trypost/app/Http/Controllers/App/Settings/ProfileController.php
Paulo Castellano 74c6442728 refactor: code review fixes — policies, enums, data_get, tests
- Refactor WorkspacePolicy to use pivot role instead of workspace.user_id
- Add manageBilling policy (owner only) to BillingController
- Fix ApiKeyController authorization (view → manageTeam for store/destroy)
- Fix WorkspaceInviteController using workspace.user_id for owner checks
- Fix WorkspaceController settings is_owner using workspace.user_id
- Create PostAction enum for UpdatePost/PostController action strings
- Create ApiToken\Status enum
- Add User::SUBSCRIPTION_NAME constant, replace all hardcoded 'default'
- Convert wantsEmailFor to accept NotificationType enum
- Convert all $data[] to data_get() across publishers, controllers, jobs
- Fix SocialLoginController callback missing try/catch
- Fix SocialController::toggleActive missing workspace null check
- Fix UpdatePost NPE on meta merge when postPlatform not found
- Remove HTML5 required attributes from form inputs
- Convert function declarations to arrow functions in Vue components
- Replace hardcoded URLs with Wayfinder route helpers
- Replace new Date() with dayjs
- Add 16 new test files covering policies, authorization, publishing
2026-03-31 00:40:18 -03:00

131 lines
4.2 KiB
PHP

<?php
declare(strict_types=1);
namespace App\Http\Controllers\App\Settings;
use App\Enums\UserWorkspace\Role;
use App\Http\Controllers\Controller;
use App\Http\Requests\App\Settings\ProfileDeleteRequest;
use App\Http\Requests\App\Settings\ProfileUpdateRequest;
use App\Models\User;
use Illuminate\Contracts\Auth\MustVerifyEmail;
use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\DB;
use Inertia\Inertia;
use Inertia\Response;
class ProfileController extends Controller
{
public function edit(Request $request): Response
{
return Inertia::render('settings/Profile', [
'mustVerifyEmail' => $request->user() instanceof MustVerifyEmail,
'status' => $request->session()->get('status'),
]);
}
public function update(ProfileUpdateRequest $request): RedirectResponse
{
$request->user()->fill($request->validated());
if ($request->user()->isDirty('email')) {
$request->user()->email_verified_at = null;
}
$request->user()->save();
session()->flash('flash.banner', __('settings.flash.profile_updated'));
session()->flash('flash.bannerStyle', 'success');
return to_route('app.profile.edit');
}
public function uploadPhoto(Request $request): RedirectResponse
{
$request->validate([
'photo' => ['required', 'image', 'max:2048'],
]);
$user = $request->user();
$user->clearMediaCollection('avatar');
$user->addMedia($request->file('photo'), 'avatar');
$user->unsetRelation('media');
session()->flash('flash.banner', __('settings.flash.photo_updated'));
session()->flash('flash.bannerStyle', 'success');
return back();
}
public function deletePhoto(Request $request): RedirectResponse
{
$user = $request->user();
$user->clearMediaCollection('avatar');
$user->unsetRelation('media');
session()->flash('flash.banner', __('settings.flash.photo_deleted'));
session()->flash('flash.bannerStyle', 'success');
return back();
}
public function updateLanguage(Request $request): RedirectResponse
{
$request->validate([
'locale' => ['required', 'string', 'in:'.implode(',', array_keys(config('languages.available')))],
]);
session()->flash('flash.banner', __('settings.flash.language_updated'));
session()->flash('flash.bannerStyle', 'success');
return back()->withCookie(
cookie()->forever('locale', $request->locale, '/', config('session.domain'))
);
}
public function destroy(ProfileDeleteRequest $request): RedirectResponse
{
$user = $request->user();
DB::transaction(function () use ($user) {
if ($user->subscribed(User::SUBSCRIPTION_NAME)) {
$user->subscription(User::SUBSCRIPTION_NAME)->cancelNow();
}
$user->subscriptions()->delete();
$user->update(['current_workspace_id' => null]);
$ownedWorkspaces = $user->workspaces()->wherePivot('role', Role::Owner->value)->get();
foreach ($ownedWorkspaces as $workspace) {
foreach ($workspace->members as $member) {
if ($member->id !== $user->id && $member->current_workspace_id === $workspace->id) {
$otherWorkspace = $member->workspaces()
->where('workspaces.id', '!=', $workspace->id)
->first();
$member->update(['current_workspace_id' => $otherWorkspace?->id]);
}
}
$workspace->posts()->delete();
$workspace->socialAccounts()->delete();
$workspace->hashtags()->delete();
$workspace->labels()->delete();
$workspace->invites()->delete();
$workspace->members()->detach();
$workspace->delete();
}
$user->workspaces()->detach();
});
Auth::logout();
$user->delete();
$request->session()->invalidate();
$request->session()->regenerateToken();
return redirect('/');
}
}