2019-03-28 22:34:58 +01:00
< ? php
2019-05-11 05:32:07 +02:00
/**
2020-09-06 11:38:10 +02:00
* Invoice Ninja ( https :// invoiceninja . com ) .
2019-05-11 05:32:07 +02:00
*
* @ link https :// github . com / invoiceninja / invoiceninja source repository
*
2022-04-27 05:20:41 +02:00
* @ copyright Copyright ( c ) 2022. Invoice Ninja LLC ( https :// invoiceninja . com )
2019-05-11 05:32:07 +02:00
*
2021-06-16 08:58:16 +02:00
* @ license https :// www . elastic . co / licensing / elastic - license
2019-05-11 05:32:07 +02:00
*/
2019-03-28 22:34:58 +01:00
namespace App\Http\Controllers ;
2020-03-30 08:40:21 +02:00
use App\Models\Account ;
2023-01-20 13:45:29 +01:00
use App\Models\BankIntegration ;
2022-11-14 00:02:01 +01:00
use App\Models\BankTransaction ;
2023-01-20 13:45:29 +01:00
use App\Models\BankTransactionRule ;
use App\Models\ClientGatewayToken ;
2019-09-29 10:46:53 +02:00
use App\Models\Company ;
2023-01-20 13:45:29 +01:00
use App\Models\CompanyGateway ;
use App\Models\Design ;
use App\Models\ExpenseCategory ;
use App\Models\GroupSetting ;
use App\Models\PaymentTerm ;
use App\Models\Scheduler ;
use App\Models\TaxRate ;
2019-09-27 06:31:13 +02:00
use App\Models\User ;
2023-01-20 13:45:29 +01:00
use App\Models\Webhook ;
2019-03-28 22:34:58 +01:00
use App\Transformers\ArraySerializer ;
use App\Transformers\EntityTransformer ;
2020-03-25 09:36:47 +01:00
use App\Utils\Ninja ;
2019-09-11 02:37:53 +02:00
use App\Utils\Statics ;
2020-03-18 10:40:15 +01:00
use App\Utils\Traits\AppSetup ;
2022-03-13 10:18:15 +01:00
use App\Utils\TruthSource ;
2020-10-28 11:10:49 +01:00
use Illuminate\Contracts\Container\BindingResolutionException ;
2020-11-13 10:09:20 +01:00
use Illuminate\Database\Eloquent\Builder ;
2019-03-28 22:34:58 +01:00
use Illuminate\Http\Request ;
2022-01-10 09:48:18 +01:00
use Illuminate\Support\Str ;
2019-03-28 22:34:58 +01:00
use League\Fractal\Manager ;
use League\Fractal\Pagination\IlluminatePaginatorAdapter ;
use League\Fractal\Resource\Collection ;
use League\Fractal\Resource\Item ;
use League\Fractal\Serializer\JsonApiSerializer ;
2019-06-24 02:13:53 +02:00
/**
2020-09-06 11:38:10 +02:00
* Class BaseController .
2019-06-24 02:13:53 +02:00
*/
2019-03-28 22:34:58 +01:00
class BaseController extends Controller
{
2020-03-21 06:37:30 +01:00
use AppSetup ;
2022-06-21 11:57:17 +02:00
2019-06-24 02:13:53 +02:00
/**
* Passed from the parent when we need to force
2019-12-30 22:59:12 +01:00
* includes internally rather than externally via
2019-09-11 02:37:53 +02:00
* the $_REQUEST 'include' variable .
2019-12-30 22:59:12 +01:00
*
2019-06-24 02:13:53 +02:00
* @ var array
*/
public $forced_includes ;
2019-06-25 07:08:07 +02:00
/**
* Passed from the parent when we need to force
2020-09-06 11:38:10 +02:00
* the key of the response object .
2019-06-25 07:08:07 +02:00
* @ var string
*/
public $forced_index ;
2019-06-24 02:13:53 +02:00
/**
2020-09-06 11:38:10 +02:00
* Fractal manager .
2019-06-24 02:13:53 +02:00
* @ var object
*/
protected $manager ;
2020-07-26 10:30:55 +02:00
private $first_load = [
'account' ,
2020-10-26 01:58:08 +01:00
'user.company_user' ,
'token.company_user' ,
2020-07-26 10:30:55 +02:00
'company.activities' ,
2020-10-20 02:53:54 +02:00
'company.designs.company' ,
2020-10-25 21:56:02 +01:00
'company.task_statuses' ,
'company.expense_categories' ,
2020-10-20 02:53:54 +02:00
'company.documents' ,
2020-12-26 09:03:24 +01:00
'company.users.company_user' ,
2020-10-26 01:58:08 +01:00
'company.clients.contacts.company' ,
2020-08-12 01:04:39 +02:00
'company.clients.gateway_tokens' ,
2020-09-19 04:05:54 +02:00
'company.clients.documents' ,
2020-10-20 02:53:54 +02:00
'company.company_gateways.gateway' ,
'company.credits.invitations.contact' ,
'company.credits.invitations.company' ,
'company.credits.documents' ,
'company.expenses.documents' ,
2021-01-19 21:22:14 +01:00
'company.groups.documents' ,
2020-07-26 10:30:55 +02:00
'company.invoices.invitations.contact' ,
'company.invoices.invitations.company' ,
2022-06-24 07:54:34 +02:00
'company.purchase_orders.invitations' ,
2020-07-26 10:30:55 +02:00
'company.invoices.documents' ,
2020-10-20 02:53:54 +02:00
'company.products' ,
'company.products.documents' ,
'company.payments.paymentables' ,
'company.payments.documents' ,
2022-06-14 14:18:20 +02:00
'company.purchase_orders.documents' ,
2020-10-20 02:53:54 +02:00
'company.payment_terms.company' ,
'company.projects.documents' ,
2021-08-29 12:34:53 +02:00
'company.recurring_expenses' ,
2020-09-19 04:05:54 +02:00
'company.recurring_invoices' ,
'company.recurring_invoices.invitations.contact' ,
'company.recurring_invoices.invitations.company' ,
'company.recurring_invoices.documents' ,
2020-07-26 10:30:55 +02:00
'company.quotes.invitations.contact' ,
'company.quotes.invitations.company' ,
'company.quotes.documents' ,
2020-10-18 09:46:10 +02:00
'company.tasks.documents' ,
2021-03-29 12:58:03 +02:00
'company.subscriptions' ,
2020-10-20 02:53:54 +02:00
'company.tax_rates' ,
2020-09-06 11:38:10 +02:00
'company.tokens_hashed' ,
2020-10-26 01:58:08 +01:00
'company.vendors.contacts.company' ,
'company.vendors.documents' ,
2020-10-20 02:53:54 +02:00
'company.webhooks' ,
2021-03-30 00:32:33 +02:00
'company.system_logs' ,
2022-09-07 07:09:53 +02:00
'company.bank_integrations' ,
2022-09-14 06:33:05 +02:00
'company.bank_transactions' ,
2022-11-21 22:42:53 +01:00
'company.bank_transaction_rules' ,
2023-01-16 22:37:15 +01:00
'company.task_schedulers' ,
2020-07-26 10:30:55 +02:00
];
private $mini_load = [
2022-06-21 11:57:17 +02:00
'account' ,
'user.company_user' ,
'token' ,
'company.activities' ,
'company.tax_rates' ,
'company.documents' ,
'company.company_gateways.gateway' ,
'company.users.company_user' ,
'company.task_statuses' ,
'company.payment_terms' ,
'company.groups' ,
'company.designs.company' ,
'company.expense_categories' ,
'company.subscriptions' ,
2022-09-07 07:09:53 +02:00
'company.bank_integrations' ,
2022-11-21 22:42:53 +01:00
'company.bank_transaction_rules' ,
2023-01-16 22:37:15 +01:00
'company.task_schedulers' ,
2022-06-21 11:57:17 +02:00
];
2019-03-28 22:34:58 +01:00
2019-12-30 22:59:12 +01:00
public function __construct ()
2019-03-28 22:34:58 +01:00
{
$this -> manager = new Manager ();
2019-06-24 02:13:53 +02:00
$this -> forced_includes = [];
2019-06-25 07:08:07 +02:00
$this -> forced_index = 'data' ;
2019-06-24 02:13:53 +02:00
}
private function buildManager ()
{
2019-06-24 13:05:47 +02:00
$include = '' ;
2019-06-24 02:13:53 +02:00
2020-03-21 06:37:30 +01:00
if ( request () -> has ( 'first_load' ) && request () -> input ( 'first_load' ) == 'true' ) {
2020-09-06 11:38:10 +02:00
$include = implode ( ',' , array_merge ( $this -> forced_includes , $this -> getRequestIncludes ([])));
2020-03-21 06:37:30 +01:00
} elseif ( request () -> input ( 'include' ) !== null ) {
2020-09-06 11:38:10 +02:00
$include = array_merge ( $this -> forced_includes , explode ( ',' , request () -> input ( 'include' )));
$include = implode ( ',' , $include );
2019-12-30 22:59:12 +01:00
} elseif ( count ( $this -> forced_includes ) >= 1 ) {
2020-09-06 11:38:10 +02:00
$include = implode ( ',' , $this -> forced_includes );
2019-06-24 13:05:47 +02:00
}
2019-06-24 02:13:53 +02:00
$this -> manager -> parseIncludes ( $include );
2020-09-06 11:38:10 +02:00
2019-03-28 22:34:58 +01:00
$this -> serializer = request () -> input ( 'serializer' ) ? : EntityTransformer :: API_SERIALIZER_ARRAY ;
2019-12-30 22:59:12 +01:00
if ( $this -> serializer === EntityTransformer :: API_SERIALIZER_JSON ) {
2019-03-28 22:34:58 +01:00
$this -> manager -> setSerializer ( new JsonApiSerializer ());
2019-12-30 22:59:12 +01:00
} else {
2019-03-28 22:34:58 +01:00
$this -> manager -> setSerializer ( new ArraySerializer ());
2019-06-24 02:13:53 +02:00
}
2019-03-28 22:34:58 +01:00
}
2019-03-30 10:30:41 +01:00
/**
2019-12-30 22:59:12 +01:00
* Catch all fallback route
2020-09-06 11:38:10 +02:00
* for non - existant route .
2019-03-30 10:30:41 +01:00
*/
public function notFound ()
{
2021-01-24 23:24:13 +01:00
return response () -> json ([ 'message' => ctrans ( 'texts.api_404' )], 404 )
2020-06-21 23:30:25 +02:00
-> header ( 'X-API-VERSION' , config ( 'ninja.minimum_client_version' ))
2019-12-29 23:06:42 +01:00
-> header ( 'X-APP-VERSION' , config ( 'ninja.app_version' ));
2019-03-30 10:30:41 +01:00
}
2020-04-04 12:32:42 +02:00
/**
2020-09-06 11:38:10 +02:00
* 404 for the client portal .
2020-04-04 12:32:42 +02:00
* @ return Response 404 response
*/
2019-07-17 00:59:09 +02:00
public function notFoundClient ()
{
2022-06-15 07:20:00 +02:00
abort ( 404 , 'Page not found in the client portal.' );
}
public function notFoundVendor ()
{
abort ( 404 , 'Page not found in the vendor portal.' );
2019-07-17 00:59:09 +02:00
}
2020-04-04 12:32:42 +02:00
/**
2020-09-06 11:38:10 +02:00
* API Error response .
2020-10-28 11:10:49 +01:00
* @ param string $message The return error message
* @ param int $httpErrorCode 404 / 401 / 403 etc
2020-04-04 12:32:42 +02:00
* @ return Response The JSON response
2020-10-28 11:10:49 +01:00
* @ throws BindingResolutionException
2020-04-04 12:32:42 +02:00
*/
protected function errorResponse ( $message , $httpErrorCode = 400 )
2019-03-28 22:34:58 +01:00
{
2020-04-04 12:32:42 +02:00
$error [ 'error' ] = $message ;
2020-02-10 10:53:02 +01:00
2019-03-28 22:34:58 +01:00
$error = json_encode ( $error , JSON_PRETTY_PRINT );
2020-02-10 10:53:02 +01:00
2019-03-28 22:34:58 +01:00
$headers = self :: getApiHeaders ();
return response () -> make ( $error , $httpErrorCode , $headers );
}
2020-07-10 01:28:09 +02:00
protected function refreshResponse ( $query )
{
2021-01-29 13:05:03 +01:00
$user = auth () -> user ();
2021-05-19 10:38:51 +02:00
$this -> manager -> parseIncludes ( $this -> first_load );
2020-07-24 11:39:43 +02:00
$this -> serializer = request () -> input ( 'serializer' ) ? : EntityTransformer :: API_SERIALIZER_ARRAY ;
if ( $this -> serializer === EntityTransformer :: API_SERIALIZER_JSON ) {
$this -> manager -> setSerializer ( new JsonApiSerializer ());
} else {
$this -> manager -> setSerializer ( new ArraySerializer ());
}
2020-07-10 01:28:09 +02:00
2020-07-26 07:12:40 +02:00
$transformer = new $this -> entity_transformer ( $this -> serializer );
2020-07-10 01:28:09 +02:00
$updated_at = request () -> has ( 'updated_at' ) ? request () -> input ( 'updated_at' ) : 0 ;
2020-08-02 08:31:55 +02:00
2022-06-21 11:57:17 +02:00
if ( $user -> getCompany () -> is_large && $updated_at == 0 ) {
$updated_at = time ();
2021-08-17 12:49:31 +02:00
}
2020-07-10 01:28:09 +02:00
$updated_at = date ( 'Y-m-d H:i:s' , $updated_at );
$query -> with (
2020-11-25 15:19:52 +01:00
[
2022-06-21 11:57:17 +02:00
'company' => function ( $query ) use ( $updated_at , $user ) {
$query -> whereNotNull ( 'updated_at' ) -> with ( 'documents' , 'users' );
},
'company.clients' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'clients.updated_at' , '>=' , $updated_at ) -> with ( 'contacts.company' , 'gateway_tokens' , 'documents' );
if ( ! $user -> hasPermission ( 'view_client' )) {
2022-08-27 11:43:01 +02:00
// $query->where('clients.user_id', $user->id)->orWhere('clients.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'clients.user_id' , $user -> id ) -> orWhere ( 'clients.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.company_gateways' => function ( $query ) use ( $user ) {
$query -> whereNotNull ( 'updated_at' ) -> with ( 'gateway' );
if ( ! $user -> isAdmin ()) {
$query -> where ( 'company_gateways.user_id' , $user -> id );
}
},
'company.credits' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at ) -> with ( 'invitations' , 'documents' );
if ( ! $user -> hasPermission ( 'view_credit' )) {
2022-08-27 11:43:01 +02:00
// $query->where('credits.user_id', $user->id)->orWhere('credits.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'credits.user_id' , $user -> id ) -> orWhere ( 'credits.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.designs' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at ) -> with ( 'company' );
if ( ! $user -> isAdmin ()) {
$query -> where ( 'designs.user_id' , $user -> id );
}
},
'company.documents' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at );
},
'company.expenses' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at ) -> with ( 'documents' );
if ( ! $user -> hasPermission ( 'view_expense' )) {
2022-08-27 11:43:01 +02:00
// $query->where('expenses.user_id', $user->id)->orWhere('expenses.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'expenses.user_id' , $user -> id ) -> orWhere ( 'expenses.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.groups' => function ( $query ) use ( $updated_at , $user ) {
$query -> whereNotNull ( 'updated_at' ) -> with ( 'documents' );
2021-01-29 13:05:03 +01:00
2021-11-06 23:01:19 +01:00
// if(!$user->isAdmin())
2022-06-21 11:57:17 +02:00
// $query->where('group_settings.user_id', $user->id);
},
'company.invoices' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at ) -> with ( 'invitations' , 'documents' );
if ( ! $user -> hasPermission ( 'view_invoice' )) {
2022-08-27 11:43:01 +02:00
// $query->where('invoices.user_id', $user->id)->orWhere('invoices.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'invoices.user_id' , $user -> id ) -> orWhere ( 'invoices.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.payments' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at ) -> with ( 'paymentables' , 'documents' );
if ( ! $user -> hasPermission ( 'view_payment' )) {
2022-08-27 11:43:01 +02:00
// $query->where('payments.user_id', $user->id)->orWhere('payments.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'payments.user_id' , $user -> id ) -> orWhere ( 'payments.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.payment_terms' => function ( $query ) use ( $updated_at , $user ) {
$query -> whereNotNull ( 'updated_at' );
if ( ! $user -> isAdmin ()) {
$query -> where ( 'payment_terms.user_id' , $user -> id );
}
},
'company.products' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at ) -> with ( 'documents' );
if ( ! $user -> hasPermission ( 'view_product' )) {
2022-08-27 11:43:01 +02:00
// $query->where('products.user_id', $user->id)->orWhere('products.assigned_user_id', $user->id);
2022-08-27 10:49:34 +02:00
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'products.user_id' , $user -> id ) -> orWhere ( 'products.assigned_user_id' , $user -> id );
2022-08-27 11:43:01 +02:00
2022-08-27 10:49:34 +02:00
});
2022-06-21 11:57:17 +02:00
}
2022-08-27 11:43:01 +02:00
2022-06-21 11:57:17 +02:00
},
'company.projects' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at ) -> with ( 'documents' );
if ( ! $user -> hasPermission ( 'view_project' )) {
2022-08-27 11:43:01 +02:00
// $query->where('projects.user_id', $user->id)->orWhere('projects.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'projects.user_id' , $user -> id ) -> orWhere ( 'projects.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.purchase_orders' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at ) -> with ( 'documents' );
if ( ! $user -> hasPermission ( 'view_purchase_order' )) {
2022-08-27 11:43:01 +02:00
// $query->where('purchase_orders.user_id', $user->id)->orWhere('purchase_orders.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'purchase_orders.user_id' , $user -> id ) -> orWhere ( 'purchase_orders.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.quotes' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at ) -> with ( 'invitations' , 'documents' );
if ( ! $user -> hasPermission ( 'view_quote' )) {
2022-08-27 11:43:01 +02:00
// $query->where('quotes.user_id', $user->id)->orWhere('quotes.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'quotes.user_id' , $user -> id ) -> orWhere ( 'quotes.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.recurring_invoices' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at ) -> with ( 'invitations' , 'documents' , 'client.gateway_tokens' , 'client.group_settings' , 'client.company' );
if ( ! $user -> hasPermission ( 'view_recurring_invoice' )) {
2022-08-27 11:43:01 +02:00
// $query->where('recurring_invoices.user_id', $user->id)->orWhere('recurring_invoices.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'recurring_invoices.user_id' , $user -> id ) -> orWhere ( 'recurring_invoices.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.recurring_expenses' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at ) -> with ( 'documents' );
if ( ! $user -> hasPermission ( 'view_recurring_expense' )) {
2022-08-27 11:43:01 +02:00
// $query->where('recurring_expenses.user_id', $user->id)->orWhere('recurring_expenses.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'recurring_expenses.user_id' , $user -> id ) -> orWhere ( 'recurring_expenses.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.tasks' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at ) -> with ( 'documents' );
if ( ! $user -> hasPermission ( 'view_task' )) {
2022-08-27 11:43:01 +02:00
// $query->where('tasks.user_id', $user->id)->orWhere('tasks.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'tasks.user_id' , $user -> id ) -> orWhere ( 'tasks.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.tax_rates' => function ( $query ) use ( $updated_at , $user ) {
$query -> whereNotNull ( 'updated_at' );
},
'company.vendors' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at ) -> with ( 'contacts' , 'documents' );
if ( ! $user -> hasPermission ( 'view_vendor' )) {
2022-08-27 11:43:01 +02:00
// $query->where('vendors.user_id', $user->id)->orWhere('vendors.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'vendors.user_id' , $user -> id ) -> orWhere ( 'vendors.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.expense_categories' => function ( $query ) use ( $updated_at , $user ) {
$query -> whereNotNull ( 'updated_at' );
},
'company.task_statuses' => function ( $query ) use ( $updated_at , $user ) {
$query -> whereNotNull ( 'updated_at' );
},
'company.activities' => function ( $query ) use ( $user ) {
if ( ! $user -> isAdmin ()) {
$query -> where ( 'activities.user_id' , $user -> id );
}
},
'company.subscriptions' => function ( $query ) use ( $updated_at , $user ) {
$query -> whereNotNull ( 'updated_at' );
if ( ! $user -> isAdmin ()) {
$query -> where ( 'subscriptions.user_id' , $user -> id );
}
},
2022-09-07 07:09:53 +02:00
'company.bank_integrations' => function ( $query ) use ( $updated_at , $user ) {
$query -> whereNotNull ( 'updated_at' );
if ( ! $user -> isAdmin ()) {
$query -> where ( 'bank_integrations.user_id' , $user -> id );
}
},
2022-09-14 06:33:05 +02:00
'company.bank_transactions' => function ( $query ) use ( $updated_at , $user ) {
2022-09-14 08:48:56 +02:00
$query -> where ( 'updated_at' , '>=' , $updated_at );
2022-09-14 06:33:05 +02:00
if ( ! $user -> isAdmin ()) {
$query -> where ( 'bank_transactions.user_id' , $user -> id );
}
},
2022-11-21 22:42:53 +01:00
'company.bank_transaction_rules' => function ( $query ) use ( $updated_at , $user ) {
$query -> where ( 'updated_at' , '>=' , $updated_at );
if ( ! $user -> isAdmin ()) {
$query -> where ( 'bank_transaction_rules.user_id' , $user -> id );
}
},
2023-01-16 22:37:15 +01:00
'company.task_schedulers' => function ( $query ) use ( $updated_at , $user ) {
2023-01-16 22:31:07 +01:00
$query -> where ( 'updated_at' , '>=' , $updated_at );
if ( ! $user -> isAdmin ()) {
$query -> where ( 'schedulers.user_id' , $user -> id );
}
},
2022-06-21 11:57:17 +02:00
]
2020-07-10 01:28:09 +02:00
);
2020-11-13 10:09:20 +01:00
if ( $query instanceof Builder ) {
2022-10-27 02:28:09 +02:00
//27-10-2022 - enforce unsigned integer
$limit = $this -> resolveQueryLimit ();
2020-07-24 11:39:43 +02:00
$paginator = $query -> paginate ( $limit );
$query = $paginator -> getCollection ();
$resource = new Collection ( $query , $transformer , $this -> entity_type );
$resource -> setPaginator ( new IlluminatePaginatorAdapter ( $paginator ));
} else {
$resource = new Collection ( $query , $transformer , $this -> entity_type );
}
return $this -> response ( $this -> manager -> createData ( $resource ) -> toArray ());
2020-07-10 01:28:09 +02:00
}
2022-10-27 02:28:09 +02:00
private function resolveQueryLimit ()
{
if ( request () -> has ( 'per_page' ))
return abs (( int ) request () -> input ( 'per_page' , 20 ));
return 20 ;
}
2021-05-14 09:38:16 +02:00
protected function miniLoadResponse ( $query )
{
2022-06-21 11:57:17 +02:00
$user = auth () -> user ();
2021-05-14 09:38:16 +02:00
$this -> serializer = request () -> input ( 'serializer' ) ? : EntityTransformer :: API_SERIALIZER_ARRAY ;
if ( $this -> serializer === EntityTransformer :: API_SERIALIZER_JSON ) {
$this -> manager -> setSerializer ( new JsonApiSerializer ());
} else {
$this -> manager -> setSerializer ( new ArraySerializer ());
}
$transformer = new $this -> entity_transformer ( $this -> serializer );
$created_at = request () -> has ( 'created_at' ) ? request () -> input ( 'created_at' ) : 0 ;
$created_at = date ( 'Y-m-d H:i:s' , $created_at );
$query -> with (
[
2022-06-21 11:57:17 +02:00
'company' => function ( $query ) use ( $created_at , $user ) {
$query -> whereNotNull ( 'created_at' ) -> with ( 'documents' , 'users' );
},
'company.designs' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'company' );
},
'company.documents' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at );
},
'company.groups' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'documents' );
},
'company.payment_terms' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at );
},
'company.tax_rates' => function ( $query ) use ( $created_at , $user ) {
$query -> whereNotNull ( 'created_at' );
},
'company.activities' => function ( $query ) use ( $user ) {
if ( ! $user -> isAdmin ()) {
$query -> where ( 'activities.user_id' , $user -> id );
}
},
2022-09-07 07:09:53 +02:00
'company.bank_integrations' => function ( $query ) use ( $created_at , $user ) {
if ( ! $user -> isAdmin ()) {
$query -> where ( 'bank_integrations.user_id' , $user -> id );
}
},
2022-11-27 09:10:11 +01:00
'company.bank_transaction_rules' => function ( $query ) use ( $user ) {
2022-11-21 22:42:53 +01:00
if ( ! $user -> isAdmin ()) {
$query -> where ( 'bank_transaction_rules.user_id' , $user -> id );
}
},
2023-01-16 22:37:15 +01:00
'company.task_schedulers' => function ( $query ) use ( $user ) {
2023-01-16 22:31:07 +01:00
if ( ! $user -> isAdmin ()) {
$query -> where ( 'schedulers.user_id' , $user -> id );
}
},
2022-06-21 11:57:17 +02:00
]
2021-05-14 09:38:16 +02:00
);
if ( $query instanceof Builder ) {
2022-10-27 02:28:09 +02:00
$limit = $this -> resolveQueryLimit ();
2021-05-14 09:38:16 +02:00
$paginator = $query -> paginate ( $limit );
$query = $paginator -> getCollection ();
$resource = new Collection ( $query , $transformer , $this -> entity_type );
$resource -> setPaginator ( new IlluminatePaginatorAdapter ( $paginator ));
} else {
$resource = new Collection ( $query , $transformer , $this -> entity_type );
}
return $this -> response ( $this -> manager -> createData ( $resource ) -> toArray ());
}
2021-04-29 00:44:40 +02:00
protected function timeConstrainedResponse ( $query )
{
$user = auth () -> user ();
2022-06-21 11:57:17 +02:00
if ( $user -> getCompany () -> is_large ) {
$this -> manager -> parseIncludes ( $this -> mini_load );
return $this -> miniLoadResponse ( $query );
} else {
$this -> manager -> parseIncludes ( $this -> first_load );
2021-05-14 09:38:16 +02:00
}
2021-04-29 00:44:40 +02:00
$this -> serializer = request () -> input ( 'serializer' ) ? : EntityTransformer :: API_SERIALIZER_ARRAY ;
if ( $this -> serializer === EntityTransformer :: API_SERIALIZER_JSON ) {
$this -> manager -> setSerializer ( new JsonApiSerializer ());
} else {
$this -> manager -> setSerializer ( new ArraySerializer ());
}
$transformer = new $this -> entity_transformer ( $this -> serializer );
$created_at = request () -> has ( 'created_at' ) ? request () -> input ( 'created_at' ) : 0 ;
$created_at = date ( 'Y-m-d H:i:s' , $created_at );
$query -> with (
[
2022-06-21 11:57:17 +02:00
'company' => function ( $query ) use ( $created_at , $user ) {
$query -> whereNotNull ( 'created_at' ) -> with ( 'documents' , 'users' );
},
'company.clients' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'clients.created_at' , '>=' , $created_at ) -> with ( 'contacts.company' , 'gateway_tokens' , 'documents' );
if ( ! $user -> hasPermission ( 'view_client' )) {
2022-08-27 11:43:01 +02:00
// $query->where('clients.user_id', $user->id)->orWhere('clients.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'clients.user_id' , $user -> id ) -> orWhere ( 'clients.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.company_gateways' => function ( $query ) use ( $user ) {
$query -> whereNotNull ( 'created_at' ) -> with ( 'gateway' );
if ( ! $user -> isAdmin ()) {
$query -> where ( 'company_gateways.user_id' , $user -> id );
}
},
'company.credits' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'invitations' , 'documents' );
if ( ! $user -> hasPermission ( 'view_credit' )) {
2022-08-27 11:43:01 +02:00
// $query->where('credits.user_id', $user->id)->orWhere('credits.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'credits.user_id' , $user -> id ) -> orWhere ( 'credits.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.documents' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at );
},
'company.expenses' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'documents' );
if ( ! $user -> hasPermission ( 'view_expense' )) {
2022-08-27 11:43:01 +02:00
// $query->where('expenses.user_id', $user->id)->orWhere('expenses.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'expenses.user_id' , $user -> id ) -> orWhere ( 'expenses.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.groups' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'documents' );
},
'company.invoices' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'invitations' , 'documents' );
if ( ! $user -> hasPermission ( 'view_invoice' )) {
2022-08-27 11:43:01 +02:00
// $query->where('invoices.user_id', $user->id)->orWhere('invoices.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'invoices.user_id' , $user -> id ) -> orWhere ( 'invoices.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.payments' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'paymentables' , 'documents' );
if ( ! $user -> hasPermission ( 'view_payment' )) {
2022-08-27 11:43:01 +02:00
// $query->where('payments.user_id', $user->id)->orWhere('payments.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'payments.user_id' , $user -> id ) -> orWhere ( 'payments.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.payment_terms' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at );
},
'company.products' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'documents' );
if ( ! $user -> hasPermission ( 'view_product' )) {
2022-08-27 11:43:01 +02:00
// $query->where('products.user_id', $user->id)->orWhere('products.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'products.user_id' , $user -> id ) -> orWhere ( 'products.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.projects' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'documents' );
if ( ! $user -> hasPermission ( 'view_project' )) {
2022-08-27 11:43:01 +02:00
// $query->where('projects.user_id', $user->id)->orWhere('projects.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'projects.user_id' , $user -> id ) -> orWhere ( 'projects.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.purchase_orders' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'documents' );
if ( ! $user -> hasPermission ( 'view_purchase_order' )) {
2022-08-27 11:43:01 +02:00
// $query->where('purchase_orders.user_id', $user->id)->orWhere('purchase_orders.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'purchase_orders.user_id' , $user -> id ) -> orWhere ( 'purchase_orders.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.quotes' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'invitations' , 'documents' );
if ( ! $user -> hasPermission ( 'view_quote' )) {
2022-08-27 11:43:01 +02:00
// $query->where('quotes.user_id', $user->id)->orWhere('quotes.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'quotes.user_id' , $user -> id ) -> orWhere ( 'quotes.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.recurring_invoices' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'invitations' , 'documents' , 'client.gateway_tokens' , 'client.group_settings' , 'client.company' );
if ( ! $user -> hasPermission ( 'view_recurring_invoice' )) {
2022-08-27 11:43:01 +02:00
// $query->where('recurring_invoices.user_id', $user->id)->orWhere('recurring_invoices.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'recurring_invoices.user_id' , $user -> id ) -> orWhere ( 'recurring_invoices.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.tasks' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'documents' );
if ( ! $user -> hasPermission ( 'view_task' )) {
2022-08-27 11:43:01 +02:00
// $query->where('tasks.user_id', $user->id)->orWhere('tasks.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'tasks.user_id' , $user -> id ) -> orWhere ( 'tasks.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.tax_rates' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at );
},
'company.vendors' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'contacts' , 'documents' );
if ( ! $user -> hasPermission ( 'view_vendor' )) {
2022-08-27 11:43:01 +02:00
// $query->where('vendors.user_id', $user->id)->orWhere('vendors.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'vendors.user_id' , $user -> id ) -> orWhere ( 'vendors.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
'company.expense_categories' => function ( $query ) use ( $created_at , $user ) {
$query -> whereNotNull ( 'created_at' );
},
'company.task_statuses' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at );
},
'company.activities' => function ( $query ) use ( $user ) {
if ( ! $user -> isAdmin ()) {
$query -> where ( 'activities.user_id' , $user -> id );
}
},
'company.webhooks' => function ( $query ) use ( $user ) {
if ( ! $user -> isAdmin ()) {
$query -> where ( 'webhooks.user_id' , $user -> id );
}
},
'company.tokens' => function ( $query ) use ( $user ) {
$query -> where ( 'company_tokens.user_id' , $user -> id );
},
'company.system_logs' ,
'company.subscriptions' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at );
if ( ! $user -> isAdmin ()) {
$query -> where ( 'subscriptions.user_id' , $user -> id );
}
},
'company.recurring_expenses' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at ) -> with ( 'documents' );
if ( ! $user -> hasPermission ( 'view_recurring_expense' )) {
2022-08-27 11:43:01 +02:00
// $query->where('recurring_expenses.user_id', $user->id)->orWhere('recurring_expenses.assigned_user_id', $user->id);
$query -> whereNested ( function ( $query ) use ( $user ) {
$query -> where ( 'recurring_expenses.user_id' , $user -> id ) -> orWhere ( 'recurring_expenses.assigned_user_id' , $user -> id );
});
2022-06-21 11:57:17 +02:00
}
},
2022-09-07 07:09:53 +02:00
'company.bank_integrations' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at );
if ( ! $user -> isAdmin ()) {
$query -> where ( 'bank_integrations.user_id' , $user -> id );
}
},
2022-09-14 06:33:05 +02:00
'company.bank_transactions' => function ( $query ) use ( $created_at , $user ) {
$query -> where ( 'created_at' , '>=' , $created_at );
if ( ! $user -> isAdmin ()) {
$query -> where ( 'bank_transactions.user_id' , $user -> id );
}
},
2023-01-16 22:37:15 +01:00
'company.task_schedulers' => function ( $query ) use ( $created_at , $user ) {
2023-01-16 22:31:07 +01:00
$query -> where ( 'created_at' , '>=' , $created_at );
if ( ! $user -> isAdmin ()) {
$query -> where ( 'schedulers.user_id' , $user -> id );
}
},
2022-06-21 11:57:17 +02:00
]
2021-04-29 00:44:40 +02:00
);
if ( $query instanceof Builder ) {
2022-10-27 02:28:09 +02:00
$limit = $this -> resolveQueryLimit ();
2021-04-29 00:44:40 +02:00
$paginator = $query -> paginate ( $limit );
$query = $paginator -> getCollection ();
$resource = new Collection ( $query , $transformer , $this -> entity_type );
$resource -> setPaginator ( new IlluminatePaginatorAdapter ( $paginator ));
} else {
$resource = new Collection ( $query , $transformer , $this -> entity_type );
}
return $this -> response ( $this -> manager -> createData ( $resource ) -> toArray ());
}
2019-12-30 22:59:12 +01:00
protected function listResponse ( $query )
2019-03-28 22:34:58 +01:00
{
2019-06-24 02:13:53 +02:00
$this -> buildManager ();
2020-11-13 10:09:20 +01:00
$transformer = new $this -> entity_transformer ( request () -> input ( 'serializer' ));
2019-03-28 22:34:58 +01:00
$includes = $transformer -> getDefaultIncludes ();
2019-12-29 23:06:42 +01:00
2019-03-28 22:34:58 +01:00
$includes = $this -> getRequestIncludes ( $includes );
$query -> with ( $includes );
2023-01-20 23:23:56 +01:00
/*Restore here if refactor produces unexpected edge cases*/
/*
if ( auth () -> user () && ! auth () -> user () -> hasPermission ( 'view' . lcfirst ( class_basename ( Str :: snake ( $this -> entity_type ))))) {
//06-10-2022 - some entities do not have assigned_user_id - this becomes an issue when we have a large company and low permission users
if ( lcfirst ( class_basename ( Str :: snake ( $this -> entity_type ))) == 'user' )
$query -> where ( 'id' , auth () -> user () -> id );
elseif ( $this -> entity_type == BankTransaction :: class ){ //table without assigned_user_id
$query -> where ( 'user_id' , '=' , auth () -> user () -> id );
}
elseif ( in_array ( lcfirst ( class_basename ( Str :: snake ( $this -> entity_type ))),[ 'design' , 'group_setting' , 'payment_term' ])){
//need to pass these back regardless
nlog ( $this -> entity_type );
}
else
$query -> where ( 'user_id' , '=' , auth () -> user () -> id ) -> orWhere ( 'assigned_user_id' , auth () -> user () -> id );
}
*/
2023-01-21 01:33:41 +01:00
/*21-01-2023*/
2023-01-20 23:23:56 +01:00
/**/
2022-01-10 09:48:18 +01:00
// 10-01-2022 need to ensure we snake case properly here to ensure permissions work as expected
2022-03-28 04:06:46 +02:00
// 28-03-2022 this is definitely correct here, do not append _ to the view, it resolved correctly when snake cased
if ( auth () -> user () && ! auth () -> user () -> hasPermission ( 'view' . lcfirst ( class_basename ( Str :: snake ( $this -> entity_type ))))) {
2022-10-06 07:37:39 +02:00
//06-10-2022 - some entities do not have assigned_user_id - this becomes an issue when we have a large company and low permission users
2023-01-20 13:45:29 +01:00
if ( in_array ( $this -> entity_type , [ User :: class ])){
2022-10-06 07:37:39 +02:00
$query -> where ( 'id' , auth () -> user () -> id );
2023-01-20 13:45:29 +01:00
}
elseif ( in_array ( $this -> entity_type , [ BankTransactionRule :: class , CompanyGateway :: class , TaxRate :: class , BankIntegration :: class , Scheduler :: class , BankTransaction :: class , Webhook :: class , ExpenseCategory :: class ])){ //table without assigned_user_id
2022-11-14 00:02:01 +01:00
$query -> where ( 'user_id' , '=' , auth () -> user () -> id );
}
2023-01-20 23:59:00 +01:00
elseif ( in_array ( $this -> entity_type ,[ Design :: class , GroupSetting :: class , PaymentTerm :: class ])){
2022-11-14 00:02:01 +01:00
nlog ( $this -> entity_type );
2022-10-06 07:37:39 +02:00
}
else
$query -> where ( 'user_id' , '=' , auth () -> user () -> id ) -> orWhere ( 'assigned_user_id' , auth () -> user () -> id );
2020-11-25 15:19:52 +01:00
}
2023-01-20 23:23:56 +01:00
/**/
2020-11-25 15:19:52 +01:00
if ( request () -> has ( 'updated_at' ) && request () -> input ( 'updated_at' ) > 0 ) {
2020-11-13 10:09:20 +01:00
$query -> where ( 'updated_at' , '>=' , date ( 'Y-m-d H:i:s' , intval ( request () -> input ( 'updated_at' ))));
2020-11-25 15:19:52 +01:00
}
2020-02-28 13:11:56 +01:00
2020-11-25 15:19:52 +01:00
if ( $this -> serializer && $this -> serializer != EntityTransformer :: API_SERIALIZER_JSON ) {
2020-11-13 10:09:20 +01:00
$this -> entity_type = null ;
2020-11-25 15:19:52 +01:00
}
2019-03-28 22:34:58 +01:00
2020-11-13 10:09:20 +01:00
if ( $query instanceof Builder ) {
2022-10-27 02:28:09 +02:00
$limit = $this -> resolveQueryLimit ();
2019-03-28 22:34:58 +01:00
$paginator = $query -> paginate ( $limit );
$query = $paginator -> getCollection ();
2020-11-13 10:09:20 +01:00
$resource = new Collection ( $query , $transformer , $this -> entity_type );
2019-03-28 22:34:58 +01:00
$resource -> setPaginator ( new IlluminatePaginatorAdapter ( $paginator ));
} else {
2020-11-13 10:09:20 +01:00
$resource = new Collection ( $query , $transformer , $this -> entity_type );
2019-03-28 22:34:58 +01:00
}
2020-11-13 10:09:20 +01:00
return $this -> response ( $this -> manager -> createData ( $resource ) -> toArray ());
2019-03-28 22:34:58 +01:00
}
protected function response ( $response )
{
2019-06-25 07:08:07 +02:00
$index = request () -> input ( 'index' ) ? : $this -> forced_index ;
2019-03-28 22:34:58 +01:00
if ( $index == 'none' ) {
unset ( $response [ 'meta' ]);
} else {
$meta = isset ( $response [ 'meta' ]) ? $response [ 'meta' ] : null ;
$response = [
$index => $response ,
];
if ( $meta ) {
$response [ 'meta' ] = $meta ;
unset ( $response [ $index ][ 'meta' ]);
}
2019-09-18 08:02:05 +02:00
2019-12-30 22:59:12 +01:00
if ( request () -> include_static ) {
2019-09-18 08:02:05 +02:00
$response [ 'static' ] = Statics :: company ( auth () -> user () -> getCompany () -> getLocale ());
2019-12-30 22:59:12 +01:00
}
2019-03-28 22:34:58 +01:00
}
2020-09-06 11:38:10 +02:00
2019-09-23 13:29:30 +02:00
ksort ( $response );
2019-03-28 22:34:58 +01:00
$response = json_encode ( $response , JSON_PRETTY_PRINT );
2020-02-10 10:53:02 +01:00
2019-03-28 22:34:58 +01:00
$headers = self :: getApiHeaders ();
2020-09-06 11:38:10 +02:00
2019-03-28 22:34:58 +01:00
return response () -> make ( $response , 200 , $headers );
}
protected function itemResponse ( $item )
{
2019-06-24 02:13:53 +02:00
$this -> buildManager ();
2019-03-28 22:34:58 +01:00
2020-11-13 10:09:20 +01:00
$transformer = new $this -> entity_transformer ( request () -> input ( 'serializer' ));
2019-03-28 22:34:58 +01:00
2020-11-25 15:19:52 +01:00
if ( $this -> serializer && $this -> serializer != EntityTransformer :: API_SERIALIZER_JSON ) {
2020-11-13 10:09:20 +01:00
$this -> entity_type = null ;
2020-11-25 15:19:52 +01:00
}
2021-03-29 12:58:03 +02:00
2020-11-13 11:42:06 +01:00
$resource = new Item ( $item , $transformer , $this -> entity_type );
2019-03-28 22:34:58 +01:00
2020-11-25 15:19:52 +01:00
if ( auth () -> user () && request () -> include_static ) {
2019-09-11 02:37:53 +02:00
$data [ 'static' ] = Statics :: company ( auth () -> user () -> getCompany () -> getLocale ());
2020-11-25 15:19:52 +01:00
}
2020-09-06 11:38:10 +02:00
2020-11-13 10:09:20 +01:00
return $this -> response ( $this -> manager -> createData ( $resource ) -> toArray ());
2019-03-28 22:34:58 +01:00
}
public static function getApiHeaders ( $count = 0 )
{
return [
2022-06-21 11:57:17 +02:00
'Content-Type' => 'application/json' ,
'X-Api-Version' => config ( 'ninja.minimum_client_version' ),
'X-App-Version' => config ( 'ninja.app_version' ),
2019-03-28 22:34:58 +01:00
];
}
protected function getRequestIncludes ( $data )
{
2020-02-06 13:00:22 +01:00
2020-09-06 11:38:10 +02:00
/*
2020-02-10 10:53:02 +01:00
* Thresholds for displaying large account on first load
*/
2020-03-21 06:37:30 +01:00
if ( request () -> has ( 'first_load' ) && request () -> input ( 'first_load' ) == 'true' ) {
2020-07-21 13:19:21 +02:00
if ( auth () -> user () -> getCompany () -> is_large && request () -> missing ( 'updated_at' )) {
2020-07-26 10:30:55 +02:00
$data = $this -> mini_load ;
2020-03-21 06:37:30 +01:00
} else {
2020-07-26 10:30:55 +02:00
$data = $this -> first_load ;
2020-03-21 06:37:30 +01:00
}
} else {
$included = request () -> input ( 'include' );
$included = explode ( ',' , $included );
foreach ( $included as $include ) {
if ( $include == 'clients' ) {
$data [] = 'clients.contacts' ;
} elseif ( $include ) {
$data [] = $include ;
}
}
2019-03-28 22:34:58 +01:00
}
return $data ;
}
2020-09-06 11:38:10 +02:00
2020-02-13 12:27:42 +01:00
public function flutterRoute ()
{
2020-10-26 01:58:08 +01:00
if (( bool ) $this -> checkAppSetup () !== false && $account = Account :: first ()) {
2020-09-06 11:38:10 +02:00
if ( config ( 'ninja.require_https' ) && ! request () -> isSecure ()) {
return redirect () -> secure ( request () -> getRequestUri ());
}
2020-06-28 05:47:13 +02:00
2021-10-19 11:35:06 +02:00
/* Clean up URLs and remove query parameters from the URL*/
2022-06-21 11:57:17 +02:00
if ( request () -> has ( 'login' ) && request () -> input ( 'login' ) == 'true' ) {
return redirect ( '/' ) -> with ([ 'login' => 'true' ]);
}
2021-10-19 11:35:06 +02:00
2022-06-23 10:47:44 +02:00
if ( request () -> has ( 'signup' ) && request () -> input ( 'signup' ) == 'true' ) {
return redirect ( '/' ) -> with ([ 'signup' => 'true' ]);
}
2021-10-19 11:35:06 +02:00
2022-09-06 11:18:05 +02:00
// 06-09-2022 - parse the path if loaded in a subdirectory for canvaskit resolution
2022-09-02 12:53:32 +02:00
$canvas_path_array = parse_url ( config ( 'ninja.app_url' ));
$canvas_path = ( array_key_exists ( 'path' , $canvas_path_array )) ? $canvas_path_array [ 'path' ] : '' ;
2022-09-06 11:18:05 +02:00
$canvas_path = rtrim ( str_replace ( " index.php " , " " , $canvas_path ), '/' );
2022-09-02 12:53:32 +02:00
2020-03-26 04:23:57 +01:00
$data = [];
2020-03-18 10:40:15 +01:00
2021-08-09 00:59:28 +02:00
//pass report errors bool to front end
$data [ 'report_errors' ] = Ninja :: isSelfHost () ? $account -> report_errors : true ;
2021-08-09 00:44:51 +02:00
2023-01-14 21:46:23 +01:00
//pass whitelabel bool to front end
$data [ 'white_label' ] = Ninja :: isSelfHost () ? $account -> isPaid () : false ;
2021-08-09 00:59:28 +02:00
//pass referral code to front end
$data [ 'rc' ] = request () -> has ( 'rc' ) ? request () -> input ( 'rc' ) : '' ;
2021-08-20 11:04:16 +02:00
$data [ 'build' ] = request () -> has ( 'build' ) ? request () -> input ( 'build' ) : '' ;
2022-06-21 11:57:17 +02:00
$data [ 'login' ] = request () -> has ( 'login' ) ? request () -> input ( 'login' ) : 'false' ;
2022-06-23 10:47:44 +02:00
$data [ 'signup' ] = request () -> has ( 'signup' ) ? request () -> input ( 'signup' ) : 'false' ;
2022-09-02 12:53:32 +02:00
$data [ 'canvas_path' ] = $canvas_path ;
2022-06-21 11:57:17 +02:00
if ( request () -> session () -> has ( 'login' )) {
$data [ 'login' ] = 'true' ;
}
2021-10-19 11:35:06 +02:00
2022-06-23 10:47:44 +02:00
if ( request () -> session () -> has ( 'signup' )){
$data [ 'signup' ] = 'true' ;
}
2021-10-19 11:35:06 +02:00
2021-09-15 02:15:14 +02:00
$data [ 'user_agent' ] = request () -> server ( 'HTTP_USER_AGENT' );
2021-08-20 11:04:16 +02:00
$data [ 'path' ] = $this -> setBuild ();
2021-08-09 00:44:51 +02:00
2020-10-09 08:55:03 +02:00
$this -> buildCache ();
2022-06-21 11:57:17 +02:00
if ( Ninja :: isSelfHost () && $account -> set_react_as_default_ap ) {
2022-05-27 05:10:32 +02:00
return response () -> view ( 'react.index' , $data ) -> header ( 'X-Frame-Options' , 'SAMEORIGIN' , false );
2022-06-21 11:57:17 +02:00
} else {
2022-05-27 05:10:32 +02:00
return response () -> view ( 'index.index' , $data ) -> header ( 'X-Frame-Options' , 'SAMEORIGIN' , false );
2022-06-21 11:57:17 +02:00
}
2020-03-25 09:36:47 +01:00
}
2020-03-26 04:23:57 +01:00
return redirect ( '/setup' );
2020-02-13 12:27:42 +01:00
}
2021-03-07 11:14:53 +01:00
2021-08-20 11:04:16 +02:00
private function setBuild ()
{
$build = '' ;
2022-06-21 11:57:17 +02:00
if ( request () -> has ( 'build' )) {
2021-08-20 11:14:27 +02:00
$build = request () -> input ( 'build' );
2022-06-21 11:57:17 +02:00
} elseif ( Ninja :: isHosted ()) {
2021-09-26 10:44:41 +02:00
return 'main.dart.js' ;
}
2021-08-20 11:04:16 +02:00
switch ( $build ) {
case 'wasm' :
2021-08-20 11:25:07 +02:00
return 'main.wasm.dart.js' ;
2021-08-20 11:04:16 +02:00
case 'foss' :
2021-08-20 11:25:07 +02:00
return 'main.foss.dart.js' ;
2021-08-20 11:04:16 +02:00
case 'last' :
2021-08-20 11:25:07 +02:00
return 'main.last.dart.js' ;
2021-08-20 11:04:16 +02:00
case 'next' :
2022-06-21 11:57:17 +02:00
return 'main.next.dart.js' ;
2021-08-25 11:41:03 +02:00
case 'profile' :
2022-06-21 11:57:17 +02:00
return 'main.profile.dart.js' ;
case 'html' :
return 'main.html.dart.js' ;
2021-08-20 11:04:16 +02:00
default :
2021-09-26 10:44:41 +02:00
return 'main.foss.dart.js' ;
2021-09-12 06:55:52 +02:00
2021-08-20 11:04:16 +02:00
}
}
2021-03-07 11:14:53 +01:00
public function checkFeature ( $feature )
{
2022-06-21 11:57:17 +02:00
if ( auth () -> user () -> account -> hasFeature ( $feature )) {
return true ;
}
2021-03-07 11:14:53 +01:00
2022-06-21 11:57:17 +02:00
return false ;
2021-03-07 11:14:53 +01:00
}
public function featureFailure ()
{
2022-06-21 11:57:17 +02:00
return response () -> json ([ 'message' => 'Upgrade to a paid plan for this feature.' ], 403 );
2021-03-07 11:14:53 +01:00
}
2019-12-30 22:59:12 +01:00
}