Feature: Business logo API for web widget (#674)

Co-authored-by: Pranav Raj Sreepuram <pranavrajs@gmail.com>

app/controllers/api/base_controller.rb

@@ -8,7 +8,7 @@ class Api::BaseController < ApplicationController
   private
 
   def authenticate_by_access_token?
-    request.headers[:api_access_token].present?
+    request.headers[:api_access_token].present? || request.headers[:HTTP_API_ACCESS_TOKEN].present?
   end
 
   def set_conversation

app/controllers/api/v1/accounts/inboxes_controller.rb

@@ -26,6 +26,6 @@ class Api::V1::Accounts::InboxesController < Api::BaseController
   end
 
   def inbox_update_params
-    params.require(:inbox).permit(:enable_auto_assignment)
+    params.require(:inbox).permit(:enable_auto_assignment, :avatar)
   end
 end

app/controllers/concerns/access_token_auth_helper.rb

@@ -5,7 +5,8 @@ module AccessTokenAuthHelper
   }.freeze
 
   def authenticate_access_token!
-    access_token = AccessToken.find_by(token: request.headers[:api_access_token])
+    token = request.headers[:api_access_token] || request.headers[:HTTP_API_ACCESS_TOKEN]
+    access_token = AccessToken.find_by(token: token)
     render_unauthorized('Invalid Access Token') && return unless access_token
 
     token_owner = access_token.owner