use webhook urls instead of encrypted configs

db/migrate/20241028162000_add_secret_to_webhook_urls.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class AddSecretToWebhookUrls < ActiveRecord::Migration[7.2]
+  def change
+    add_column :webhook_urls, :secret, :text
+  end
+end

db/migrate/20241029192232_populate_webhook_urls.rb

@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+
+class PopulateWebhookUrls < ActiveRecord::Migration[7.2]
+  disable_ddl_transaction
+
+  class MigrationWebhookUrl < ApplicationRecord
+    self.table_name = 'webhook_urls'
+
+    serialize :events, coder: JSON
+    serialize :secret, coder: JSON
+    encrypts :url, :secret
+
+    before_validation -> { self.sha1 = Digest::SHA1.hexdigest(url) }
+  end
+
+  class MigrationEncryptedConfig < ApplicationRecord
+    self.table_name = 'encrypted_configs'
+
+    encrypts :value
+    serialize :value, coder: JSON
+  end
+
+  class MigrationAccountConfig < ApplicationRecord
+    self.table_name = 'account_configs'
+
+    serialize :value, coder: JSON
+  end
+
+  def up
+    MigrationEncryptedConfig.joins('INNER JOIN accounts a ON a.id = encrypted_configs.account_id')
+                            .where(key: 'webhook_url')
+                            .find_each do |config|
+      webhook_url = MigrationWebhookUrl.find_or_initialize_by(account_id: config.account_id, url: config.value)
+      webhook_url.secret = MigrationEncryptedConfig.find_by(account_id: config.account_id, key: 'webhook_secret')&.value
+
+      preferences = MigrationAccountConfig.find_by(account_id: config.account_id,
+                                                   key: 'webhook_preferences')&.value.to_h
+      events = %w[form.viewed form.started form.completed form.declined].reject { |event| preferences[event] == false }
+      events += preferences.compact_blank.keys
+
+      webhook_url.events = events.uniq
+
+      webhook_url.save!
+    end
+  end
+
+  def down
+    nil
+  end
+end

db/schema.rb

@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema[7.2].define(version: 2024_10_26_161207) do
+ActiveRecord::Schema[7.2].define(version: 2024_10_29_192232) do
   # These are extensions that must be enabled in order to support this database
   enable_extension "plpgsql"
 
@@ -367,6 +367,7 @@ ActiveRecord::Schema[7.2].define(version: 2024_10_26_161207) do
     t.string "sha1", null: false
     t.datetime "created_at", null: false
     t.datetime "updated_at", null: false
+    t.text "secret"
     t.index ["account_id"], name: "index_webhook_urls_on_account_id"
     t.index ["sha1"], name: "index_webhook_urls_on_sha1"
   end