57 lines
1.8 KiB
PHP
57 lines
1.8 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Http\Controllers\Api\V1;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Http\Resources\SettingResource;
|
|
use App\Models\Setting;
|
|
use App\Support\ContentVersion;
|
|
use App\Support\Maintenance;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
|
|
|
|
/**
|
|
* Runtime settings, as the panel's settings screen shows them: the ones that
|
|
* exist, each value as the JSON it is. None is created or deleted from here.
|
|
*/
|
|
class SettingController extends Controller
|
|
{
|
|
/**
|
|
* Written by the application, never by hand: a hand-set content version
|
|
* would leave the frontend's cache serving stale pages or refetching them
|
|
* for nothing.
|
|
*/
|
|
protected const READ_ONLY = [ContentVersion::KEY];
|
|
|
|
public function index(Request $request): AnonymousResourceCollection
|
|
{
|
|
$this->authorize('settings.view');
|
|
|
|
return SettingResource::collection(Setting::query()->orderBy('key')->get());
|
|
}
|
|
|
|
public function show(Setting $setting): SettingResource
|
|
{
|
|
$this->authorize('settings.view');
|
|
|
|
return SettingResource::make($setting);
|
|
}
|
|
|
|
public function update(Request $request, Setting $setting): SettingResource
|
|
{
|
|
// Taking the site down is its own permission, in the panel as here.
|
|
$this->authorize($setting->key === Maintenance::KEY ? 'settings.maintenance' : 'settings.update');
|
|
|
|
abort_if(in_array($setting->key, self::READ_ONLY, true), 403, __('rules.settings.read_only'));
|
|
|
|
// `present` rather than `required`: null is a value a setting may hold.
|
|
$request->validate(['value' => ['present']]);
|
|
|
|
$setting->update(['value' => $request->input('value')]);
|
|
|
|
return SettingResource::make($setting);
|
|
}
|
|
}
|