theseus/app/controllers/hcb/payment_accounts_controller.rb

class HCB::PaymentAccountsController < ApplicationController
  skip_after_action :verify_authorized

  before_action :require_hcb_connection, except: [:index]
  before_action :set_payment_account, only: [:show]

  rescue_from HCBV4::APIError do |e|
    event_id = Sentry.capture_exception(e, extra: { user_id: current_user.id })&.event_id
    redirect_to hcb_payment_accounts_path, alert: "Failed to load HCB organizations: #{e.message} (#{event_id})"
  end

  rescue_from OAuth2::Error do |e|
    Sentry.capture_exception(e, extra: { user_id: current_user.id, response_body: e.response&.body })
    current_user.hcb_oauth_connection&.destroy
    redirect_to new_hcb_oauth_connection_path, alert: "Your HCB connection expired. Please reconnect."
  end

  def index
    @payment_accounts = current_user.hcb_payment_accounts
  end

  def new
    @organizations = available_organizations
    @payment_account = current_user.hcb_payment_accounts.build
  end

  def create
    org = find_organization(params[:organization_id])
    if org.nil?
      redirect_to new_hcb_payment_account_path, alert: "Organization not found"
      return
    end

    @payment_account = current_user.hcb_payment_accounts.build(
      oauth_connection: current_user.hcb_oauth_connection,
      organization_id: org.id,
      organization_name: org.name,
    )

    if @payment_account.save
      redirect_to hcb_payment_accounts_path, notice: "Payment account created for #{org.name}"
    else
      @organizations = available_organizations
      render :new, status: :unprocessable_entity
    end
  end

  def show
  end

  private

  def require_hcb_connection
    unless current_user.hcb_connected?
      redirect_to new_hcb_oauth_connection_path, alert: "Please link your HCB account first"
    end
  end

  def set_payment_account
    @payment_account = current_user.hcb_payment_accounts.find(params[:id])
  end

  def available_organizations
    current_user.hcb_oauth_connection.organizations.reject do |org|
      HCB::PaymentAccount::BLOCKED_ORGANIZATION_IDS.include?(org.id)
    end
  end

  def find_organization(org_id)
    available_organizations.find { |o| o.id == org_id }
  end
end