latest

backend/app/Http/Controllers/Api/UserController.php

@@ -0,0 +1,97 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Actions\Users\AssignRoleAction;
+use App\Actions\Users\CreateUserAction;
+use App\Actions\Users\DeleteUserAction;
+use App\Actions\Users\UpdateUserAction;
+use App\Events\RoleAssigned;
+use App\Events\UserCreated;
+use App\Events\UserDeleted;
+use App\Events\UserUpdated;
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Users\AssignRoleRequest;
+use App\Http\Requests\Users\StoreUserRequest;
+use App\Http\Requests\Users\UpdateUserRequest;
+use App\Http\Resources\UserResource;
+use App\Models\User;
+use App\Services\Audit\AuditLogger;
+use Illuminate\Http\Request;
+
+class UserController extends Controller
+{
+    public function index(Request $request)
+    {
+        $this->authorize('viewAny', User::class);
+
+        $query = User::query()->with('roles');
+
+        if ($search = $request->string('search')->toString()) {
+            $query->where(function ($q) use ($search) {
+                $q->where('name', 'like', "%{$search}%")
+                    ->orWhere('username', 'like', "%{$search}%")
+                    ->orWhere('email', 'like', "%{$search}%");
+            });
+        }
+
+        $sort = in_array($request->query('sort'), ['name', 'username', 'email', 'created_at'], true)
+            ? $request->query('sort')
+            : 'created_at';
+        $direction = $request->query('direction') === 'asc' ? 'asc' : 'desc';
+
+        $users = $query->orderBy($sort, $direction)->paginate($request->integer('per_page', 15));
+
+        return UserResource::collection($users);
+    }
+
+    public function store(StoreUserRequest $request, CreateUserAction $action, AuditLogger $audit)
+    {
+        $user = $action->execute($request->validated(), $request->user());
+
+        event(new UserCreated($user, $request->user()));
+        $audit->log($request->user(), 'user.created', $user);
+
+        return UserResource::make($user)->response()->setStatusCode(201);
+    }
+
+    public function show(Request $request, User $user)
+    {
+        $this->authorize('view', $user);
+
+        return UserResource::make($user->load('roles'));
+    }
+
+    public function update(UpdateUserRequest $request, User $user, UpdateUserAction $action, AuditLogger $audit)
+    {
+        $user = $action->execute($user, $request->validated());
+
+        event(new UserUpdated($user, $request->user()));
+        $audit->log($request->user(), 'user.updated', $user);
+
+        return UserResource::make($user);
+    }
+
+    public function destroy(Request $request, User $user, DeleteUserAction $action, AuditLogger $audit)
+    {
+        $this->authorize('delete', $user);
+
+        $action->execute($user);
+
+        event(new UserDeleted($user, $request->user()));
+        $audit->log($request->user(), 'user.deleted', $user);
+
+        return response()->noContent();
+    }
+
+    public function assignRole(AssignRoleRequest $request, User $user, AssignRoleAction $action, AuditLogger $audit)
+    {
+        $role = $request->string('role')->toString();
+        $user = $action->execute($user, $role);
+
+        event(new RoleAssigned($user, $request->user(), $role));
+        $audit->log($request->user(), 'user.role_assigned', $user, ['role' => $role]);
+
+        return UserResource::make($user);
+    }
+}