One Hat Cyber Team

View File Name : PaymentsController.php

<?php

namespace App\Http\Controllers;

use App\Models\Payment;
use App\Models\CardOwner;
use App\Models\UploadFile;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Str;
use App\Traits\NotificationTrait;
use Illuminate\Support\Facades\Hash;
use OTIFSolutions\Laravel\Settings\Models\Setting;

class PaymentsController extends Controller
{

    public function __construct()
    {

    }

    public function index(Request $request){

        if (!auth()->user()->hasPermission('READ', env('ADMIN_ROUTE').'_'.\Session::get('current_permission')))
            return response()->json(['Errors' => ['Error' => 'Unauthorized Action']],422);

        return view('dashboard.payments.home',[
            'page' => [
                'type' => 'dashboard',
                'icon' => ' ti ti-cash',
                'name' => 'Payments',
                'url' => 'payments',
                'user_route' => \Session::get('user_route'),
            ],
            'payments' => Payment::where('user_id',Auth::user()['id'])->get(),
        ]);
    }
    
    public function indexNaip(Request $request){

        if (!auth()->user()->hasPermission('READ', env('NAIP_MEMBER_ROUTE').'_'.\Session::get('current_permission')))
            return response()->json(['Errors' => ['Error' => 'Unauthorized Action']],422);

        return view('dashboard.payments.home_naip',[
            'page' => [
                'type' => 'dashboard',
                'icon' => ' ti ti-cash',
                'name' => 'Payments',
                'url' => 'payments',
                'user_route' => \Session::get('user_route'),
            ],
            'payments' => Payment::all(),
        ]);
    }

    public function show($id){

        if (!auth()->user()->hasPermission('READ', env('ADMIN_ROUTE').'_'.\Session::get('current_permission')))
            return response()->json(['Errors' => ['Error' => 'Unauthorized Access.']],422);

        $payment = Payment::find($id);

        return view('dashboard.payments.add',[
            'page' => [
                'type' => 'dashboard',
            ],
            'icon' => ' ti ti-cash',
            'url' => '/'.\Session::get('user_route').'/payments',
            'name' => 'Payment',
            'item' => $payment,
            'card_owners' => CardOwner::where('user_id',Auth::user()['id'])->get(),
            'user_route' => \Session::get('user_route'),
        ]);
    }

    /*public function show($id)
    {
        if (!auth()->user()->hasPermission('READ', env('ADMIN_ROUTE').'_'.\Session::get('current_permission')))
            return response()->json(['Errors' => ['Error' => 'Unauthorized Access.']],422);

        $payment = Payment::find($id);

        return view('dashboard.payments.modal',[
            'type' => 'dashboard',
            'icon' => ' ti ti-cash',
            'url' => '/'.\Session::get('user_route').'/payments',
            'name' => 'Payment',
            'item' => $payment,
            'card_owners' => CardOwner::where('user_id',Auth::user()['id'])->get(),
            'user_route' => \Session::get('user_route'),
        ]);
    }*/

    public function view($id)
    {
        if (!auth()->user()->hasPermission('READ', env('ADMIN_ROUTE').'_'.\Session::get('current_permission')))
            return response()->json(['Errors' => ['Error' => 'Unauthorized Access.']],422);

        $payment = Payment::find($id);
        if(!$payment)
            return response()->json(['errors' => ['error' => 'Payment Not Found']],422);

        return view('dashboard.payments.view',[
            'type' => 'dashboard',
            'icon' => ' ti ti-cash',
            'url' => '/'.\Session::get('user_route').'/payments',
            'name' => 'Payment',
            'payment' => $payment,
            'card_owners' => CardOwner::where('user_id',Auth::user()['id'])->get(),
            'user_route' => \Session::get('user_route'),
        ]);
    }

    public  function store(Request $request)
    {
        $request->validate([
            'card_owner' => 'required',
            'payment_date' => 'required',
            'payment_transaction_id' => 'required',
        ]);

        $payment = Payment::find($request['id']);
        if ($payment === null){
            if (!Auth::user()->hasPermission('CREATE', env('ADMIN_ROUTE').'_'.\Session::get('current_permission')))
                return response()->json(['Errors' => ['Error' => 'Unauthorized Access.']],422);
            $payment = new Payment();
        }else {
            if (!Auth::user()->hasPermission('UPDATE', env('ADMIN_ROUTE').'_'.\Session::get('current_permission')))
                return response()->json(['Errors' => ['Error' => 'Unauthorized Access.']], 422);
        }

        $cardOwnerIds = $request->input('card_owner');
        $userCardFees = Setting::get('user_card_fees');
        $amount = count($cardOwnerIds) * $userCardFees;

        $payment['amount'] = $amount;
        $payment['payment_date'] = $request['payment_date'];
        $payment['user_id'] = Auth::user()['id'];
        $payment['payment_transaction_id'] = $request['payment_transaction_id'];
        $payment->save();

        // Attach selected card_owners to the payment
        $payment->cardOwners()->attach($cardOwnerIds);

        $user = Auth::user();
        $roleName = $user['user_role']['name'];
        $name = $user['name'] ?? ('User id[' . $user['id']. ']');
        foreach ($payment->cardOwners as $cardOwner){
            NotificationTrait::createActivity(
                $user['id'],
                $name . ' ('. $roleName .') has created payment for user id (' . $cardOwner['qr_string'] . ') at ' . $request->url(),
                'PAYMENT',
                $roleName,
                true,
                true,
                NotificationTrait::getUserIp()
            );
        }

        return response()->json([
            'location' => '/'.\Session::get('user_route').'/payments',
            'message' => 'Payment Saved. Redirecting Now'
        ]);
    }

    public function uploadImage(Request $request)
    {
        if(!$request['invoice_image'][0])
            return response()->json(['Errors' => ['Error' => 'File not found']],422);

        if (!Auth::user()->hasPermission('CREATE', env('ADMIN_ROUTE').'_'.\Session::get('current_permission')))
            return response()->json(['Errors' => ['Error' => 'Unauthorized Access.']],422);

        $image = new UploadFile();

        /*$image['filename'] = Str::random(32).'.'.\File::extension($request['invoice_image'][0]->getClientOriginalName());
        $request['invoice_image'][0]->storePubliclyAs("public",$image['filename']);
        $image['original_name'] = $request['invoice_image'][0]->getClientOriginalName();*/


        $filename = Str::random(32).'.'.\File::extension($request['invoice_image'][0]->getClientOriginalName());
        $path = $request['invoice_image'][0]->storeAs('files', $filename, 's3');
        $image['filename'] = $path;
        $image['original_name'] = $request['invoice_image'][0]->getClientOriginalName();


        $image->save();
        return response()->json([
            'status' => 'success',
            'file' => $image,
            'message' => 'Upload Success.',
        ]);

    }

    public function removeImage(Request $request){
        if (!auth()->user()->hasPermission('DELETE', \Session::get('user_route').'_'.\Session::get('current_permission')))
            return response()->json(['Errors' => ['Error' => 'Unauthorized Access.']],422);

        $image = UploadFile::find($request['id']);
        if(!$image)
            return response()->json(['Errors' => ['Error' => 'File not found']],422);
        if (is_file(storage_path('app/public/'.$image['filename'])))
            unlink(storage_path('app/public/'.$image['filename']));
        $image->delete();
        return response()->json([
            'status' => 'success',
            'message' => 'Image Removed.'
        ]);
    }

}