2026-03-29 22:24:28 +00:00
|
|
|
<?php
|
|
|
|
|
|
|
|
|
|
declare(strict_types=1);
|
|
|
|
|
|
|
|
|
|
namespace App\Http\Controllers\App;
|
|
|
|
|
|
|
|
|
|
use App\Actions\Invite\CreateInvite;
|
|
|
|
|
use App\Actions\Invite\DeleteInvite;
|
|
|
|
|
use App\Actions\Invite\RemoveMember;
|
|
|
|
|
use App\Enums\UserWorkspace\Role as WorkspaceRole;
|
refactor: organize middleware/requests into App/ subdirs, add Resources, fix auth routes
- Move middleware to App/ subdir (HandleInertiaRequests, HandleAppearance,
EnsureSubscribed, EnsureUserSetupIsComplete) matching Sendkit pattern
- Move all Form Requests into organized subdirs (App/Post, App/Workspace,
App/Media, App/Invite, App/Settings, App/Auth)
- Create AuthUserResource and AuthWorkspaceResource for HandleInertiaRequests
shared data (role inside currentWorkspace, matching Sendkit pattern)
- Split auth.php into 3 route groups (no middleware, guest, auth) matching
Sendkit pattern exactly
- Fix UserFactory to include all nullable attributes (current_workspace_id,
stripe_id, pm_type, pm_last_four, trial_ends_at)
- Fix SocialAccountResource (display_name not name)
- Update frontend for new auth prop structure
- 702 tests passing (2 pre-existing Mastodon failures)
2026-03-30 00:13:30 +00:00
|
|
|
use App\Http\Requests\App\Invite\StoreWorkspaceInviteRequest;
|
2026-03-29 22:24:28 +00:00
|
|
|
use App\Models\WorkspaceInvite;
|
|
|
|
|
use Illuminate\Http\RedirectResponse;
|
|
|
|
|
use Illuminate\Http\Request;
|
|
|
|
|
use Inertia\Inertia;
|
|
|
|
|
use Inertia\Response;
|
|
|
|
|
|
|
|
|
|
class WorkspaceInviteController extends Controller
|
|
|
|
|
{
|
|
|
|
|
public function index(Request $request): Response|RedirectResponse
|
|
|
|
|
{
|
|
|
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
|
|
|
|
|
|
if (! $workspace) {
|
|
|
|
|
return redirect()->route('app.workspaces.create');
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
$this->authorize('manageTeam', $workspace);
|
|
|
|
|
|
|
|
|
|
return Inertia::render('settings/Members', [
|
|
|
|
|
'workspace' => $workspace,
|
|
|
|
|
'invites' => $workspace->invites()
|
|
|
|
|
->latest()
|
|
|
|
|
->get(),
|
|
|
|
|
'members' => $workspace->members()
|
|
|
|
|
->where('user_id', '!=', $workspace->user_id)
|
|
|
|
|
->get()
|
|
|
|
|
->map(fn ($member) => [
|
|
|
|
|
'id' => $member->id,
|
|
|
|
|
'name' => $member->name,
|
|
|
|
|
'email' => $member->email,
|
|
|
|
|
'role' => $member->pivot->role,
|
|
|
|
|
]),
|
|
|
|
|
'owner' => [
|
|
|
|
|
'id' => $workspace->owner->id,
|
|
|
|
|
'name' => $workspace->owner->name,
|
|
|
|
|
'email' => $workspace->owner->email,
|
|
|
|
|
'role' => WorkspaceRole::Owner->value,
|
|
|
|
|
],
|
|
|
|
|
'roles' => collect(WorkspaceRole::cases())
|
|
|
|
|
->filter(fn ($role) => $role !== WorkspaceRole::Owner)
|
|
|
|
|
->map(fn ($role) => [
|
|
|
|
|
'value' => $role->value,
|
|
|
|
|
'label' => $role->label(),
|
|
|
|
|
])->values(),
|
|
|
|
|
]);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function store(StoreWorkspaceInviteRequest $request): RedirectResponse
|
|
|
|
|
{
|
|
|
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
|
|
|
|
|
|
if (! $workspace) {
|
|
|
|
|
return redirect()->route('app.workspaces.create');
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
$this->authorize('manageTeam', $workspace);
|
|
|
|
|
|
|
|
|
|
$existingInvite = $workspace->invites()
|
|
|
|
|
->where('email', $request->email)
|
|
|
|
|
->first();
|
|
|
|
|
|
|
|
|
|
if ($existingInvite) {
|
|
|
|
|
return back()->withErrors([
|
|
|
|
|
'email' => 'An invite already exists for this email.',
|
|
|
|
|
]);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if ($workspace->members()->where('email', $request->email)->exists()) {
|
|
|
|
|
return back()->withErrors([
|
|
|
|
|
'email' => 'This user is already a member of the workspace.',
|
|
|
|
|
]);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
CreateInvite::execute($workspace, $request->validated());
|
|
|
|
|
|
|
|
|
|
session()->flash('flash.banner', __('settings.members.flash.invite_sent'));
|
|
|
|
|
session()->flash('flash.bannerStyle', 'success');
|
|
|
|
|
|
|
|
|
|
return back();
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function destroy(Request $request, WorkspaceInvite $invite): RedirectResponse
|
|
|
|
|
{
|
|
|
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
|
|
|
|
|
|
if (! $workspace) {
|
|
|
|
|
return redirect()->route('app.workspaces.create');
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
$this->authorize('manageTeam', $workspace);
|
|
|
|
|
|
|
|
|
|
if ($invite->workspace_id !== $workspace->id) {
|
|
|
|
|
abort(404);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
DeleteInvite::execute($invite);
|
|
|
|
|
|
|
|
|
|
session()->flash('flash.banner', __('settings.members.flash.invite_deleted'));
|
|
|
|
|
session()->flash('flash.bannerStyle', 'success');
|
|
|
|
|
|
|
|
|
|
return back();
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function removeMember(Request $request, string $userId): RedirectResponse
|
|
|
|
|
{
|
|
|
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
|
|
|
|
|
|
if (! $workspace) {
|
|
|
|
|
return redirect()->route('app.workspaces.create');
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
$this->authorize('manageTeam', $workspace);
|
|
|
|
|
|
|
|
|
|
if ($workspace->user_id === $userId) {
|
|
|
|
|
return back()->withErrors(['member' => 'Cannot remove the workspace owner.']);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
RemoveMember::execute($workspace, $userId);
|
|
|
|
|
|
|
|
|
|
session()->flash('flash.banner', __('settings.members.flash.member_removed'));
|
|
|
|
|
session()->flash('flash.bannerStyle', 'success');
|
|
|
|
|
|
|
|
|
|
return back();
|
|
|
|
|
}
|
|
|
|
|
}
|