Website/app/Http/Controllers/Api/EventController.php

<?php

namespace App\Http\Controllers\Api;

use App\Enum\HttpResponseCodes;
use App\Models\Event;
use App\Conductors\EventConductor;
use App\Conductors\MediaConductor;
use App\Conductors\UserConductor;
use App\Http\Requests\EventRequest;
use App\Models\Media;
use App\Models\User;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\Request;

class EventController extends ApiController
{
    /**
     * ApplicationController constructor.
     */
    public function __construct()
    {
        $this->middleware('auth:sanctum')
        ->only(['store','update','destroy', 'userAdd', 'userUpdate', 'userDelete']);
    }

    /**
     * Display a listing of the resource.
     *
     * @param \Illuminate\Http\Request $request The endpoint request.
     * @return \Illuminate\Http\Response
     */
    public function index(Request $request)
    {
        list($collection, $total) = EventConductor::request($request);

        return $this->respondAsResource(
            $collection,
            ['isCollection' => true,
                'appendData' => ['total' => $total]
            ]
        );
    }

    /**
     * Display the specified resource.
     *
     * @param \Illuminate\Http\Request $request The endpoint request.
     * @param  \App\Models\Event        $event   The specified event.
     * @return \Illuminate\Http\Response
     */
    public function show(Request $request, Event $event)
    {
        if (EventConductor::viewable($event) === true) {
            return $this->respondAsResource(EventConductor::model($request, $event));
        }

        return $this->respondForbidden();
    }

    /**
     * Store a newly created resource in storage.
     *
     * @param  \App\Http\Requests\EventRequest $request The request.
     * @return \Illuminate\Http\Response
     */
    public function store(EventRequest $request)
    {
        if (EventConductor::creatable() === true) {
            $event = Event::create($request->all());
            return $this->respondAsResource(
                EventConductor::model($request, $event),
                ['respondCode' => HttpResponseCodes::HTTP_CREATED]
            );
        } else {
            return $this->respondForbidden();
        }
    }

    /**
     * Update the specified resource in storage.
     *
     * @param  \App\Http\Requests\EventRequest $request The endpoint request.
     * @param  \App\Models\Event               $event   The specified event.
     * @return \Illuminate\Http\Response
     */
    public function update(EventRequest $request, Event $event)
    {
        if (EventConductor::updatable($event) === true) {
            $event->update($request->all());
            return $this->respondAsResource(EventConductor::model($request, $event));
        }

        return $this->respondForbidden();
    }

    /**
     * Remove the specified resource from storage.
     *
     * @param  \App\Models\Event $event The specified event.
     * @return \Illuminate\Http\Response
     */
    public function destroy(Event $event)
    {
        if (EventConductor::destroyable($event) === true) {
            $event->delete();
            return $this->respondNoContent();
        } else {
            return $this->respondForbidden();
        }
    }

    /**
     * Get a list of attachments related to this model.
     *
     * @param Request $request The user request.
     * @param Event   $event   The event model.
     * @return JsonResponse Returns the event attachments.
     */
    public function attachmentIndex(Request $request, Event $event): JsonResponse
    {
        if (EventConductor::viewable($event) === true) {
            $medium = $event->attachments->map(function ($attachment) {
                return $attachment->media;
            });

            return $this->respondAsResource(MediaConductor::collection($request, $medium), ['isCollection' => true, 'resourceName' => 'attachment']);
        }

        return $this->respondForbidden();
    }

    /**
     * Store an attachment related to this model.
     *
     * @param Request $request The user request.
     * @param Event   $event   The event model.
     * @return JsonResponse The response.
     */
    public function attachmentStore(Request $request, Event $event): JsonResponse
    {
        if (EventConductor::updatable($event) === true) {
            if ($request->has("medium") === true && Media::find($request->medium) !== null) {
                $event->attachments()->create(['media_id' => $request->medium]);
                return $this->respondCreated();
            }

            return $this->respondWithErrors(['media' => 'The media ID was not found']);
        }

        return $this->respondForbidden();
    }

    /**
     * Update/replace attachments related to this model.
     *
     * @param Request $request The user request.
     * @param Event   $event   The related model.
     */
    public function attachmentUpdate(Request $request, Event $event): JsonResponse
    {
        if (EventConductor::updatable($event) === true) {
            $mediaIds = $request->attachments;
            if (is_array($mediaIds) === false) {
                $mediaIds = explode(',', $request->attachments);
            }

            $mediaIds = array_map('trim', $mediaIds); // trim each media ID
            $attachments = $event->attachments;

            // Delete attachments that are not in $mediaIds
            foreach ($attachments as $attachment) {
                if (in_array($attachment->media_id, $mediaIds) === false) {
                    $attachment->delete();
                }
            }

            // Create new attachments for media IDs that are not already in $article->attachments()
            foreach ($mediaIds as $mediaId) {
                $found = false;

                foreach ($attachments as $attachment) {
                    if ($attachment->media_id === $mediaId) {
                        $found = true;
                        break;
                    }
                }

                if ($found === false) {
                    $event->attachments()->create(['media_id' => $mediaId]);
                }
            }

            return $this->respondNoContent();
        }//end if

        return $this->respondForbidden();
    }

    /**
     * Delete a specific related attachment.
     *
     * @param Request $request The user request.
     * @param Event   $event   The model.
     * @param Media   $medium  The attachment medium.
     */
    public function attachmentDelete(Request $request, Event $event, Media $medium): JsonResponse
    {
        if (EventConductor::updatable($event) === true) {
            $attachments = $event->attachments;
            $deleted = false;

            foreach ($attachments as $attachment) {
                if ($attachment->media_id === $medium->id) {
                    $attachment->delete();
                    $deleted = true;
                    break;
                }
            }

            if ($deleted === true) {
                // Attachment was deleted successfully
                return $this->respondNoContent();
            } else {
                // Attachment with matching media ID was not found
                return $this->respondNotFound();
            }
        }

        return $this->respondForbidden();
    }

    public function userList(Request $request, Event $event)
    {
        $authUser = $request->user();
        $eventUsers = $event->users;

        if ($authUser !== null) {
            $isAdmin = $authUser->hasPermission('admin/events');
            $isEventUser = $eventUsers->contains($authUser->id);

            if ($isAdmin === true || $isEventUser === true) {
                if ($isAdmin === false) {
                    $eventUsers = $eventUsers->filter(function ($user) use ($authUser) {
                        return $user->id === $authUser->id;
                    });
                }

                return $this->respondAsResource(UserConductor::collection($request, $eventUsers), ['isCollection' => true, 'resourceName' => 'users']);
            }

            return $this->respondNotFound();
        }

        return $this->respondForbidden();
    }

    public function userAdd(Request $request, Event $event)
    {
        $authUser = $request->user();
        if ($authUser !== null && $authUser->hasPermission('admin/events') === true) {
            if ($request->has("users") === true) {
                $eventUsers = $event->users()->pluck('user_id')->toArray(); // Get the current users in the event
                $requestedUsers = $request->input("users"); // Get the requested users

                $usersToAdd = array_diff($requestedUsers, $eventUsers); // Users to add
                $usersToRemove = array_diff($eventUsers, $requestedUsers); // Users to remove

                // Add missing users
                foreach ($usersToAdd as $userToAdd) {
                    if (User::find($userToAdd) !== null) {
                        $event->users()->attach($userToAdd);
                    }
                }

                // Remove extra users
                foreach ($usersToRemove as $userToRemove) {
                    $event->users()->detach($userToRemove);
                }

                return $this->respondNoContent();
            }//end if

            return $this->respondWithErrors(['users' => 'The user list was not found']);
        }//end if

        return $this->respondForbidden();
    }

    public function userUpdate(Request $request, Event $event)
    {
        // only admin/events permitted
    }

    public function userDelete(Request $request, Event $event, User $user)
    {
        $authUser = $request->user();
        if ($authUser !== null && $authUser->hasPermission('admin/events') === true) {
            $eventUsers = $event->users;
            if ($eventUsers->find($user->id) !== null) {
                $eventUsers->detach($user->id);
                return $this->respondNoContent();
            } else {
                return $this->respondNotFound();
            }
        }

        return $this->respondForbidden();
    }
}