Kevin Adametz
6250b0bab4
- Neue PM-Bilder/Anhänge liegen auf der privaten local-Disk; Auslieferung über kontrollierte Media-Routen mit gemeinsamer Zugriffslogik (AuthorizesPressReleaseMediaAccess). Öffentliche Medien werden aus den geladenen Modellen ermittelt (weniger Queries) und länger gecacht. - Anonyme Token-Vorschau lädt Bilder über temporär signierte URLs (Fix#5). - API-Resource baut Variant-URLs über die Media-Route statt /storage (Fix#4). Storage-Schicht prüft zusätzlich den serverseitigen MIME-Type (M5). - press-releases:privatize-media migriert Bestandsmedien. Deployment: einmalig `php artisan press-releases:privatize-media` ausführen. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
39 lines
1.4 KiB
PHP
39 lines
1.4 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Web;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Http\Controllers\Web\Concerns\AuthorizesPressReleaseMediaAccess;
|
|
use App\Models\PressRelease;
|
|
use App\Models\PressReleaseImage;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Storage;
|
|
use Symfony\Component\HttpFoundation\StreamedResponse;
|
|
|
|
class PressReleaseImageMediaController extends Controller
|
|
{
|
|
use AuthorizesPressReleaseMediaAccess;
|
|
|
|
public function __invoke(Request $request, int $image, ?string $variant = null): StreamedResponse
|
|
{
|
|
$image = PressReleaseImage::query()
|
|
->with(['pressRelease' => fn ($query) => $query
|
|
->withoutGlobalScopes()
|
|
->with(['company' => fn ($company) => $company->withoutGlobalScopes()])])
|
|
->findOrFail($image);
|
|
$pressRelease = $image->pressRelease;
|
|
|
|
abort_unless($pressRelease instanceof PressRelease, 404);
|
|
$isPublic = $this->pressReleaseMediaIsPublic($pressRelease);
|
|
$this->authorizePressReleaseMediaAccess($request, $pressRelease, $isPublic);
|
|
|
|
$path = $image->pathForVariant($variant);
|
|
|
|
abort_unless(is_string($path) && filled($path), 404);
|
|
|
|
return Storage::disk($image->disk)->response($path, headers: [
|
|
'Cache-Control' => $this->mediaCacheControl($isPublic),
|
|
'X-Content-Type-Options' => 'nosniff',
|
|
]);
|
|
}
|
|
}
|