integration vom Blog-plugin, hübschere webseite,

app/Http/Controllers/Api/EventPublicController.php

@@ -292,7 +292,7 @@ class EventPublicController extends BaseController
         }
 
         if ($since) {
-            $query->where('created_at', '>', $since);
+            $query->where('photos.created_at', '>', $since);
         }
         $locale = request()->query('locale', 'de');
 

app/Http/Controllers/MarketingController.php

@@ -127,6 +127,34 @@ class MarketingController extends Controller
         return view('marketing.success', ['provider' => 'Stripe']);
     }
 
+    public function blogIndex(Request $request)
+    {
+        $locale = $request->get('locale', app()->getLocale());
+        $posts = \Stephenjude\FilamentBlog\Models\Post::query()
+            ->where('is_published', true)
+            ->whereNotNull('published_at')
+            ->where('published_at', '<=', now())
+            ->whereJsonContains("translations->locale->title->{$locale}", true)
+            ->orderBy('published_at', 'desc')
+            ->paginate(8);
+
+        return view('marketing.blog', compact('posts'));
+    }
+
+    public function blogShow($slug)
+    {
+        $locale = app()->getLocale();
+        $post = \Stephenjude\FilamentBlog\Models\Post::query()
+            ->where('slug', $slug)
+            ->where('is_published', true)
+            ->whereNotNull('published_at')
+            ->where('published_at', '<=', now())
+            ->whereJsonContains("translations->locale->title->{$locale}", true)
+            ->firstOrFail();
+
+        return view('marketing.blog-show', compact('post'));
+    }
+
     public function paypalCheckout(Request $request, $package)
     {
         $packages = [

app/Http/Middleware/SetLocale.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class SetLocale
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        $locale = $request->segment(1);
+
+        $supportedLocales = ['de', 'en'];
+
+        if (in_array($locale, $supportedLocales)) {
+            app()->setLocale($locale);
+            session()->put('locale', $locale);
+        } else {
+            $locale = session('locale', config('app.locale', 'de'));
+            app()->setLocale($locale);
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/SuperAdminAuth.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Log;
+
+class SuperAdminAuth
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        if ($request->is('super-admin/login') || $request->is('super-admin/register')) {
+            return $next($request);
+        }
+
+        if (!Auth::check()) {
+            abort(403, 'Nicht angemeldet.');
+        }
+
+        $user = Auth::user();
+        Log::info('SuperAdminAuth: User ID ' . $user->id . ', role: ' . $user->role);
+
+        if ($user->role !== 'super_admin') {
+            abort(403, 'Zugriff nur für SuperAdmin. User ID: ' . $user->id . ', Role: ' . $user->role);
+        }
+
+        return $next($request);
+    }
+}

app/Models/BlogCategory.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\SoftDeletes;
+use Spatie\Translatable\HasTranslations;
+use Stephenjude\FilamentBlog\Models\Category as BaseCategory;
+
+class BlogCategory extends BaseCategory
+{
+    use HasFactory, SoftDeletes, HasTranslations;
+
+    protected $translatable = [
+        'name',
+        'description',
+    ];
+
+    protected $fillable = [
+        'slug',
+        'is_visible',
+        'translations',
+    ];
+}

app/Models/BlogPost.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\SoftDeletes;
+use Spatie\Translatable\HasTranslations;
+use Stephenjude\FilamentBlog\Models\Post as BasePost;
+
+class BlogPost extends BasePost
+{
+    use HasFactory, SoftDeletes, HasTranslations;
+
+    protected $translatable = [
+        'title',
+        'excerpt',
+        'content',
+        'meta_title',
+        'meta_description',
+    ];
+
+    protected $fillable = [
+        'blog_author_id',
+        'blog_category_id',
+        'slug',
+        'banner',
+        'published_at',
+        'is_published',
+        'translations',
+    ];
+}

app/Models/BlogTag.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\SoftDeletes;
+use Spatie\Translatable\HasTranslations;
+use Stephenjude\FilamentBlog\Models\Tag as BaseTag;
+
+class BlogTag extends BaseTag
+{
+    use HasFactory, SoftDeletes, HasTranslations;
+
+    protected $translatable = [
+        'name',
+    ];
+
+    protected $fillable = [
+        'slug',
+        'translations',
+    ];
+}

app/Providers/AppServiceProvider.php

@@ -35,5 +35,9 @@ class AppServiceProvider extends ServiceProvider
         RateLimiter::for('oauth', function (Request $request) {
             return Limit::perMinute(10)->by('oauth:' . ($request->ip() ?? 'unknown'));
         });
+
+        if ($this->app->runningInConsole()) {
+            $this->app->register(\App\Providers\Filament\AdminPanelProvider::class);
+        }
     }
 }

app/Providers/Filament/AdminPanelProvider.php

@@ -0,0 +1,69 @@
+<?php
+
+namespace App\Providers\Filament;
+
+use Filament\Http\Middleware\Authenticate;
+use Filament\Http\Middleware\DisableBladeIconComponents;
+use Filament\Http\Middleware\DispatchServingFilamentEvent;
+use Filament\Pages;
+use Filament\Panel;
+use Filament\PanelProvider;
+use Filament\Support\Colors\Color;
+use Filament\Widgets;
+use Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse;
+use Illuminate\Cookie\Middleware\EncryptCookies;
+use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken;
+use Illuminate\Routing\Middleware\SubstituteBindings;
+use Illuminate\Session\Middleware\AuthenticateSession;
+use Illuminate\Session\Middleware\StartSession;
+use Illuminate\View\Middleware\ShareErrorsFromSession;
+use Stephenjude\FilamentBlog\Filament\Resources\CategoryResource;
+use Stephenjude\FilamentBlog\Filament\Resources\PostResource;
+use Stephenjude\FilamentBlog\Filament\Resources\TagResource;
+use App\Models\BlogCategory;
+use App\Models\BlogPost;
+use App\Models\BlogTag;
+
+class AdminPanelProvider extends PanelProvider
+{
+    public function panel(Panel $panel): Panel
+    {
+        return $panel
+            ->default()
+            ->id('admin')
+            ->path('admin')
+            ->login()
+            ->colors([
+                'primary' => Color::Pink,
+            ])
+            ->discoverResources(in: app_path('Filament/Resources'), for: 'App\\Filament\\Resources')
+            ->discoverPages(in: app_path('Filament/Pages'), for: 'App\\Filament\\Pages')
+            ->pages([
+                Pages\Dashboard::class,
+            ])
+            ->discoverWidgets(in: app_path('Filament/Widgets'), for: 'App\\Filament\\Widgets')
+            ->widgets([
+                Widgets\AccountWidget::class,
+                Widgets\FilamentInfoWidget::class,
+            ])
+            ->middleware([
+                EncryptCookies::class,
+                AddQueuedCookiesToResponse::class,
+                StartSession::class,
+                AuthenticateSession::class,
+                ShareErrorsFromSession::class,
+                VerifyCsrfToken::class,
+                SubstituteBindings::class,
+                DisableBladeIconComponents::class,
+                DispatchServingFilamentEvent::class,
+            ])
+            ->authMiddleware([
+                Authenticate::class,
+            ])
+            ->resources([
+                // Blog-Resources moved to SuperAdminPanel
+            ])
+            // Remove blog models as they are global and handled in SuperAdmin
+            ;
+    }
+}

app/Providers/Filament/SuperAdminPanelProvider.php

@@ -3,21 +3,33 @@
 namespace App\Providers\Filament;
 
 use Filament\Http\Middleware\Authenticate;
-use Filament\Http\Middleware\AuthenticateSession;
 use Filament\Http\Middleware\DisableBladeIconComponents;
 use Filament\Http\Middleware\DispatchServingFilamentEvent;
-use Filament\Pages\Dashboard;
+use Filament\Pages;
 use Filament\Panel;
 use Filament\PanelProvider;
 use Filament\Support\Colors\Color;
-use Filament\Widgets\AccountWidget;
-use Filament\Widgets\FilamentInfoWidget;
+use Filament\Widgets;
 use Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse;
 use Illuminate\Cookie\Middleware\EncryptCookies;
 use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken;
 use Illuminate\Routing\Middleware\SubstituteBindings;
+use Illuminate\Session\Middleware\AuthenticateSession;
 use Illuminate\Session\Middleware\StartSession;
 use Illuminate\View\Middleware\ShareErrorsFromSession;
+use App\Filament\Resources\LegalPageResource;
+use App\Filament\Resources\TenantResource;
+use App\Filament\Pages\SuperAdminProfile;
+use App\Models\User;
+use App\Models\Tenant;
+use App\Models\BlogPost;
+use App\Models\BlogCategory;
+use App\Models\BlogTag;
+use App\Filament\Widgets\PlatformStatsWidget;
+use App\Filament\Widgets\TopTenantsByUploads;
+use Stephenjude\FilamentBlog\Filament\Resources\CategoryResource;
+use Stephenjude\FilamentBlog\Filament\Resources\PostResource;
+use Stephenjude\FilamentBlog\BlogPlugin;
 
 class SuperAdminPanelProvider extends PanelProvider
 {
@@ -25,26 +37,27 @@ class SuperAdminPanelProvider extends PanelProvider
     {
         return $panel
             ->default()
-            ->id('super-admin')
+            ->id('superadmin')
             ->path('super-admin')
-            ->profile(\App\Filament\Pages\SuperAdminProfile::class, true)
+            ->login()
             ->colors([
-                'primary' => Color::Amber,
+                'primary' => Color::Pink,
             ])
-            ->discoverResources(in: app_path('Filament/Resources'), for: 'App\Filament\Resources')
-            ->discoverPages(in: app_path('Filament/Pages'), for: 'App\Filament\Pages')
+            ->discoverResources(in: app_path('Filament/Resources'), for: 'App\\Filament\\Resources')
+            ->discoverPages(in: app_path('Filament/Pages'), for: 'App\\Filament\\Pages')
             ->pages([
-                Dashboard::class,
+                Pages\Dashboard::class,
             ])
-            ->discoverWidgets(in: app_path('Filament/Widgets'), for: 'App\Filament\Widgets')
+            ->plugin(
+                BlogPlugin::make()
+            )
+            ->profile(SuperAdminProfile::class)
+            ->discoverWidgets(in: app_path('Filament/Widgets'), for: 'App\\Filament\\Widgets')
             ->widgets([
-                AccountWidget::class,
-                FilamentInfoWidget::class,
-                \App\Filament\Widgets\PlatformStatsWidget::class,
-                \App\Filament\Widgets\UploadsPerDayChart::class,
-                \App\Filament\Widgets\RecentPhotosTable::class,
-                \App\Filament\Widgets\TopTenantsByUploads::class,
-                \App\Filament\Widgets\EventsActiveToday::class,
+                Widgets\AccountWidget::class,
+                Widgets\FilamentInfoWidget::class,
+                PlatformStatsWidget::class,
+                TopTenantsByUploads::class,
             ])
             ->middleware([
                 EncryptCookies::class,
@@ -59,6 +72,18 @@ class SuperAdminPanelProvider extends PanelProvider
             ])
             ->authMiddleware([
                 Authenticate::class,
-            ]);
+            ])
+            ->resources([
+                TenantResource::class,
+                LegalPageResource::class,
+            ])
+            ->authMiddleware([
+                Authenticate::class,
+                'superadmin.auth',
+            ])
+            ->authGuard('web')
+            // SuperAdmin-Zugriff durch custom Middleware, globale Sichtbarkeit ohne Tenant-Isolation
+            // Blog-Resources werden durch das Plugin-ServiceProvider automatisch registriert
+            ;
     }
 }