- Neue PM-Bilder/Anhänge liegen auf der privaten local-Disk; Auslieferung über kontrollierte Media-Routen mit gemeinsamer Zugriffslogik (AuthorizesPressReleaseMediaAccess). Öffentliche Medien werden aus den geladenen Modellen ermittelt (weniger Queries) und länger gecacht. - Anonyme Token-Vorschau lädt Bilder über temporär signierte URLs (Fix#5). - API-Resource baut Variant-URLs über die Media-Route statt /storage (Fix#4). Storage-Schicht prüft zusätzlich den serverseitigen MIME-Type (M5). - press-releases:privatize-media migriert Bestandsmedien. Deployment: einmalig `php artisan press-releases:privatize-media` ausführen. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
123 lines
3.3 KiB
PHP
123 lines
3.3 KiB
PHP
<?php
|
|
|
|
namespace App\Models;
|
|
|
|
use App\Enums\AiImageDeclaration;
|
|
use App\Enums\ImageLicenseType;
|
|
use Illuminate\Database\Eloquent\Model;
|
|
use Illuminate\Database\Eloquent\Relations\BelongsTo;
|
|
use Illuminate\Database\Eloquent\SoftDeletes;
|
|
use Illuminate\Support\Facades\URL;
|
|
|
|
class PressReleaseImage extends Model
|
|
{
|
|
use SoftDeletes;
|
|
|
|
protected $fillable = [
|
|
'press_release_id',
|
|
'disk',
|
|
'path',
|
|
'variants',
|
|
'title',
|
|
'description',
|
|
'copyright',
|
|
'author',
|
|
'license_type',
|
|
'license_detail',
|
|
'license_url',
|
|
'source_url',
|
|
'persons_consent',
|
|
'people_rights_status',
|
|
'property_rights_status',
|
|
'rights_notes',
|
|
'rights_confirmed_at',
|
|
'is_ai_generated',
|
|
'ai_declaration',
|
|
'is_preview',
|
|
'sort_order',
|
|
'width',
|
|
'height',
|
|
'mime',
|
|
'legacy_portal',
|
|
'legacy_id',
|
|
];
|
|
|
|
protected function casts(): array
|
|
{
|
|
return [
|
|
'variants' => 'array',
|
|
'license_type' => ImageLicenseType::class,
|
|
'persons_consent' => 'boolean',
|
|
'rights_confirmed_at' => 'datetime',
|
|
'is_ai_generated' => 'boolean',
|
|
'ai_declaration' => AiImageDeclaration::class,
|
|
'is_preview' => 'boolean',
|
|
'sort_order' => 'integer',
|
|
'width' => 'integer',
|
|
'height' => 'integer',
|
|
'deleted_at' => 'datetime',
|
|
];
|
|
}
|
|
|
|
public function pressRelease(): BelongsTo
|
|
{
|
|
return $this->belongsTo(PressRelease::class);
|
|
}
|
|
|
|
public function url(bool $signed = false): ?string
|
|
{
|
|
if (blank($this->path)) {
|
|
return null;
|
|
}
|
|
|
|
return $this->resolveDiskUrl($this->path, signed: $signed);
|
|
}
|
|
|
|
public function variantUrl(string $key, bool $signed = false): ?string
|
|
{
|
|
$variantPath = $this->pathForVariant($key);
|
|
|
|
if (! is_string($variantPath) || blank($variantPath)) {
|
|
return null;
|
|
}
|
|
|
|
return $this->resolveDiskUrl($variantPath, $key, $signed);
|
|
}
|
|
|
|
public function pathForVariant(?string $key = null): ?string
|
|
{
|
|
if ($key === null || $key === 'original') {
|
|
return $this->path;
|
|
}
|
|
|
|
$variants = $this->getAttribute('variants');
|
|
|
|
return is_array($variants) && is_string($variants[$key] ?? null)
|
|
? $variants[$key]
|
|
: null;
|
|
}
|
|
|
|
/**
|
|
* Löst die URL je nach Disk auf: public → direkt, sonst über die geschützte
|
|
* Media-Route. `signed=true` erzeugt eine temporär signierte Route, damit
|
|
* die anonyme Token-Vorschau (unveröffentlichte PM) die Bilder laden kann,
|
|
* ohne die Media-Route generell zu öffnen.
|
|
*/
|
|
private function resolveDiskUrl(string $relativePath, ?string $variant = null, bool $signed = false): string
|
|
{
|
|
if ($this->disk === 'public') {
|
|
return asset('storage/'.ltrim($relativePath, '/'));
|
|
}
|
|
|
|
$parameters = array_filter([
|
|
'image' => $this->getKey(),
|
|
'variant' => $variant,
|
|
]);
|
|
|
|
if ($signed) {
|
|
return URL::temporarySignedRoute('media.press-release-images.show', now()->addHours(6), $parameters);
|
|
}
|
|
|
|
return route('media.press-release-images.show', $parameters);
|
|
}
|
|
}
|