sfp_api_laravel_serprati/app/Http/Controllers/UserDependentController.php

<?php

namespace App\Http\Controllers;

use App\Http\Requests\UserDependentRequest;
use App\Http\Resources\UserDependentResource;
use App\Services\UserDependentService;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;

class UserDependentController extends Controller
{
    public function __construct(protected UserDependentService $service) {}

    private function deniesAccessToUser(int $userId): bool
    {
        $user = Auth::user();

        return $user?->isAssociado() && $user->id !== $userId;
    }

    public function indexByUser(int $userId): JsonResponse
    {
        if ($this->deniesAccessToUser($userId)) {
            return $this->errorResponse(message: __('messages.unauthorized'), code: 403);
        }

        $items = $this->service->getAllByUser($userId);
        return $this->successResponse(payload: UserDependentResource::collection($items));
    }

    public function indexPaginated(Request $request): JsonResponse
    {
        $filters = $request->only(['status', 'search']);
        $perPage = min((int) $request->get('per_page', 10), 100);
        $paginator = $this->service->getAllPaginated($filters, $perPage);

        return $this->successResponse(payload: [
            'data'  => UserDependentResource::collection($paginator->items()),
            'total' => $paginator->total(),
            'from'  => $paginator->firstItem() ?? 0,
            'to'    => $paginator->lastItem() ?? 0,
        ]);
    }

    public function store(UserDependentRequest $request): JsonResponse
    {
        $item = $this->service->create($request->validated(), $request->file('document'));
        return $this->successResponse(
            payload: new UserDependentResource($item),
            message: __('messages.created'),
            code: 201,
        );
    }

    public function show(int $id): JsonResponse
    {
        $item = $this->service->findById($id);

        if (!$item) {
            return $this->errorResponse(message: __('messages.not_found'), code: 404);
        }

        if ($this->deniesAccessToUser($item->responsible_user_id)) {
            return $this->errorResponse(message: __('messages.unauthorized'), code: 403);
        }

        return $this->successResponse(payload: new UserDependentResource($item));
    }

    public function update(UserDependentRequest $request, int $id): JsonResponse
    {
        $current = $this->service->findById($id);

        if (!$current) {
            return $this->errorResponse(message: __('messages.not_found'), code: 404);
        }

        if ($this->deniesAccessToUser($current->responsible_user_id)) {
            return $this->errorResponse(message: __('messages.unauthorized'), code: 403);
        }

        $item = $this->service->update($id, $request->validated());
        return $this->successResponse(
            payload: new UserDependentResource($item),
            message: __('messages.updated'),
        );
    }

    public function destroy(int $id): JsonResponse
    {
        $current = $this->service->findById($id);

        if (!$current) {
            return $this->errorResponse(message: __('messages.not_found'), code: 404);
        }

        if ($this->deniesAccessToUser($current->responsible_user_id)) {
            return $this->errorResponse(message: __('messages.unauthorized'), code: 403);
        }

        $this->service->delete($id);
        return $this->successResponse(message: __('messages.deleted'), code: 204);
    }

    public function approve(int $id): JsonResponse
    {
        $item = $this->service->approve($id);
        if (!$item) {
            return $this->errorResponse(message: __('messages.not_found'), code: 404);
        }
        return $this->successResponse(payload: new UserDependentResource($item), message: __('messages.updated'));
    }

    public function refuse(int $id): JsonResponse
    {
        $item = $this->service->refuse($id);
        if (!$item) {
            return $this->errorResponse(message: __('messages.not_found'), code: 404);
        }
        return $this->successResponse(payload: new UserDependentResource($item), message: __('messages.updated'));
    }
}