Laravel 13 + Filament 5 admin panel and REST API for a non-profit developer collective, backed by the Pireon OAuth identity server. The public site is a separate, server-rendered application consuming /api/public/v1. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
51 lines
1.3 KiB
PHP
51 lines
1.3 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Http\Controllers\Api\V1;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Http\Resources\RoleResource;
|
|
use App\Support\Permissions;
|
|
use Illuminate\Http\JsonResponse;
|
|
use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
|
|
use Spatie\Permission\Models\Role;
|
|
|
|
/**
|
|
* Read-only view of the local authorisation model, so clients can render
|
|
* permission-aware UI without hard-coding role names.
|
|
*/
|
|
class RoleController extends Controller
|
|
{
|
|
public function index(): AnonymousResourceCollection
|
|
{
|
|
$this->authorize('viewAny', Role::class);
|
|
|
|
$roles = Role::query()
|
|
->with('permissions')
|
|
->withCount('users')
|
|
->orderBy('name')
|
|
->get();
|
|
|
|
return RoleResource::collection($roles);
|
|
}
|
|
|
|
public function show(Role $role): RoleResource
|
|
{
|
|
$this->authorize('view', $role);
|
|
|
|
return RoleResource::make($role->load('permissions')->loadCount('users'));
|
|
}
|
|
|
|
/**
|
|
* The full permission catalogue, grouped by resource — useful for building
|
|
* a role editor outside the panel.
|
|
*/
|
|
public function catalogue(): JsonResponse
|
|
{
|
|
$this->authorize('viewAny', Role::class);
|
|
|
|
return response()->json(['data' => Permissions::grouped()]);
|
|
}
|
|
}
|