reworked the guest pwa, modernized start and gallery page. added share link functionality.

2025-11-10 22:25:25 +01:00
parent 1e8810ca51
commit 1cec116933
22 changed files with 1208 additions and 476 deletions
--- a/tests/Feature/Api/PhotoShareLinkTest.php
+++ b/tests/Feature/Api/PhotoShareLinkTest.php
@@ -0,0 +1,86 @@
+<?php
+
+namespace Tests\Feature\Api;
+
+use App\Models\Event;
+use App\Models\Photo;
+use App\Models\PhotoShareLink;
+use App\Models\Task;
+use App\Models\Tenant;
+use App\Services\EventJoinTokenService;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Illuminate\Support\Facades\Config;
+use Tests\TestCase;
+
+class PhotoShareLinkTest extends TestCase
+{
+    use RefreshDatabase;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+        Config::set('share-links.ttl_hours', 2);
+    }
+
+    public function test_guest_can_create_share_link(): void
+    {
+        $tenant = Tenant::factory()->create();
+        $event = Event::factory()->for($tenant)->create(['status' => 'published']);
+        $photo = Photo::factory()->for($event)->create([
+            'status' => 'approved',
+        ]);
+
+        $token = app(EventJoinTokenService::class)->createToken($event)->plain_token;
+
+        $response = $this->withHeaders([
+            'X-Device-Id' => 'device-share',
+            'Accept' => 'application/json',
+        ])->postJson("/api/v1/events/{$token}/photos/{$photo->id}/share");
+
+        $response->assertOk();
+        $response->assertJsonStructure(['slug', 'url', 'expires_at']);
+
+        $this->assertDatabaseHas('photo_share_links', [
+            'photo_id' => $photo->id,
+            'slug' => $response->json('slug'),
+        ]);
+    }
+
+    public function test_share_link_cannot_be_created_for_unrelated_photo(): void
+    {
+        $event = Event::factory()->create(['status' => 'published']);
+        $otherEvent = Event::factory()->create(['status' => 'published']);
+        $photo = Photo::factory()->for($otherEvent)->create(['status' => 'approved']);
+
+        $token = app(EventJoinTokenService::class)->createToken($event)->plain_token;
+
+        $response = $this->withHeaders([
+            'X-Device-Id' => 'device-share',
+            'Accept' => 'application/json',
+        ])->postJson("/api/v1/events/{$token}/photos/{$photo->id}/share");
+
+        $response->assertNotFound();
+    }
+
+    public function test_share_payload_exposes_public_photo_data(): void
+    {
+        $tenant = Tenant::factory()->create();
+        $event = Event::factory()->for($tenant)->create(['status' => 'published']);
+        $task = Task::factory()->for($tenant)->create();
+        $photo = Photo::factory()->for($event)->create([
+            'status' => 'approved',
+            'task_id' => $task->id,
+        ]);
+
+        $share = PhotoShareLink::factory()->for($photo)->create([
+            'expires_at' => now()->addDay(),
+        ]);
+
+        $response = $this->getJson("/api/v1/photo-shares/{$share->slug}");
+
+        $response->assertOk();
+        $response->assertJsonPath('photo.id', $photo->id);
+        $response->assertJsonPath('photo.image_urls.full', fn ($value) => str_contains($value, '/photo-shares/'));
+        $response->assertJsonPath('event.id', $event->id);
+    }
+}