fotospiel-app/routes/web.php

<?php

use Illuminate\Support\Facades\Route;
use Inertia\Inertia;
use Illuminate\Support\Facades\Log;

 // Marketing-Seite mit Locale-Prefix
Route::prefix('{locale?}')->where(['locale' => 'de|en'])->middleware('locale')->group(function () {
    Route::view('/', 'marketing')->name('marketing');
    Route::get('/packages', [\App\Http\Controllers\MarketingController::class, 'packagesIndex'])->name('packages');
    Route::get('/register/{package_id?}', [\App\Http\Controllers\Auth\MarketingRegisterController::class, 'create'])->name('marketing.register');
    Route::post('/register', [\App\Http\Controllers\Auth\MarketingRegisterController::class, 'store'])->name('marketing.register.store');
});

 // Fallback for /packages (redirect to default locale)
 Route::get('/packages', function () {
     return redirect('/de/packages');
 })->name('packages.fallback');

// Fallback for /blog (redirect to default locale)
Route::get('/blog', function () {
    return redirect('/de/blog');
})->name('blog.fallback');

// Blog Routes (inside locale group for i18n support)
Route::prefix('{locale?}')->where(['locale' => 'de|en'])->middleware('locale')->group(function () {
    Route::get('/blog', [\App\Http\Controllers\MarketingController::class, 'blogIndex'])->name('blog');
    Route::get('/blog/{post}', [\App\Http\Controllers\MarketingController::class, 'blogShow'])->name('blog.show');
});

  // Fallbacks for Legal Pages (redirect to default locale)
 Route::get('/impressum', function () {
     return redirect('/de/impressum');
 })->name('impressum.fallback');
 Route::get('/datenschutz', function () {
     return redirect('/de/datenschutz');
 })->name('datenschutz.fallback');
 Route::get('/kontakt', function () {
     return redirect('/de/kontakt');
 })->name('kontakt.fallback');
 
 // Legal Pages in locale group
 Route::prefix('{locale?}')->where(['locale' => 'de|en'])->middleware('locale')->group(function () {
     Route::get('/impressum', function () {
         return view('legal.impressum');
     })->name('impressum');
     Route::get('/datenschutz', function () {
         return view('legal.datenschutz');
     })->name('datenschutz');
     Route::get('/kontakt', function () {
         return view('legal.kontakt');
     })->name('kontakt');
     Route::post('/kontakt', [\App\Http\Controllers\MarketingController::class, 'contact'])->name('kontakt.submit');
 });

Route::middleware(['auth', 'verified'])->group(function () {
    Route::get('dashboard', function () {
        return Inertia::render('dashboard');
    })->name('dashboard');
});

require __DIR__.'/settings.php';
require __DIR__.'/auth.php';

 // Guest PWA shell for /event and sub-routes
Route::view('/event/{any?}', 'guest')->where('any', '.*');
Route::view('/e/{any?}', 'guest')->where('any', '.*');
Route::view('/pwa/{any?}', 'guest')->where('any', '.*');

// Minimal public API for Guest PWA (stateless; no CSRF)
Route::prefix('api/v1')->withoutMiddleware([\App\Http\Middleware\VerifyCsrfToken::class])->group(function () {
});

  // Stripe webhooks (no CSRF, no auth)
 Route::post('/webhooks/stripe', [\App\Http\Controllers\StripeWebhookController::class, 'handle']);
  // PayPal IPN webhook
 Route::post('/webhooks/paypal', [\App\Http\Controllers\PayPalWebhookController::class, 'handle']);
 // PayPal IPN webhook
Route::post('/webhooks/paypal', [\App\Http\Controllers\PayPalWebhookController::class, 'handle']);

// CSV templates for Super Admin imports
Route::get('/super-admin/templates/emotions.csv', function () {
    $headers = [
        'Content-Type' => 'text/csv',
        'Content-Disposition' => 'attachment; filename="emotions_template.csv"',
    ];
    $callback = function () {
        $out = fopen('php://output', 'w');
        fputcsv($out, ['name_de','name_en','icon','color','description_de','description_en','sort_order','is_active','event_types']);
        fputcsv($out, ['Fröhlich','Happy','😀','#FFD700','Fröhlicher Moment','Happy moment','0','1','wedding|corporate']);
        fclose($out);
    };
    return response()->stream($callback, 200, $headers);
});

// Tenant Admin PWA shell
Route::view('/admin/{any?}', 'admin')->middleware(['auth', 'verified', 'tenant'])->where('any', '.*');
Route::get('/admin/qr', [\App\Http\Controllers\Admin\QrController::class, 'png'])->middleware(['auth', 'verified', 'tenant']);
Route::get('/super-admin/templates/tasks.csv', function () {
    $headers = [
        'Content-Type' => 'text/csv',
        'Content-Disposition' => 'attachment; filename="tasks_template.csv"',
    ];
    $callback = function () {
        $out = fopen('php://output', 'w');
        fputcsv($out, ['emotion_name','emotion_name_de','emotion_name_en','event_type_slug','title_de','title_en','description_de','description_en','difficulty','example_text_de','example_text_en','sort_order','is_active']);
        fputcsv($out, ['Happy','','','wedding','Gruppenfoto','Group photo','Sammelt euch für ein Foto.','Get together for a photo.','easy','Zeigt eure besten Lächeln.','Show your best smiles.','0','1']);
        fclose($out);
    };
    return response()->stream($callback, 200, $headers);
});

Route::get('/buy-packages/{package_id}', [\App\Http\Controllers\MarketingController::class, 'buyPackages'])->name('buy.packages');
Route::middleware('auth')->group(function () {
    Route::get('/profile', [\App\Http\Controllers\ProfileController::class, 'edit'])->name('user.profile.edit');
    Route::patch('/profile', [\App\Http\Controllers\ProfileController::class, 'update'])->name('user.profile.update');
});

Route::get('/marketing/success/{package_id?}', [\App\Http\Controllers\MarketingController::class, 'success'])->name('marketing.success');

Route::get('{locale}/occasions/{type}', [\App\Http\Controllers\MarketingController::class, 'occasionsType'])
    ->where([
        'locale' => 'de|en',
        'type' => 'weddings|birthdays|corporate-events|family-celebrations'
    ])
    ->name('occasions.type');