139 lines
9.4 KiB
PHP
139 lines
9.4 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Services\VerifiedDocumentBinary;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\DB;
|
|
use Illuminate\Support\Facades\Schema;
|
|
use Illuminate\Validation\ValidationException;
|
|
use Inertia\Inertia;
|
|
|
|
class EditorialArticleController extends Controller
|
|
{
|
|
public function installation(Request $request, \App\Services\EditorialInstallation $installation)
|
|
{
|
|
$plan = $installation->preview($request->user());
|
|
return $request->expectsJson() ? response()->json(['plan' => $plan])->header('Cache-Control', 'private, no-store')
|
|
: response()->view('management.editorial-installation', ['plan' => $plan, 'operationKey' => (string) \Illuminate\Support\Str::uuid(), 'receipt' => null])->header('Cache-Control', 'private, no-store');
|
|
}
|
|
|
|
public function install(Request $request, \App\Services\EditorialInstallation $installation)
|
|
{
|
|
$receipt = $installation->apply($request->user(), $request->all());
|
|
return $request->expectsJson() ? response()->json(['receipt' => $receipt])->header('Cache-Control', 'private, no-store')
|
|
: response()->view('management.editorial-installation', ['plan' => $installation->preview($request->user()), 'operationKey' => (string) \Illuminate\Support\Str::uuid(), 'receipt' => $receipt])->header('Cache-Control', 'private, no-store');
|
|
}
|
|
|
|
public function confirmMfa(Request $request)
|
|
{
|
|
$actor = $request->user();
|
|
abort_unless($actor->two_factor_secret !== null && $actor->two_factor_confirmed_at !== null, 403, 'MFA configurado e confirmado necessário.');
|
|
if (app(\App\Services\PortalProfileAccess::class)->mfa($actor)) {
|
|
return redirect()->route('editorial.installation');
|
|
}
|
|
if ($request->isMethod('get')) {
|
|
return response()->view('management.editorial-mfa')->header('Cache-Control', 'private, no-store');
|
|
}
|
|
abort_if(array_diff(array_keys($request->all()), ['code', 'recovery_code', '_token']), 422, 'A conta e o destino são obtidos da sessão e do servidor.');
|
|
$data = $request->validate(['code' => 'nullable|string|max:32', 'recovery_code' => 'nullable|string|max:255']);
|
|
try {
|
|
$recovery = collect($actor->recoveryCodes())->first(fn ($code) => isset($data['recovery_code']) && hash_equals($code, $data['recovery_code']));
|
|
$valid = $recovery !== null || (!empty($data['code']) && app(\Laravel\Fortify\Contracts\TwoFactorAuthenticationProvider::class)->verify(
|
|
\Laravel\Fortify\Fortify::currentEncrypter()->decrypt($actor->two_factor_secret), $data['code']
|
|
));
|
|
} catch (\Illuminate\Contracts\Encryption\DecryptException $e) {
|
|
$valid = false;
|
|
}
|
|
if (!$valid) {
|
|
event(new \Laravel\Fortify\Events\TwoFactorAuthenticationFailed($actor));
|
|
throw ValidationException::withMessages(['code' => 'Não foi possível confirmar o código MFA.']);
|
|
}
|
|
if ($recovery !== null) {
|
|
$actor->replaceRecoveryCode($recovery);
|
|
}
|
|
event(new \Laravel\Fortify\Events\ValidTwoFactorAuthenticationCodeProvided($actor));
|
|
$request->session()->regenerate();
|
|
return redirect()->route('editorial.installation')->header('Cache-Control', 'private, no-store');
|
|
}
|
|
|
|
private function installed(): void
|
|
{
|
|
abort_unless(Schema::hasColumn('portal_resources', 'editorial_content'), 503, 'Editor editorial ainda não instalado.');
|
|
}
|
|
|
|
private function publicResources()
|
|
{
|
|
return DB::table('portal_resources as r')->join('documents as d', 'd.id', '=', 'r.document_id')
|
|
->where('r.published', true)->where('r.rights_status', 'authorized')->where('d.rights_status', 'authorized')
|
|
->where('d.status', 'active')->where('d.data_classification', 'public')->whereNull('d.deleted_at')
|
|
->where('d.malware_scan_status', 'clean')->whereColumn('d.sha256', 'd.malware_scanned_sha256');
|
|
}
|
|
|
|
public function edit(int $id)
|
|
{
|
|
$this->installed();
|
|
$r = DB::table('portal_resources')->find($id);
|
|
abort_unless($r, 404);
|
|
$content = $r->editorial_content ? json_decode($r->editorial_content, true) : null;
|
|
if ($content === null) {
|
|
$document = DB::table('documents')->find($r->document_id);
|
|
if ($document && $document->status === 'active' && $document->malware_scan_status === 'clean'
|
|
&& in_array($document->media_type, ['text/plain', 'application/json'], true)) {
|
|
$binary = app(VerifiedDocumentBinary::class)->respond($document);
|
|
$bytes = $binary instanceof \Symfony\Component\HttpFoundation\BinaryFileResponse
|
|
? file_get_contents($binary->getFile()->getPathname()) : $binary->getContent();
|
|
$original = json_decode($bytes, true);
|
|
if (is_array($original) && ($original['format'] ?? '') === 'investmoz-legacy-article-v1') {
|
|
$html = preg_replace('~</(?:p|div|li|h[1-6])>|<br\s*/?>~i', "\n\n", $original['content_html'] ?? '');
|
|
$content = ['body' => trim(html_entity_decode(strip_tags($html), ENT_QUOTES | ENT_HTML5, 'UTF-8')), 'image_resource_id' => null];
|
|
}
|
|
}
|
|
}
|
|
|
|
return Inertia::render('portal/article-editor', ['resource' => ['id' => $r->id, 'title' => $r->title, 'metadata_version' => $r->metadata_version],
|
|
'content' => $content, 'images' => $this->publicResources()->whereIn('d.media_type', ['image/png', 'image/jpeg', 'image/webp'])->get(['r.id', 'r.title']),
|
|
'revisions' => DB::table('portal_resource_revisions')->where('resource_id', $id)->orderByDesc('revision_no')->get(['revision_no', 'change_type', 'created_at'])]);
|
|
}
|
|
|
|
public function save(Request $request, int $id)
|
|
{
|
|
$this->installed();
|
|
$data = $request->validate(['body' => ['required', 'string', 'max:100000'], 'image_resource_id' => ['nullable', 'integer'], 'metadata_version' => ['required', 'integer', 'min:1']]);
|
|
DB::transaction(function () use ($request, $id, $data) {
|
|
$r = DB::table('portal_resources')->where('id', $id)->lockForUpdate()->first();
|
|
abort_unless($r, 404);
|
|
abort_unless((int) $r->metadata_version === (int) $data['metadata_version'], 409, 'O artigo foi alterado noutra sessão. Recarregue antes de editar.');
|
|
if (! empty($data['image_resource_id'])) {
|
|
abort_unless($this->publicResources()->where('r.id', $data['image_resource_id'])->whereIn('d.media_type', ['image/png', 'image/jpeg', 'image/webp'])->exists(), 422, 'Escolha uma imagem pública disponível na biblioteca.');
|
|
}
|
|
$body = trim($data['body']);
|
|
if ($body === '') {
|
|
throw ValidationException::withMessages(['body' => 'Escreva o corpo do artigo.']);
|
|
}
|
|
$content = ['format' => 1, 'body' => $body, 'image_resource_id' => $data['image_resource_id'] ?? null];
|
|
$revision = (int) $r->metadata_version + 1;
|
|
DB::table('portal_resources')->where('id', $id)->update(['editorial_content' => json_encode($content, JSON_THROW_ON_ERROR), 'published' => false, 'approved_by' => null, 'metadata_version' => $revision, 'last_reviewed_by' => $request->user()->id, 'last_reviewed_at' => now(), 'updated_at' => now()]);
|
|
$resource = DB::table('portal_resources')->find($id);
|
|
$links = DB::table('portal_resource_links')->where('resource_id', $id)->orderBy('id')->get();
|
|
DB::table('portal_resource_revisions')->insert(['resource_id' => $id, 'revision_no' => $revision, 'change_type' => 'metadata_updated', 'snapshot' => json_encode(['resource' => $resource, 'associations' => $links], JSON_THROW_ON_ERROR), 'actor_user_id' => $request->user()->id, 'created_at' => now()]);
|
|
DB::table('audit_events')->insert(['source_system' => 'portal-management', 'actor_user_id' => $request->user()->id, 'entity_type' => 'portal_resources', 'entity_id' => null, 'action' => 'editorial_updated', 'before_data' => json_encode(['record_id' => $id, 'metadata_version' => $r->metadata_version]), 'after_data' => json_encode(['record_id' => $id, 'metadata_version' => $revision, 'published' => false])]);
|
|
});
|
|
|
|
return redirect('/management/portal-services/resources/'.$id.'/article')->with('success', 'Artigo guardado como rascunho. Publique expressamente no acervo quando estiver pronto.');
|
|
}
|
|
|
|
public function show(int $id)
|
|
{
|
|
$this->installed();
|
|
$r = $this->publicResources()->where('r.id', $id)->first(['r.id', 'r.title', 'r.description', 'r.editorial_content', 'r.document_id', 'd.issuer']);
|
|
abort_unless($r && $r->editorial_content, 404);
|
|
$content = json_decode($r->editorial_content, true);
|
|
// Recheck the original bytes using the same binary gate as the library.
|
|
$binary = app(VerifiedDocumentBinary::class)->respond($this->publicResources()->where('r.id', $id)->first(['r.*', 'd.*']));
|
|
$image = ! empty($content['image_resource_id']) ? $this->publicResources()->where('r.id', $content['image_resource_id'])->whereIn('d.media_type', ['image/png', 'image/jpeg', 'image/webp'])->value('r.id') : null;
|
|
|
|
return Inertia::render('portal/article', ['article' => ['id' => $id, 'title' => $r->title, 'description' => $r->description, 'author' => $r->issuer, 'body' => $content['body'], 'image_url' => $image ? '/documentos/'.$image.'/view' : null, 'original_url' => '/documentos/'.$id]]);
|
|
}
|
|
}
|