Add endpoint for Profile API authorisation check

Author: mwtrew

app/controllers/api/profile_auth_check_controller.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Api
+  class ProfileAuthCheckController < ApiController
+    def index
+      authorised = ProfileApiClient.check_auth(token: current_user&.token)
+
+      render json: { can_use_profile_api: authorised }, status: :ok
+    rescue ProfileApiClient::UnauthorizedError
+      render json: { can_use_profile_api: false }, status: :ok
+    end
+  end
+end

config/routes.rb

@@ -92,6 +92,8 @@
     post '/google/auth/exchange-code', to: 'google_auth#exchange_code', defaults: { format: :json }
 
     resources :features, only: %i[index]
+
+    resources :profile_auth_check, only: %i[index]
   end
 
   resource :github_webhooks, only: :create, defaults: { formats: :json }

lib/profile_api_client.rb

@@ -36,12 +36,21 @@ def initialize(response)
       @response_status = response.status
       @response_headers = response.headers
       @response_body = response.body
-
       super("Unexpected response from Profile API (status code #{response.status})")
     end
   end
 
   class << self
+    def check_auth(token:)
+      return true if ENV['BYPASS_OAUTH'].present?
+
+      response = connection(token).get('/api/v1/access')
+
+      response.status == 200
+    rescue Faraday::BadRequestError, Faraday::UnauthorizedError
+      false
+    end
+
     def create_school(token:, id:, code:)
       return { 'id' => id, 'schoolCode' => code } if ENV['BYPASS_OAUTH'].present?