- Galerien sind nun eine Entität - es kann mehrere geben

- Neues Sparkbooth-Upload-Feature: Endpoint /api/sparkbooth/upload (Token-basiert pro Galerie), Controller Api/SparkboothUploadController, Migration 2026_01_21_000001_add_upload_fields_to_galleries_table.php mit Upload-Flags/Token/Expiry;
    Galerie-Modell und Factory/Seeder entsprechend erweitert.
  - Filament: Neue Setup-Seite SparkboothSetup (mit View) zur schnellen Galerie- und Token-Erstellung inkl. QR/Endpoint/Snippet;
    Galerie-Link-Views nutzen jetzt simple-qrcode (Composer-Dependency hinzugefügt) und bieten PNG-Download.
  - Galerie-Tabelle: Slug/Pfad-Spalten entfernt, Action „Link-Details“ mit Modal; Created-at-Spalte hinzugefügt.
  - Zugriffshärtung: Galerie-IDs in API (ImageController, Download/Print) geprüft; GalleryAccess/Middleware + Gallery-Modell/Slug-UUID
    eingeführt; GalleryAccess-Inertia-Seite.
  - UI/UX: LoadingSpinner/StyledImageDisplay verbessert, Delete-Confirm, Übersetzungen ergänzt.

app/Filament/Pages/GlobalSettings.php

@@ -5,6 +5,8 @@ namespace App\Filament\Pages;
 use App\Services\PrinterService;
 use App\Settings\GeneralSettings;
 use BackedEnum;
+use Carbon\Carbon;
+use Filament\Forms\Components\DateTimePicker;
 use Filament\Forms\Components\Select;
 use Filament\Forms\Components\TextInput;
 use Filament\Forms\Components\Toggle;
@@ -14,6 +16,7 @@ use Filament\Notifications\Notification;
 use Filament\Pages\Page;
 use Filament\Schemas\Schema;
 use Illuminate\Support\Arr;
+use Illuminate\Support\Facades\Hash;
 use UnitEnum;
 
 class GlobalSettings extends Page implements HasForms
@@ -40,7 +43,10 @@ class GlobalSettings extends Page implements HasForms
 
     public function mount(GeneralSettings $settings): void
     {
-        $this->form->fill($settings->toArray());
+        $data = $settings->toArray();
+        $data['gallery_password'] = null;
+
+        $this->form->fill($data);
     }
 
     public function form(Schema $schema): Schema
@@ -59,6 +65,24 @@ class GlobalSettings extends Page implements HasForms
                 TextInput::make('gallery_heading')
                     ->label(__('filament.resource.setting.form.gallery_heading'))
                     ->required(),
+                Toggle::make('require_gallery_password')
+                    ->label(__('filament.resource.setting.form.require_gallery_password'))
+                    ->helperText(__('filament.resource.setting.form.require_gallery_password_help')),
+                TextInput::make('gallery_password')
+                    ->label(__('filament.resource.setting.form.gallery_password'))
+                    ->password()
+                    ->revealable()
+                    ->helperText(__('filament.resource.setting.form.gallery_password_help'))
+                    ->dehydrated(true),
+                DateTimePicker::make('gallery_expires_at')
+                    ->label(__('filament.resource.setting.form.gallery_expires_at'))
+                    ->native(false)
+                    ->seconds(false),
+                TextInput::make('gallery_access_duration_minutes')
+                    ->label(__('filament.resource.setting.form.gallery_access_duration_minutes'))
+                    ->numeric()
+                    ->minValue(1)
+                    ->helperText(__('filament.resource.setting.form.gallery_access_duration_help')),
                 TextInput::make('new_image_timespan_minutes')
                     ->label(__('filament.resource.setting.form.new_image_timespan_minutes'))
                     ->numeric()
@@ -92,11 +116,39 @@ class GlobalSettings extends Page implements HasForms
             $data['custom_printer_address'] = null;
         }
 
+        $data['require_gallery_password'] = (bool) Arr::get($data, 'require_gallery_password', false);
         $data['new_image_timespan_minutes'] = (int) Arr::get($data, 'new_image_timespan_minutes', 0);
         $data['image_refresh_interval'] = (int) Arr::get($data, 'image_refresh_interval', 0);
         $data['max_number_of_copies'] = (int) Arr::get($data, 'max_number_of_copies', 0);
         $data['show_print_button'] = (bool) Arr::get($data, 'show_print_button', false);
         $data['custom_printer_address'] = $data['custom_printer_address'] ?: null;
+        $duration = Arr::get($data, 'gallery_access_duration_minutes');
+        $data['gallery_access_duration_minutes'] = $duration === null || $duration === '' ? null : (int) $duration;
+
+        $expiresAt = Arr::get($data, 'gallery_expires_at');
+        $data['gallery_expires_at'] = $expiresAt ? Carbon::parse($expiresAt) : null;
+
+        $newPassword = Arr::get($data, 'gallery_password');
+        $currentHash = $settings->gallery_password_hash;
+
+        if (! $data['require_gallery_password']) {
+            $data['gallery_password_hash'] = null;
+        } else {
+            $data['gallery_password_hash'] = $newPassword
+                ? Hash::make($newPassword)
+                : $currentHash;
+
+            if (! $data['gallery_password_hash']) {
+                Notification::make()
+                    ->title(__('filament.resource.setting.form.gallery_password_missing'))
+                    ->danger()
+                    ->send();
+
+                return;
+            }
+        }
+
+        unset($data['gallery_password']);
 
         $settings->fill($data)->save();
 

app/Filament/Pages/SparkboothSetup.php

@@ -0,0 +1,107 @@
+<?php
+
+namespace App\Filament\Pages;
+
+use App\Models\Gallery;
+use BackedEnum;
+use Filament\Forms\Components\TextInput;
+use Filament\Forms\Components\Toggle;
+use Filament\Forms\Concerns\InteractsWithForms;
+use Filament\Forms\Contracts\HasForms;
+use Filament\Notifications\Notification;
+use Filament\Pages\Page;
+use Filament\Schemas\Schema;
+use Illuminate\Support\Str;
+use UnitEnum;
+
+class SparkboothSetup extends Page implements HasForms
+{
+    use InteractsWithForms;
+
+    protected static string|BackedEnum|null $navigationIcon = 'heroicon-o-camera';
+
+    protected static string|UnitEnum|null $navigationGroup = 'Admin';
+
+    protected static ?int $navigationSort = 10;
+
+    protected string $view = 'filament.pages.sparkbooth-setup';
+
+    public ?array $data = [];
+
+    public ?array $result = null;
+
+    public function getTitle(): string
+    {
+        return 'Sparkbooth Setup';
+    }
+
+    public function form(Schema $schema): Schema
+    {
+        return $schema
+            ->schema([
+                TextInput::make('name')
+                    ->label('Event-Name')
+                    ->required(),
+                TextInput::make('title')
+                    ->label('Galerie Titel')
+                    ->required(),
+                TextInput::make('images_path')
+                    ->label('Upload-Pfad')
+                    ->helperText('Relativ zu public/storage, z.B. uploads/event-xyz')
+                    ->default(fn () => 'uploads/'.Str::slug('event-'.Str::random(4)))
+                    ->required(),
+                Toggle::make('allow_print')
+                    ->label('Drucken erlauben')
+                    ->default(true),
+                Toggle::make('allow_ai_styles')
+                    ->label('AI-Stile erlauben')
+                    ->default(true),
+                Toggle::make('upload_enabled')
+                    ->label('Uploads aktivieren')
+                    ->default(true),
+            ])
+            ->statePath('data');
+    }
+
+    public function save(): void
+    {
+        $data = $this->form->getState();
+
+        $gallery = new Gallery([
+            'name' => $data['name'],
+            'title' => $data['title'],
+            'images_path' => trim($data['images_path'], '/'),
+            'is_public' => true,
+            'allow_ai_styles' => (bool) $data['allow_ai_styles'],
+            'allow_print' => (bool) $data['allow_print'],
+            'upload_enabled' => (bool) $data['upload_enabled'],
+        ]);
+
+        $gallery->slug = Str::uuid()->toString();
+
+        $plainToken = Str::random(40);
+        $gallery->setUploadToken($plainToken);
+        $gallery->save();
+
+        $this->result = [
+            'gallery' => $gallery->only(['id', 'name', 'slug', 'images_path']),
+            'upload_token' => $plainToken,
+            'upload_url' => route('api.sparkbooth.upload'),
+            'gallery_url' => route('gallery.show', $gallery),
+        ];
+
+        Notification::make()
+            ->title('Galerie erstellt und Upload-Token generiert.')
+            ->success()
+            ->send();
+    }
+
+    protected function getFormActions(): array
+    {
+        return [
+            \Filament\Actions\Action::make('save')
+                ->label('Setup erstellen')
+                ->submit('save'),
+        ];
+    }
+}

app/Filament/Resources/Galleries/GalleryResource.php

@@ -0,0 +1,86 @@
+<?php
+
+namespace App\Filament\Resources\Galleries;
+
+use App\Filament\Resources\Galleries\Pages\CreateGallery;
+use App\Filament\Resources\Galleries\Pages\EditGallery;
+use App\Filament\Resources\Galleries\Pages\ListGalleries;
+use App\Filament\Resources\Galleries\Schemas\GalleryForm;
+use App\Filament\Resources\Galleries\Tables\GalleriesTable;
+use App\Models\Gallery;
+use BackedEnum;
+use Filament\Resources\Resource;
+use Filament\Schemas\Schema;
+use Filament\Support\Icons\Heroicon;
+use Filament\Tables\Table;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Str;
+use UnitEnum;
+
+class GalleryResource extends Resource
+{
+    protected static ?string $model = Gallery::class;
+
+    protected static string|BackedEnum|null $navigationIcon = Heroicon::OutlinedRectangleStack;
+
+    protected static UnitEnum|string|null $navigationGroup = 'Content';
+
+    public static function getNavigationGroup(): ?string
+    {
+        return __('filament.navigation.groups.content');
+    }
+
+    public static function form(Schema $schema): Schema
+    {
+        return GalleryForm::configure($schema);
+    }
+
+    public static function table(Table $table): Table
+    {
+        return GalleriesTable::configure($table);
+    }
+
+    public static function getRelations(): array
+    {
+        return [
+            //
+        ];
+    }
+
+    public static function getPages(): array
+    {
+        return [
+            'index' => ListGalleries::route('/'),
+            'create' => CreateGallery::route('/create'),
+            'edit' => EditGallery::route('/{record}/edit'),
+        ];
+    }
+
+    public static function mutateFormDataBeforeCreate(array $data): array
+    {
+        $data = self::mutatePassword($data);
+        $data['slug'] = $data['slug'] ?: Str::uuid()->toString();
+
+        return $data;
+    }
+
+    public static function mutateFormDataBeforeSave(array $data): array
+    {
+        $data = self::mutatePassword($data);
+        $data['slug'] = $data['slug'] ?: Str::uuid()->toString();
+
+        return $data;
+    }
+
+    private static function mutatePassword(array $data): array
+    {
+        $password = $data['password'] ?? null;
+        unset($data['password']);
+
+        if (! empty($password)) {
+            $data['password_hash'] = Hash::make($password);
+        }
+
+        return $data;
+    }
+}

app/Filament/Resources/Galleries/Pages/CreateGallery.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\Resources\Galleries\Pages;
+
+use App\Filament\Resources\Galleries\GalleryResource;
+use Filament\Resources\Pages\CreateRecord;
+
+class CreateGallery extends CreateRecord
+{
+    protected static string $resource = GalleryResource::class;
+}

app/Filament/Resources/Galleries/Pages/EditGallery.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Filament\Resources\Galleries\Pages;
+
+use App\Filament\Resources\Galleries\GalleryResource;
+use Filament\Actions\DeleteAction;
+use Filament\Resources\Pages\EditRecord;
+
+class EditGallery extends EditRecord
+{
+    protected static string $resource = GalleryResource::class;
+
+    protected function getHeaderActions(): array
+    {
+        return [
+            DeleteAction::make(),
+        ];
+    }
+}

app/Filament/Resources/Galleries/Pages/ListGalleries.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Filament\Resources\Galleries\Pages;
+
+use App\Filament\Resources\Galleries\GalleryResource;
+use Filament\Actions\CreateAction;
+use Filament\Resources\Pages\ListRecords;
+
+class ListGalleries extends ListRecords
+{
+    protected static string $resource = GalleryResource::class;
+
+    protected function getHeaderActions(): array
+    {
+        return [
+            CreateAction::make(),
+        ];
+    }
+}

app/Filament/Resources/Galleries/Schemas/GalleryForm.php

@@ -0,0 +1,74 @@
+<?php
+
+namespace App\Filament\Resources\Galleries\Schemas;
+
+use Filament\Forms\Components\DateTimePicker;
+use Filament\Forms\Components\TextInput;
+use Filament\Forms\Components\Toggle;
+use Filament\Schemas\Components\Section;
+use Filament\Schemas\Components\View;
+use Filament\Schemas\Schema;
+use Illuminate\Support\Facades\URL;
+
+class GalleryForm
+{
+    public static function configure(Schema $schema): Schema
+    {
+        return $schema
+            ->components([
+                Section::make('Details')
+                    ->columns(2)
+                    ->schema([
+                        TextInput::make('name')
+                            ->label('Name')
+                            ->required(),
+                        TextInput::make('slug')
+                            ->label('Slug')
+                            ->disabled()
+                            ->dehydrated(true)
+                            ->helperText('Wird automatisch erzeugt'),
+                        TextInput::make('title')
+                            ->label('Titel')
+                            ->required(),
+                        TextInput::make('images_path')
+                            ->label('Bilder-Pfad')
+                            ->helperText('Relativer Pfad unter public/storage')
+                            ->required(),
+                        Toggle::make('is_public')
+                            ->label('Öffentlich')
+                            ->default(true),
+                        Toggle::make('allow_ai_styles')
+                            ->label('AI-Stile erlauben')
+                            ->default(true),
+                        Toggle::make('allow_print')
+                            ->label('Drucken erlauben')
+                            ->default(true),
+                        Toggle::make('require_password')
+                            ->label('Passwortschutz aktiv')
+                            ->default(false),
+                        TextInput::make('password')
+                            ->label('Neues Passwort')
+                            ->password()
+                            ->revealable()
+                            ->dehydrated(false)
+                            ->helperText('Leer lassen, um das bestehende Passwort zu behalten.'),
+                        DateTimePicker::make('expires_at')
+                            ->label('Ablaufdatum')
+                            ->native(false)
+                            ->seconds(false),
+                        TextInput::make('access_duration_minutes')
+                            ->label('Zugriffsdauer (Minuten)')
+                            ->numeric()
+                            ->minValue(1)
+                            ->nullable()
+                            ->helperText('Optional: Zeitfenster nach dem ersten Unlock.'),
+                    ]),
+                View::make('filament.components.gallery-link')
+                    ->columnSpanFull()
+                    ->visible(fn (?object $record) => (bool) $record?->id)
+                    ->viewData(fn (?object $record) => [
+                        'url' => $record ? URL::route('gallery.show', $record) : null,
+                    ]),
+            ]);
+    }
+}

app/Filament/Resources/Galleries/Tables/GalleriesTable.php

@@ -0,0 +1,63 @@
+<?php
+
+namespace App\Filament\Resources\Galleries\Tables;
+
+use Filament\Actions\Action;
+use Filament\Actions\BulkActionGroup;
+use Filament\Actions\DeleteBulkAction;
+use Filament\Actions\EditAction;
+use Filament\Tables\Columns\IconColumn;
+use Filament\Tables\Columns\TextColumn;
+use Filament\Tables\Table;
+
+class GalleriesTable
+{
+    public static function configure(Table $table): Table
+    {
+        return $table
+            ->columns([
+                TextColumn::make('title')
+                    ->label('Titel')
+                    ->sortable()
+                    ->searchable(),
+                IconColumn::make('allow_ai_styles')
+                    ->label('AI-Stile')
+                    ->boolean(),
+                IconColumn::make('allow_print')
+                    ->label('Drucken')
+                    ->boolean(),
+                IconColumn::make('require_password')
+                    ->label('Passwort')
+                    ->boolean(),
+                TextColumn::make('expires_at')
+                    ->label('Läuft ab')
+                    ->dateTime()
+                    ->sortable(),
+                TextColumn::make('created_at')
+                    ->label('Erstellt am')
+                    ->dateTime('d.m.Y H:i')
+                    ->sortable(),
+            ])
+            ->filters([
+                //
+            ])
+            ->recordActions([
+                EditAction::make(),
+                Action::make('link_details')
+                    ->label('Link-Details')
+                    ->icon('heroicon-o-link')
+                    ->modalHeading('Link-Details')
+                    ->modalContent(fn ($record) => view('filament.components.gallery-link-modal', [
+                        'record' => $record,
+                        'url' => route('gallery.show', $record),
+                    ]))
+                    ->modalSubmitAction(false)
+                    ->modalCancelAction(false),
+            ])
+            ->toolbarActions([
+                BulkActionGroup::make([
+                    DeleteBulkAction::make(),
+                ]),
+            ]);
+    }
+}