12-05-2026 Frontend dev

app/Services/Auth/MagicLinkGenerator.php

@@ -0,0 +1,75 @@
+<?php
+
+namespace App\Services\Auth;
+
+use App\Models\MagicLink;
+use App\Models\PressRelease;
+use App\Models\User;
+use Illuminate\Support\Carbon;
+use Illuminate\Support\Str;
+
+class MagicLinkGenerator
+{
+    /**
+     * @return array{magic_link: MagicLink, plain_token: string, expires_at: Carbon}
+     */
+    public function createLoginLink(User $user, ?string $requestedIp = null, int $ttlMinutes = 15): array
+    {
+        $plainToken = Str::random(64);
+        $tokenHash = hash('sha256', $plainToken);
+        $expiresAt = now()->addMinutes($ttlMinutes);
+
+        MagicLink::query()
+            ->where('user_id', $user->id)
+            ->where('purpose', 'login')
+            ->whereNull('consumed_at')
+            ->update([
+                'consumed_at' => now(),
+                'ip_consumed' => $requestedIp,
+            ]);
+
+        $magicLink = $user->magicLinks()->create([
+            'token_hash' => $tokenHash,
+            'purpose' => 'login',
+            'expires_at' => $expiresAt,
+            'ip_requested' => $requestedIp,
+        ]);
+
+        return [
+            'magic_link' => $magicLink,
+            'plain_token' => $plainToken,
+            'expires_at' => $expiresAt,
+        ];
+    }
+
+    /**
+     * Public read-only share link for a press release. Token holder can view
+     * the press release in any state (draft/review/rejected/published) until
+     * the link expires. Default TTL: 7 days.
+     *
+     * @return array{magic_link: MagicLink, plain_token: string, url: string, expires_at: Carbon}
+     */
+    public function createPressReleaseShareLink(PressRelease $pressRelease, ?User $issuer = null, int $ttlDays = 7): array
+    {
+        $plainToken = Str::random(64);
+        $tokenHash = hash('sha256', $plainToken);
+        $expiresAt = now()->addDays($ttlDays);
+
+        $magicLink = MagicLink::query()->create([
+            'user_id' => $issuer?->id ?? $pressRelease->user_id,
+            'token_hash' => $tokenHash,
+            'purpose' => 'press_release_access',
+            'payload' => [
+                'press_release_id' => $pressRelease->id,
+            ],
+            'expires_at' => $expiresAt,
+        ]);
+
+        return [
+            'magic_link' => $magicLink,
+            'plain_token' => $plainToken,
+            'url' => route('press-releases.preview', ['token' => $plainToken]),
+            'expires_at' => $expiresAt,
+        ];
+    }
+}