- Galerien sind nun eine Entität - es kann mehrere geben

- Neues Sparkbooth-Upload-Feature: Endpoint /api/sparkbooth/upload (Token-basiert pro Galerie), Controller Api/SparkboothUploadController, Migration 2026_01_21_000001_add_upload_fields_to_galleries_table.php mit Upload-Flags/Token/Expiry;
    Galerie-Modell und Factory/Seeder entsprechend erweitert.
  - Filament: Neue Setup-Seite SparkboothSetup (mit View) zur schnellen Galerie- und Token-Erstellung inkl. QR/Endpoint/Snippet;
    Galerie-Link-Views nutzen jetzt simple-qrcode (Composer-Dependency hinzugefügt) und bieten PNG-Download.
  - Galerie-Tabelle: Slug/Pfad-Spalten entfernt, Action „Link-Details“ mit Modal; Created-at-Spalte hinzugefügt.
  - Zugriffshärtung: Galerie-IDs in API (ImageController, Download/Print) geprüft; GalleryAccess/Middleware + Gallery-Modell/Slug-UUID
    eingeführt; GalleryAccess-Inertia-Seite.
  - UI/UX: LoadingSpinner/StyledImageDisplay verbessert, Delete-Confirm, Übersetzungen ergänzt.

routes/api.php

@@ -1,10 +1,14 @@
 <?php
 
-use Illuminate\Http\Request;
-use Illuminate\Support\Facades\Route;
+use App\Http\Controllers\Admin\NavigationStateController;
 use App\Http\Controllers\Api\AiStatusController;
 use App\Http\Controllers\Api\ImageController;
+use App\Http\Controllers\Api\SparkboothUploadController;
 use App\Http\Controllers\Api\StyleController;
+use App\Http\Controllers\DownloadController;
+use App\Http\Controllers\PrintController;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Route;
 
 /*
 |--------------------------------------------------------------------------
@@ -17,35 +21,35 @@ use App\Http\Controllers\Api\StyleController;
 |
 */
 
-use App\Http\Controllers\Admin\NavigationStateController;
-
 Route::middleware('auth:sanctum')->get('/user', function (Request $request) {
     return $request->user();
 });
 
 Route::get('/ai-status', [AiStatusController::class, 'checkStatus']);
 Route::post('/ai-status/update', [AiStatusController::class, 'checkAndUpdateStatus']);
+Route::post('/sparkbooth/upload', [SparkboothUploadController::class, 'store'])
+    ->middleware('throttle:30,1')
+    ->name('api.sparkbooth.upload');
 
 Route::post('/admin/navigation-state', [NavigationStateController::class, 'store'])->middleware('auth:sanctum');
 
-// Publicly accessible routes
-Route::get('/images', [ImageController::class, 'index']);
-Route::get('/styles', [StyleController::class, 'index']);
-Route::get('/image-refresh-interval', [StyleController::class, 'getImageRefreshInterval']);
-Route::get('/max-copies-setting', [StyleController::class, 'getMaxNumberOfCopies']);
+Route::middleware('gallery.access')->group(function () {
+    Route::get('/images', [ImageController::class, 'index']);
+    Route::get('/styles', [StyleController::class, 'index']);
+    Route::get('/image-refresh-interval', [StyleController::class, 'getImageRefreshInterval']);
+    Route::get('/max-copies-setting', [StyleController::class, 'getMaxNumberOfCopies']);
 
-Route::post('/images/style-change', [ImageController::class, 'styleChangeRequest']);
-Route::get('/comfyui-url', [ImageController::class, 'getComfyUiUrl']);
+    Route::post('/images/style-change', [ImageController::class, 'styleChangeRequest']);
+    Route::get('/comfyui-url', [ImageController::class, 'getComfyUiUrl']);
+    Route::delete('/images/{image}/styled', [ImageController::class, 'deleteStyled']);
 
-Route::middleware('auth:sanctum')->group(function () {
-    Route::post('/images/keep', [ImageController::class, 'keepImage']);
-    Route::delete('/images/{image}', [ImageController::class, 'deleteImage']);
-    Route::get('/images/status', [ImageController::class, 'getStatus']);
+    Route::middleware('auth:sanctum')->group(function () {
+        Route::post('/images/keep', [ImageController::class, 'keepImage']);
+        Route::delete('/images/{image}', [ImageController::class, 'deleteImage']);
+        Route::get('/images/status', [ImageController::class, 'getStatus']);
+    });
+
+    Route::get('/images/fetch-styled/{prompt_id}', [ImageController::class, 'fetchStyledImage']);
+    Route::post('/print-image', [PrintController::class, 'printImage']);
+    Route::post('/download-image', [DownloadController::class, 'downloadImage']);
 });
-
-Route::get('/images/fetch-styled/{prompt_id}', [ImageController::class, 'fetchStyledImage']);
-
-use App\Http\Controllers\PrintController;
-use App\Http\Controllers\DownloadController;
-Route::post('/print-image', [PrintController::class, 'printImage']);
-Route::post('/download-image', [DownloadController::class, 'downloadImage']);

routes/web.php

@@ -1,11 +1,12 @@
 <?php
 
+use App\Http\Controllers\Admin\PluginController;
+use App\Http\Controllers\GalleryAccessController;
+use App\Http\Controllers\HomeController;
 use App\Http\Controllers\ProfileController;
 use Illuminate\Foundation\Application;
 use Illuminate\Support\Facades\Route;
 use Inertia\Inertia;
-use App\Http\Controllers\LocaleController;
-use App\Http\Controllers\Admin\PluginController;
 
 /*
 |--------------------------------------------------------------------------
@@ -18,7 +19,19 @@ use App\Http\Controllers\Admin\PluginController;
 |
 */
 
-Route::get('/', [App\Http\Controllers\HomeController::class, 'index'])->name('home');
+Route::get('/gallery/access', [GalleryAccessController::class, 'create'])->name('gallery.access.default');
+Route::post('/gallery/access', [GalleryAccessController::class, 'store'])->name('gallery.access.default.store');
+
+Route::get('/g/{gallery:slug}/access', [GalleryAccessController::class, 'create'])->name('gallery.access.show');
+Route::post('/g/{gallery:slug}/access', [GalleryAccessController::class, 'store'])->name('gallery.access.store');
+
+Route::get('/', [HomeController::class, 'index'])
+    ->middleware('gallery.access')
+    ->name('home');
+
+Route::get('/g/{gallery:slug}', [HomeController::class, 'index'])
+    ->middleware('gallery.access')
+    ->name('gallery.show');
 
 Route::get('/login', function () {
     return Inertia::render('Login');
@@ -28,10 +41,9 @@ Route::middleware('auth')->group(function () {
     Route::get('/profile', [ProfileController::class, 'edit'])->name('profile.edit');
     Route::patch('/profile', [ProfileController::class, 'update'])->name('profile.update');
     Route::delete('/profile', [ProfileController::class, 'destroy'])->name('profile.destroy');
-    
+
     // Plugin routes
     Route::get('/admin/plugins', [PluginController::class, 'index'])->name('admin.plugins.index');
 });
 
 require __DIR__.'/auth.php';
-