stage 2 of oauth removal, switch to sanctum pat tokens completed, docs updated

This commit is contained in:
Codex Agent
2025-11-07 07:46:53 +01:00
parent 776da57ca9
commit 67affd3317
41 changed files with 124 additions and 2148 deletions

View File

@@ -5,7 +5,6 @@ namespace Database\Seeders;
use App\Models\Event;
use App\Models\EventPackage;
use App\Models\EventType;
use App\Models\OAuthClient;
use App\Models\Package;
use App\Models\PackagePurchase;
use App\Models\Tenant;
@@ -125,7 +124,6 @@ class DemoLifecycleSeeder extends Seeder
]);
$this->createTenantAdmin($tenant, 'storycraft-owner@demo.fotospiel');
$this->ensureOAuthClientForTenant($tenant, 'demo-tenant-admin-storycraft');
}
private function seedActiveTenant(Package $standard, Package $premium, EventType $weddingType, EventType $corporateType): void
@@ -139,12 +137,7 @@ class DemoLifecycleSeeder extends Seeder
'is_active' => true,
]);
OAuthClient::query()
->where('client_id', config('services.oauth.tenant_admin.id', 'tenant-admin-app'))
->update(['tenant_id' => $tenant->id]);
$this->createTenantAdmin($tenant, 'hello@lumen-moments.demo');
$this->ensureOAuthClientForTenant($tenant, 'demo-tenant-admin-lumen');
$purchase = PackagePurchase::create([
'tenant_id' => $tenant->id,
@@ -210,7 +203,6 @@ class DemoLifecycleSeeder extends Seeder
]);
$this->createTenantAdmin($tenant, 'team@viewfinder.demo');
$this->ensureOAuthClientForTenant($tenant, 'demo-tenant-admin-viewfinder');
$tenantPackage = TenantPackage::create([
'tenant_id' => $tenant->id,
@@ -280,7 +272,6 @@ class DemoLifecycleSeeder extends Seeder
]);
$this->createTenantAdmin($tenant, 'support@pixelco.demo', role: 'member');
$this->ensureOAuthClientForTenant($tenant, 'demo-tenant-admin-pixel');
}
private function createTenantAdmin(Tenant $tenant, string $email, string $role = 'tenant_admin'): User
@@ -379,30 +370,4 @@ class DemoLifecycleSeeder extends Seeder
];
}
private function ensureOAuthClientForTenant(Tenant $tenant, string $clientId): void
{
$redirectUris = config('services.oauth.tenant_admin.redirects', []);
if (empty($redirectUris)) {
$redirectUris = [
'http://localhost:5173/event-admin/auth/callback',
url('/event-admin/auth/callback'),
];
}
$client = OAuthClient::firstOrNew(['client_id' => $clientId]);
if (! $client->exists) {
$client->id = (string) Str::uuid();
}
$client->fill([
'client_secret' => null,
'tenant_id' => $tenant->id,
'redirect_uris' => $redirectUris,
'scopes' => ['tenant:read', 'tenant:write'],
'is_active' => true,
]);
$client->save();
}
}