- Refactor WorkspacePolicy to use pivot role instead of workspace.user_id - Add manageBilling policy (owner only) to BillingController - Fix ApiKeyController authorization (view → manageTeam for store/destroy) - Fix WorkspaceInviteController using workspace.user_id for owner checks - Fix WorkspaceController settings is_owner using workspace.user_id - Create PostAction enum for UpdatePost/PostController action strings - Create ApiToken\Status enum - Add User::SUBSCRIPTION_NAME constant, replace all hardcoded 'default' - Convert wantsEmailFor to accept NotificationType enum - Convert all $data[] to data_get() across publishers, controllers, jobs - Fix SocialLoginController callback missing try/catch - Fix SocialController::toggleActive missing workspace null check - Fix UpdatePost NPE on meta merge when postPlatform not found - Remove HTML5 required attributes from form inputs - Convert function declarations to arrow functions in Vue components - Replace hardcoded URLs with Wayfinder route helpers - Replace new Date() with dayjs - Add 16 new test files covering policies, authorization, publishing
136 lines
4.6 KiB
PHP
136 lines
4.6 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Http\Controllers\Auth;
|
|
|
|
use App\Enums\SocialAccount\Platform as SocialPlatform;
|
|
use App\Enums\SocialAccount\Status;
|
|
use Illuminate\Http\RedirectResponse;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Http;
|
|
use Illuminate\Support\Facades\Log;
|
|
use Illuminate\View\View;
|
|
use Inertia\Inertia;
|
|
use Inertia\Response;
|
|
|
|
class BlueskyController extends SocialController
|
|
{
|
|
protected SocialPlatform $platform = SocialPlatform::Bluesky;
|
|
|
|
public function connect(Request $request): Response|RedirectResponse
|
|
{
|
|
$this->ensurePlatformEnabled();
|
|
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
if (! $workspace) {
|
|
return redirect()->route('app.workspaces.create');
|
|
}
|
|
|
|
$this->authorize('manageAccounts', $workspace);
|
|
|
|
return Inertia::render('accounts/BlueskyConnect', [
|
|
'errors' => session('errors')?->getBag('default')?->toArray() ?? [],
|
|
]);
|
|
}
|
|
|
|
public function store(Request $request): View|RedirectResponse
|
|
{
|
|
$this->ensurePlatformEnabled();
|
|
|
|
$request->validate([
|
|
'identifier' => 'required|string',
|
|
'password' => 'required|string|min:3',
|
|
]);
|
|
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
if (! $workspace) {
|
|
return redirect()->route('app.workspaces.create');
|
|
}
|
|
|
|
$this->authorize('manageAccounts', $workspace);
|
|
|
|
$service = 'https://bsky.social';
|
|
|
|
try {
|
|
// Authenticate with Bluesky
|
|
$response = Http::post("{$service}/xrpc/com.atproto.server.createSession", [
|
|
'identifier' => $request->identifier,
|
|
'password' => $request->password,
|
|
]);
|
|
|
|
if ($response->failed()) {
|
|
Log::error('Bluesky authentication failed', [
|
|
'status' => $response->status(),
|
|
'body' => $response->body(),
|
|
]);
|
|
|
|
$errorMessage = 'Invalid credentials';
|
|
$body = $response->json();
|
|
if (isset($body['message'])) {
|
|
$errorMessage = $body['message'];
|
|
}
|
|
|
|
return back()->withErrors(['password' => $errorMessage]);
|
|
}
|
|
|
|
$data = $response->json();
|
|
|
|
// Get profile
|
|
$profileResponse = Http::withToken(data_get($data, 'accessJwt'))
|
|
->get("{$service}/xrpc/app.bsky.actor.getProfile", [
|
|
'actor' => data_get($data, 'did'),
|
|
]);
|
|
|
|
$profile = $profileResponse->successful() ? $profileResponse->json() : [];
|
|
|
|
// Check existing
|
|
$existingAccount = $workspace->socialAccounts()
|
|
->where('platform', $this->platform->value)
|
|
->first();
|
|
|
|
if ($existingAccount && ! $existingAccount->isDisconnected()) {
|
|
return back()->withErrors(['identifier' => 'Bluesky is already connected.']);
|
|
}
|
|
|
|
$avatarPath = data_get($profile, 'avatar') ? uploadFromUrl(data_get($profile, 'avatar')) : null;
|
|
|
|
$accountData = [
|
|
'platform' => $this->platform->value,
|
|
'platform_user_id' => data_get($data, 'did'),
|
|
'username' => data_get($data, 'handle'),
|
|
'display_name' => data_get($profile, 'displayName', data_get($data, 'handle')),
|
|
'avatar_url' => $avatarPath,
|
|
'access_token' => data_get($data, 'accessJwt'),
|
|
'refresh_token' => data_get($data, 'refreshJwt'),
|
|
'token_expires_at' => now()->addHours(2),
|
|
'meta' => [
|
|
'service' => $service,
|
|
'identifier' => $request->identifier,
|
|
'password' => encrypt($request->password),
|
|
],
|
|
];
|
|
|
|
if ($existingAccount) {
|
|
$existingAccount->update($accountData);
|
|
$existingAccount->markAsConnected();
|
|
|
|
return $this->popupCallback(true, 'Bluesky account reconnected!', $this->platform->value);
|
|
}
|
|
|
|
$accountData['status'] = Status::Connected;
|
|
$workspace->socialAccounts()->create($accountData);
|
|
|
|
return $this->popupCallback(true, 'Bluesky account connected!', $this->platform->value);
|
|
} catch (\Exception $e) {
|
|
Log::error('Bluesky connection error', [
|
|
'error' => $e->getMessage(),
|
|
'trace' => $e->getTraceAsString(),
|
|
]);
|
|
|
|
return back()->withErrors(['password' => 'Error connecting to Bluesky. Please try again.']);
|
|
}
|
|
}
|
|
}
|