mirror of
https://github.com/solidtime-io/solidtime.git
synced 2026-10-08 13:53:17 +01:00
f23ed53059
Scramble 0.13 moved the collected resource type of resource collections to a different template slot, which broke the custom paginated resource collection extension and the API docs export. Scramble now infers paginated responses natively, so the extension, the marker interface and the @return annotations that overrode the inference are removed. Scramble 0.13 also documents closure routes, so the API fallback routes are moved to a controller that is excluded from the docs. Add a test that exports the API docs.
103 lines
3.4 KiB
PHP
103 lines
3.4 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Http\Controllers\Api\V1;
|
|
|
|
use App\Exceptions\Api\InvitationForTheEmailAlreadyExistsApiException;
|
|
use App\Exceptions\Api\UserIsAlreadyMemberOfOrganizationApiException;
|
|
use App\Http\Requests\V1\Invitation\InvitationIndexRequest;
|
|
use App\Http\Requests\V1\Invitation\InvitationStoreRequest;
|
|
use App\Http\Resources\V1\Invitation\InvitationCollection;
|
|
use App\Models\Organization;
|
|
use App\Models\OrganizationInvitation;
|
|
use App\Service\InvitationService;
|
|
use App\Service\OrganizationInvitationService;
|
|
use Illuminate\Auth\Access\AuthorizationException;
|
|
use Illuminate\Http\JsonResponse;
|
|
|
|
class InvitationController extends Controller
|
|
{
|
|
protected function checkPermission(Organization $organization, string $permission, ?OrganizationInvitation $organizationInvitation = null): void
|
|
{
|
|
parent::checkPermission($organization, $permission);
|
|
if ($organizationInvitation !== null && $organizationInvitation->organization_id !== $organization->id) {
|
|
throw new AuthorizationException('Invitation does not belong to organization');
|
|
}
|
|
}
|
|
|
|
/**
|
|
* List all invitations of an organization
|
|
*
|
|
* @throws AuthorizationException
|
|
*
|
|
* @operationId getInvitations
|
|
*/
|
|
public function index(Organization $organization, InvitationIndexRequest $request): InvitationCollection
|
|
{
|
|
$this->checkPermission($organization, 'invitations:view');
|
|
|
|
$invitations = $organization->organizationInvitations()
|
|
->orderBy('created_at', 'desc')
|
|
->orderBy('id')
|
|
->paginate(config('app.pagination_per_page_default'));
|
|
|
|
return InvitationCollection::make($invitations);
|
|
}
|
|
|
|
/**
|
|
* Invite a user to the organization
|
|
*
|
|
* @throws AuthorizationException
|
|
* @throws UserIsAlreadyMemberOfOrganizationApiException
|
|
* @throws InvitationForTheEmailAlreadyExistsApiException
|
|
*
|
|
* @operationId invite
|
|
*/
|
|
public function store(Organization $organization, InvitationStoreRequest $request, InvitationService $invitationService): JsonResponse
|
|
{
|
|
$this->checkPermission($organization, 'invitations:create');
|
|
|
|
$email = $request->getEmail();
|
|
$role = $request->getRole();
|
|
|
|
$invitationService->inviteUser($organization, $email, $role, $this->user());
|
|
|
|
return response()->json(null, 204);
|
|
}
|
|
|
|
/**
|
|
* Resend email for a pending invitation
|
|
*
|
|
* @throws AuthorizationException
|
|
*
|
|
* @operationId resendInvitationEmail
|
|
*/
|
|
public function resend(Organization $organization, OrganizationInvitation $invitation, OrganizationInvitationService $organizationInvitationService): JsonResponse
|
|
{
|
|
$this->checkPermission($organization, 'invitations:resend', $invitation);
|
|
|
|
$organizationInvitationService->resend($invitation);
|
|
|
|
return response()->json(null, 204);
|
|
}
|
|
|
|
/**
|
|
* Remove a pending invitation
|
|
*
|
|
* This revokes the invitation: the link in the invitation email stops working. Find the invitation ID with `GET /organizations/{organization}/invitations`.
|
|
*
|
|
* @throws AuthorizationException
|
|
*
|
|
* @operationId removeInvitation
|
|
*/
|
|
public function destroy(Organization $organization, OrganizationInvitation $invitation): JsonResponse
|
|
{
|
|
$this->checkPermission($organization, 'invitations:remove', $invitation);
|
|
|
|
$invitation->delete();
|
|
|
|
return response()->json(null, 204);
|
|
}
|
|
}
|