Users on the Brand step can type their website URL and click 'Preencher' (Portuguese) / 'Autofill' (English). The backend fetches their homepage, parses standard meta tags, and returns: - name ← og:site_name | title (suffix stripped at ' | ', ' - ') - description ← meta[name=description] | og:description - language ← <html lang> mapped to en / pt-BR / es - logo ← apple-touch-icon | largest link[rel*=icon] | og:image The logo is downloaded, validated (mime whitelist, 2MB max), and attached to the workspace's 'logo' media collection so the avatar updates immediately. Zero LLM calls, zero external APIs. Uses symfony/dom-crawler + symfony/css-selector (newly required) for meta extraction. Everything else (Http client, workspace media, Intervention) was already in the project. Security: - SSRF guardrail: resolves the host, rejects private / loopback / link-local ranges, enforces http(s) scheme on both the initial page fetch and the logo download. - Rate limited at 10 req/min per user via the throttle middleware alias on the route. - Logo content-type must be one of the allowed image mimes; wrong types are silently dropped so users never see broken images. UX: - 'Autofill' button next to the website input, disabled until there is a URL; shows a spinner while running. - If a logo was captured, a small preview appears below the input so users can see what was pulled before saving. - Success and error paths both surface as vue-sonner toasts, with translations in en / pt-BR / es. - Failures leave the form untouched — nothing is destructively overwritten if parsing gave us nothing. Tests (16 new): action-level coverage for happy path, title-suffix fallback, language code normalization across 6 locales, scheme rejection, private-range SSRF rejection, implicit https prefixing, empty sites, upstream errors, and wrong-mime logo rejection. Plus two controller-level tests for the autofill endpoint.
179 lines
5.5 KiB
PHP
179 lines
5.5 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Http\Controllers\App;
|
|
|
|
use App\Actions\Ai\AutofillBrand;
|
|
use App\Enums\SocialAccount\Platform as SocialPlatform;
|
|
use App\Enums\User\Persona;
|
|
use App\Enums\User\Setup;
|
|
use App\Http\Requests\App\Onboarding\StoreBrandRequest;
|
|
use App\Models\User;
|
|
use Illuminate\Http\JsonResponse;
|
|
use Illuminate\Http\RedirectResponse;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Validation\Rule;
|
|
use Inertia\Inertia;
|
|
use Inertia\Response;
|
|
use RuntimeException;
|
|
use Symfony\Component\HttpFoundation\Response as SymfonyResponse;
|
|
|
|
class OnboardingController extends Controller
|
|
{
|
|
public function role(Request $request): Response|RedirectResponse
|
|
{
|
|
$redirect = $this->enforceStep($request->user(), Setup::Role);
|
|
if ($redirect) {
|
|
return $redirect;
|
|
}
|
|
|
|
return Inertia::render('onboarding/Role', [
|
|
'personas' => Persona::toSelectArray(),
|
|
]);
|
|
}
|
|
|
|
public function storeRole(Request $request): RedirectResponse
|
|
{
|
|
$validated = $request->validate([
|
|
'persona' => ['required', Rule::enum(Persona::class)],
|
|
]);
|
|
|
|
$request->user()->update([
|
|
'persona' => data_get($validated, 'persona'),
|
|
'setup' => Setup::Brand,
|
|
]);
|
|
|
|
return redirect()->route('app.onboarding.brand');
|
|
}
|
|
|
|
public function brand(Request $request): Response|RedirectResponse
|
|
{
|
|
$redirect = $this->enforceStep($request->user(), Setup::Brand);
|
|
if ($redirect) {
|
|
return $redirect;
|
|
}
|
|
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
return Inertia::render('onboarding/Brand', [
|
|
'workspace' => [
|
|
'name' => $workspace?->name ?? '',
|
|
'brand_website' => $workspace?->brand_website ?? '',
|
|
'brand_description' => $workspace?->brand_description ?? '',
|
|
'brand_tone' => $workspace?->brand_tone ?? 'professional',
|
|
'brand_voice_notes' => $workspace?->brand_voice_notes ?? '',
|
|
'content_language' => $workspace?->content_language ?? 'en',
|
|
],
|
|
]);
|
|
}
|
|
|
|
public function storeBrand(StoreBrandRequest $request): RedirectResponse
|
|
{
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
if ($workspace) {
|
|
$workspace->update($request->validated());
|
|
}
|
|
|
|
$request->user()->update(['setup' => Setup::Connections]);
|
|
|
|
return redirect()->route('app.onboarding.account');
|
|
}
|
|
|
|
public function skipBrand(Request $request): RedirectResponse
|
|
{
|
|
$request->user()->update(['setup' => Setup::Connections]);
|
|
|
|
return redirect()->route('app.onboarding.account');
|
|
}
|
|
|
|
public function autofillBrand(Request $request, AutofillBrand $autofill): JsonResponse
|
|
{
|
|
$validated = $request->validate([
|
|
'url' => ['required', 'string', 'max:255'],
|
|
]);
|
|
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
if (! $workspace) {
|
|
abort(SymfonyResponse::HTTP_BAD_REQUEST, 'No workspace found.');
|
|
}
|
|
|
|
try {
|
|
$result = $autofill(data_get($validated, 'url'), $workspace);
|
|
} catch (RuntimeException $e) {
|
|
return response()->json(['message' => $e->getMessage()], SymfonyResponse::HTTP_UNPROCESSABLE_ENTITY);
|
|
}
|
|
|
|
$workspace->refresh();
|
|
|
|
return response()->json([
|
|
...$result,
|
|
'logo_url' => $workspace->logo_url,
|
|
'has_logo' => $workspace->has_logo,
|
|
]);
|
|
}
|
|
|
|
public function account(Request $request): Response|RedirectResponse
|
|
{
|
|
$redirect = $this->enforceStep($request->user(), Setup::Connections);
|
|
if ($redirect) {
|
|
return $redirect;
|
|
}
|
|
|
|
$user = $request->user();
|
|
$workspace = $user->currentWorkspace;
|
|
|
|
$platforms = collect();
|
|
|
|
if ($workspace) {
|
|
$connectedAccounts = $workspace->socialAccounts;
|
|
|
|
$platforms = collect(SocialPlatform::enabled())->map(fn ($platform) => [
|
|
'value' => $platform->value,
|
|
'label' => $platform->label(),
|
|
'color' => $platform->color(),
|
|
'connected' => $connectedAccounts->firstWhere('platform', $platform) !== null,
|
|
'account' => $connectedAccounts->firstWhere('platform', $platform),
|
|
])->values();
|
|
}
|
|
|
|
return Inertia::render('onboarding/Account', [
|
|
'platforms' => $platforms,
|
|
'hasWorkspace' => $workspace !== null,
|
|
]);
|
|
}
|
|
|
|
public function storeAccount(Request $request): RedirectResponse
|
|
{
|
|
$request->user()->update(['setup' => Setup::Completed]);
|
|
|
|
if (config('trypost.self_hosted')) {
|
|
session()->flash('flash.banner', __('auth.flash.welcome'));
|
|
session()->flash('flash.bannerStyle', 'success');
|
|
|
|
return redirect()->route('app.calendar');
|
|
}
|
|
|
|
return redirect()->route('app.subscribe');
|
|
}
|
|
|
|
private function enforceStep(User $user, Setup $expectedStep): ?RedirectResponse
|
|
{
|
|
if ($user->setup === $expectedStep) {
|
|
return null;
|
|
}
|
|
|
|
if ($user->setup === Setup::Completed) {
|
|
return redirect()->route('app.calendar');
|
|
}
|
|
|
|
return match ($user->setup) {
|
|
Setup::Role => redirect()->route('app.onboarding.role'),
|
|
Setup::Brand => redirect()->route('app.onboarding.brand'),
|
|
Setup::Connections => redirect()->route('app.onboarding.account'),
|
|
default => redirect()->route('app.onboarding.role'),
|
|
};
|
|
}
|
|
}
|