You would need an Order model that belongs to the user. Once the order has been placed, you, as an admin, could query all of the orders and their statuses. As a user, they should be able to query just their orders since there is a relationship to the user.
Using a turbo_frame_tag will allow us to make a request to the Rails server and replace the turbo_frame_tag with something else. In this case, we needed to create an input box with a value of the iframe element so it can be embedded. Since we're creating a token for the embedded link, we needed to get some response from the server with this new record's token.