presseportale/app/Models/PressReleaseImage.php
Kevin Adametz 6250b0bab4 media: PM-Medien privat ausliefern + Vorschau-Signatur (M4, M5, Fix#4/#5)
- Neue PM-Bilder/Anhänge liegen auf der privaten local-Disk; Auslieferung
  über kontrollierte Media-Routen mit gemeinsamer Zugriffslogik
  (AuthorizesPressReleaseMediaAccess). Öffentliche Medien werden aus den
  geladenen Modellen ermittelt (weniger Queries) und länger gecacht.
- Anonyme Token-Vorschau lädt Bilder über temporär signierte URLs (Fix#5).
- API-Resource baut Variant-URLs über die Media-Route statt /storage
  (Fix#4). Storage-Schicht prüft zusätzlich den serverseitigen MIME-Type (M5).
- press-releases:privatize-media migriert Bestandsmedien.

Deployment: einmalig `php artisan press-releases:privatize-media` ausführen.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-14 13:48:06 +00:00

123 lines
3.3 KiB
PHP

<?php
namespace App\Models;
use App\Enums\AiImageDeclaration;
use App\Enums\ImageLicenseType;
use Illuminate\Database\Eloquent\Model;
use Illuminate\Database\Eloquent\Relations\BelongsTo;
use Illuminate\Database\Eloquent\SoftDeletes;
use Illuminate\Support\Facades\URL;
class PressReleaseImage extends Model
{
use SoftDeletes;
protected $fillable = [
'press_release_id',
'disk',
'path',
'variants',
'title',
'description',
'copyright',
'author',
'license_type',
'license_detail',
'license_url',
'source_url',
'persons_consent',
'people_rights_status',
'property_rights_status',
'rights_notes',
'rights_confirmed_at',
'is_ai_generated',
'ai_declaration',
'is_preview',
'sort_order',
'width',
'height',
'mime',
'legacy_portal',
'legacy_id',
];
protected function casts(): array
{
return [
'variants' => 'array',
'license_type' => ImageLicenseType::class,
'persons_consent' => 'boolean',
'rights_confirmed_at' => 'datetime',
'is_ai_generated' => 'boolean',
'ai_declaration' => AiImageDeclaration::class,
'is_preview' => 'boolean',
'sort_order' => 'integer',
'width' => 'integer',
'height' => 'integer',
'deleted_at' => 'datetime',
];
}
public function pressRelease(): BelongsTo
{
return $this->belongsTo(PressRelease::class);
}
public function url(bool $signed = false): ?string
{
if (blank($this->path)) {
return null;
}
return $this->resolveDiskUrl($this->path, signed: $signed);
}
public function variantUrl(string $key, bool $signed = false): ?string
{
$variantPath = $this->pathForVariant($key);
if (! is_string($variantPath) || blank($variantPath)) {
return null;
}
return $this->resolveDiskUrl($variantPath, $key, $signed);
}
public function pathForVariant(?string $key = null): ?string
{
if ($key === null || $key === 'original') {
return $this->path;
}
$variants = $this->getAttribute('variants');
return is_array($variants) && is_string($variants[$key] ?? null)
? $variants[$key]
: null;
}
/**
* Löst die URL je nach Disk auf: public → direkt, sonst über die geschützte
* Media-Route. `signed=true` erzeugt eine temporär signierte Route, damit
* die anonyme Token-Vorschau (unveröffentlichte PM) die Bilder laden kann,
* ohne die Media-Route generell zu öffnen.
*/
private function resolveDiskUrl(string $relativePath, ?string $variant = null, bool $signed = false): string
{
if ($this->disk === 'public') {
return asset('storage/'.ltrim($relativePath, '/'));
}
$parameters = array_filter([
'image' => $this->getKey(),
'variant' => $variant,
]);
if ($signed) {
return URL::temporarySignedRoute('media.press-release-images.show', now()->addHours(6), $parameters);
}
return route('media.press-release-images.show', $parameters);
}
}