited_by_id: inviter.id)
          .includes(:user => :user_stat)
          .order('CASE WHEN invites.user_id IS NOT NULL THEN 0 ELSE 1 END',
                 'user_stats.time_read DESC',
                 'invites.redeemed_at DESC')
          .limit(SiteSetting.invites_shown)
          .references('user_stats')
  end

  def self.find_redeemed_invites_from(inviter)
    find_all_invites_from(inviter).where('invites.user_id IS NOT NULL')
  end

  def self.filter_by(email_or_username)
    if email_or_username
      where(
        '(LOWER(invites.email) LIKE :filter) or (LOWER(users.username) LIKE :filter)',
        filter: "%#{email_or_username.downcase}%"
      )
    else
      rails4? ? all : scoped
    end
  end

  def self.invalidate_for_email(email)
    i = Invite.where(email: Email.downcase(email)).first
    if i
      i.invalidated_at = Time.zone.now
      i.save
    end
    i
  end
end

# == Schema Information
#
# Table name: invites
#
#  id            :integer          not null, primary key
#  invite_key    :string(32)       not null
#  email         :string(255)      not null
#  invited_by_id :integer          not null
#  user_id       :integer
#  redeemed_at   :datetime
#  created_at    :datetime         not null
#  updated_at    :datetime         not null
#  deleted_at    :datetime
#  deleted_by_id :integer
#
# Indexes
#
#  index_invites_on_email_and_invited_by_id  (email,invited_by_id) UNIQUE
#  index_invites_on_invite_key               (invite_key) UNIQUE
#