Refs #6135; ExportsController#upload endpoint

With token-based authentication

1 files changed, 11 insertions, 1 deletions

diff --git a/app/controllers/exports_controller.rb b/app/controllers/exports_controller.rb
index 7ea57341a..36d752347 100644
--- a/app/controllers/exports_controller.rb
+++ b/app/controllers/exports_controller.rb
@@ -2,9 +2,19 @@ class ExportsController < ChouetteController
   include PolicyChecker
   include RansackDateFilter
   include IevInterfaces
-  # skip_before_action :authenticate_user!, only: [:upload]
+  skip_before_action :authenticate_user!, only: [:upload]
   defaults resource_class: Export::Base, collection_name: 'exports', instance_name: 'export'
 
+  def upload
+    if params[:token] == resource.token_upload
+      resource.file = params[:file]
+      resource.save!
+      redirect_to [resource.workbench, resource]
+    else
+      user_not_authorized
+    end
+  end
+
   private
 
   def index_model