trypost/app/Http/Controllers/Api/ApiKeyController.php
Paulo Castellano 8689e54e55 refactor: restructure to Actions, subdomain routes (app/api), API tokens
- Extract business logic from controllers into Action classes:
  Post/, Workspace/, Hashtag/, Label/, Invite/, ApiKey/
- Create subdomain routing: app.trypost.test (Inertia dashboard),
  api.trypost.test (REST API with token auth)
- Add ApiToken model with tp_ prefix, token_lookup/hash auth
- Add AuthenticateApiToken middleware for API authentication
- Create Api controllers with JSON Resources for all entities
- Create App controllers that use Actions + Inertia responses
- Organize Form Requests into Api/ and App/ directories
- Add api_tokens migration
- Update all route names with app. prefix
- Update all tests to use new route names (684 passing)
2026-03-29 19:24:28 -03:00

46 lines
1.4 KiB
PHP

<?php
declare(strict_types=1);
namespace App\Http\Controllers\Api;
use App\Actions\ApiKey\CreateApiKey;
use App\Actions\ApiKey\DeleteApiKey;
use App\Http\Requests\Api\ApiKey\StoreApiKeyRequest;
use App\Http\Resources\Api\ApiKeyResource;
use App\Models\ApiToken;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\Request;
use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
use Symfony\Component\HttpFoundation\Response;
class ApiKeyController extends Controller
{
public function index(Request $request): AnonymousResourceCollection
{
$apiKeys = $request->workspace->apiTokens()->latest()->get();
return ApiKeyResource::collection($apiKeys);
}
public function store(StoreApiKeyRequest $request): JsonResponse
{
$result = CreateApiKey::execute($request->workspace, $request->validated());
return response()->json([
'token' => new ApiKeyResource(data_get($result, 'token')),
'plain_token' => data_get($result, 'plain_token'),
], Response::HTTP_CREATED);
}
public function destroy(Request $request, ApiToken $apiToken): JsonResponse
{
if ($apiToken->workspace_id !== $request->workspace->id) {
abort(Response::HTTP_NOT_FOUND);
}
DeleteApiKey::execute($apiToken);
return response()->json(null, Response::HTTP_NO_CONTENT);
}
}