Initial Laravel API import

- Complete GGZ Ecademy Laravel backend application
- RESTful API for learning products, members, filters
- Authentication and authorization system
- Database migrations and seeders
- Custom CRUD generator commands
- Email notification system
- Integration with frontend applications

app/Http/Controllers/SummaryController.php

@@ -0,0 +1,148 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Mail\MemberChanges;
+use App\Services\MemberService;
+use App\Services\SummaryService;
+use App\Services\UserService;
+use Illuminate\Support\Facades\Mail;
+use App\Http\Requests\Member\SummaryStore;
+
+class SummaryController extends Controller
+{
+
+    private $summaryService;
+    private $memberService;
+
+    public function __construct(
+        MemberService $memberService,
+        UserService $userService,
+        SummaryService $summaryService
+    ) {
+        $this->memberService = $memberService;
+        $this->summaryService = $summaryService;
+        $this->userService = $userService;
+        $this->middleware('auth:sanctum');
+    }
+
+    public function index()
+    {
+        $summaries = $this->summaryService->getAll();
+
+        return response()->json($summaries, 201);
+    }
+
+    public function store(SummaryStore $request)
+    {
+        $member = $this->memberService->get($request->member_id);
+
+        if (!$member) {
+            return response()->json(['message' => 'Member not found.'], 404);
+        }
+
+        $isSuperAdmin = auth()->user()->hasRole('super_admin');
+        $isAdmin = auth()->user()->hasRole('admin');
+        $isSuperAdminOrAdmin = $isSuperAdmin || $isAdmin;
+        $isUserDelegated = $member->user_id === auth()->user()->id;
+
+        $isAppliedToAll = $request->has('toAll') ? true : false;
+
+        if (!$isSuperAdminOrAdmin && !$isUserDelegated) {
+            return response()->json(['message' => 'You have no rights to do this'], 401);
+        }
+
+        $request_data = $request->validated();
+
+        $is_edit_mode = isset($request_data['id']);
+        $is_create_mode = !$is_edit_mode;
+
+        $summary = null;
+
+        if ($is_edit_mode) {
+
+            if ($isSuperAdminOrAdmin) {
+                $request_data['revisor_id'] = auth()->user()->id;
+                $request_data['approved_at'] = now();
+            }
+
+            $summary = $this->summaryService->get($request_data['id']);
+            $is_already_approved = $summary->approved_at;
+
+            if ($isUserDelegated && !$isSuperAdminOrAdmin && $is_already_approved) {
+                return response()->json(['message' => 'You have no rights to do this'], 401);
+            }
+        }
+
+        if ($isAppliedToAll && $is_create_mode) {
+
+            if ($isUserDelegated && !$isSuperAdminOrAdmin) {
+                return response()->json(['message' => 'You have no rights to do this'], 401);
+            }
+
+            $members = $this->memberService->with(['summaries']);
+
+            //  Store for all existing members
+            foreach ($members as $member) {
+
+                // If the member doesn't have that year set, store the record
+                if (!$member->summaries->contains('year', $request_data['year'])) {
+
+                    $request_data['member_id'] = $member['id'];
+
+                    // Gives back the summary to update the page
+                    if ($request_data['member_id'] === $member['user_id']) {
+                        $summary = $this->summaryService->save($request_data);
+                    } else {
+                        $this->summaryService->save($request_data);
+                    }
+                }
+            }
+        } else {
+            $summary = $this->summaryService->save($request_data);
+        }
+
+        // If is a user delegated to make changes, send a mail
+        if ($isUserDelegated) {
+
+            // Get super admins & admins, send them an email
+            $super_admins_and_admins = $this->userService->getAllWithRoles(['super_admin', 'admin']);
+
+            $notification = (object) array();
+            $notification->member = $member;
+            $notification->subject = 'Er zijn wijzigingen doorgevoerd';
+            $notification->message = sprintf(
+                'De volgende wijzigingen kunnen worden beoordeeld, voor het volgende lid: <em>%s</em>',
+                $member->informal_name,
+            );
+
+            // Add emails to queue | * php artisan queue:listen
+            foreach ($super_admins_and_admins as $user) {
+                Mail::to($user)->send(new MemberChanges($notification));
+            }
+        }
+
+        return response()->json($summary, 201);
+    }
+
+    public function show($id)
+    {
+        $summary = $this->summaryService->get($id);
+
+        return response()->json($summary);
+    }
+
+    public function destroy($id)
+    {
+        $isSuperAdmin = auth()->user()->hasRole('super_admin');
+        $isAdmin = auth()->user()->hasRole('admin');
+        $isSuperAdminOrAdmin = $isSuperAdmin || $isAdmin;
+
+        if (!$isSuperAdminOrAdmin) {
+            return response()->json(['message' => 'You have no rights to do this'], 401);
+        }
+
+        $this->summaryService->delete($id);
+        return response()->json(null, 204);
+    }
+}