use webhook urls instead of encrypted configs

db/migrate/20241028162000_add_secret_to_webhook_urls.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class AddSecretToWebhookUrls < ActiveRecord::Migration[7.2]
+  def change
+    add_column :webhook_urls, :secret, :text
+  end
+end

db/migrate/20241029192232_populate_webhook_urls.rb

@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+
+class PopulateWebhookUrls < ActiveRecord::Migration[7.2]
+  disable_ddl_transaction
+
+  class MigrationWebhookUrl < ApplicationRecord
+    self.table_name = 'webhook_urls'
+
+    serialize :events, coder: JSON
+    serialize :secret, coder: JSON
+    encrypts :url, :secret
+
+    before_validation -> { self.sha1 = Digest::SHA1.hexdigest(url) }
+  end
+
+  class MigrationEncryptedConfig < ApplicationRecord
+    self.table_name = 'encrypted_configs'
+
+    encrypts :value
+    serialize :value, coder: JSON
+  end
+
+  class MigrationAccountConfig < ApplicationRecord
+    self.table_name = 'account_configs'
+
+    serialize :value, coder: JSON
+  end
+
+  def up
+    MigrationEncryptedConfig.joins('INNER JOIN accounts a ON a.id = encrypted_configs.account_id')
+                            .where(key: 'webhook_url')
+                            .find_each do |config|
+      webhook_url = MigrationWebhookUrl.find_or_initialize_by(account_id: config.account_id, url: config.value)
+      webhook_url.secret = MigrationEncryptedConfig.find_by(account_id: config.account_id, key: 'webhook_secret')&.value
+
+      preferences = MigrationAccountConfig.find_by(account_id: config.account_id,
+                                                   key: 'webhook_preferences')&.value.to_h
+      events = %w[form.viewed form.started form.completed form.declined].reject { |event| preferences[event] == false }
+      events += preferences.compact_blank.keys
+
+      webhook_url.events = events.uniq
+
+      webhook_url.save!
+    end
+  end
+
+  def down
+    nil
+  end
+end