46 lines
1.4 KiB
PHP
46 lines
1.4 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace App\Http\Controllers;
|
||
|
|
|
||
|
|
use Illuminate\Http\RedirectResponse;
|
||
|
|
use Illuminate\Http\Request;
|
||
|
|
use Illuminate\Support\Facades\Auth;
|
||
|
|
use Illuminate\View\View;
|
||
|
|
use Laravel\Sanctum\PersonalAccessToken;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Jetons de l'API publique (bloc B, CLAUDE.md) : un prof en crée pour un
|
||
|
|
* usage développeur (le sien ou celui d'un tiers à qui il le transmet).
|
||
|
|
* Le jeton en clair n'est montré qu'une fois à la création — même règle
|
||
|
|
* que le code secret d'un élève (ClasseController).
|
||
|
|
*/
|
||
|
|
class TokenApiController extends Controller
|
||
|
|
{
|
||
|
|
public function index(): View
|
||
|
|
{
|
||
|
|
$prof = Auth::guard('web')->user();
|
||
|
|
|
||
|
|
return view('jetons-api', ['jetons' => $prof->tokens()->latest()->get()]);
|
||
|
|
}
|
||
|
|
|
||
|
|
public function store(Request $request): RedirectResponse
|
||
|
|
{
|
||
|
|
$donnees = $request->validate(['nom' => ['required', 'string', 'max:80']]);
|
||
|
|
|
||
|
|
$prof = Auth::guard('web')->user();
|
||
|
|
$jeton = $prof->createToken($donnees['nom'], ['catalogue:lire']);
|
||
|
|
|
||
|
|
return redirect()->route('jetons-api.index')->with('jeton_cree', $jeton->plainTextToken);
|
||
|
|
}
|
||
|
|
|
||
|
|
public function destroy(PersonalAccessToken $jeton): RedirectResponse
|
||
|
|
{
|
||
|
|
$prof = Auth::guard('web')->user();
|
||
|
|
abort_if($jeton->tokenable_id !== $prof->id || $jeton->tokenable_type !== $prof::class, 403);
|
||
|
|
|
||
|
|
$jeton->delete();
|
||
|
|
|
||
|
|
return redirect()->route('jetons-api.index');
|
||
|
|
}
|
||
|
|
}
|