Kevin Adametz
6250b0bab4
- Neue PM-Bilder/Anhänge liegen auf der privaten local-Disk; Auslieferung über kontrollierte Media-Routen mit gemeinsamer Zugriffslogik (AuthorizesPressReleaseMediaAccess). Öffentliche Medien werden aus den geladenen Modellen ermittelt (weniger Queries) und länger gecacht. - Anonyme Token-Vorschau lädt Bilder über temporär signierte URLs (Fix#5). - API-Resource baut Variant-URLs über die Media-Route statt /storage (Fix#4). Storage-Schicht prüft zusätzlich den serverseitigen MIME-Type (M5). - press-releases:privatize-media migriert Bestandsmedien. Deployment: einmalig `php artisan press-releases:privatize-media` ausführen. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
77 lines
3 KiB
PHP
77 lines
3 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api\Legacy;
|
|
|
|
use App\Enums\AiImageDeclaration;
|
|
use App\Http\Controllers\Controller;
|
|
use App\Models\PressRelease;
|
|
use App\Services\Image\ImageService;
|
|
use Illuminate\Http\JsonResponse;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Validation\ValidationException;
|
|
use RuntimeException;
|
|
|
|
/**
|
|
* Alt-Vertrag POST /service/pressreleases/{id}/images: Multipart mit Feldern
|
|
* unter press_release_image[...], nur Eigentümer (403-Wortlaut wie alt),
|
|
* Response 201 + Location + {}. KI-Kennzeichnung defaulted auf Originalfoto.
|
|
*/
|
|
class LegacyPressReleaseImageController extends Controller
|
|
{
|
|
public function __construct(private readonly ImageService $imageService) {}
|
|
|
|
use RespondsLikeLegacyApi;
|
|
|
|
public function store(Request $request, int $pressRelease): JsonResponse
|
|
{
|
|
abort_unless($request->user()->tokenCan('press-release-images:write'), 403);
|
|
|
|
$pressRelease = PressRelease::withoutGlobalScopes()->find($pressRelease);
|
|
|
|
if (! $pressRelease) {
|
|
return $this->legacyError(404, [sprintf('Object press_release does not exist (%s).', $request->route('pressRelease'))]);
|
|
}
|
|
|
|
if ($pressRelease->user_id !== $request->user()->id) {
|
|
return $this->legacyError(403, ['You are not the creator of this press release']);
|
|
}
|
|
|
|
try {
|
|
$validated = $request->validate([
|
|
'press_release_image' => ['required', 'array'],
|
|
'press_release_image.image' => ['required', 'image', 'mimes:jpg,jpeg,png,webp', 'max:8192'],
|
|
'press_release_image.title' => ['nullable', 'string', 'max:120'],
|
|
'press_release_image.description' => ['nullable', 'string', 'max:500'],
|
|
'press_release_image.copyright' => ['nullable', 'string', 'max:255'],
|
|
])['press_release_image'];
|
|
} catch (ValidationException $exception) {
|
|
return $this->legacyValidationError($exception);
|
|
}
|
|
|
|
try {
|
|
$stored = $this->imageService->storePressReleaseImage(
|
|
$request->file('press_release_image.image'),
|
|
$pressRelease->id,
|
|
);
|
|
} catch (RuntimeException $exception) {
|
|
return $this->legacyError(422, [$exception->getMessage()]);
|
|
}
|
|
|
|
$image = $pressRelease->images()->create([
|
|
'disk' => $stored['disk'],
|
|
'path' => $stored['path'],
|
|
'variants' => $stored['variants'],
|
|
'ai_declaration' => AiImageDeclaration::Original->value,
|
|
'title' => $validated['title'] ?? null,
|
|
'description' => $validated['description'] ?? null,
|
|
'copyright' => $validated['copyright'] ?? null,
|
|
'is_preview' => false,
|
|
'sort_order' => ((int) $pressRelease->images()->max('sort_order')) + 1,
|
|
'width' => $stored['width'],
|
|
'height' => $stored['height'],
|
|
'mime' => $stored['mime'],
|
|
]);
|
|
|
|
return $this->legacyCreated(url("/service/pressreleases/{$pressRelease->id}/images/{$image->id}"));
|
|
}
|
|
}
|