fotospiel-app/app/Http/Controllers/MarketingController.php

<?php

namespace App\Http\Controllers;

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Mail;
use Illuminate\Support\Facades\Log;
use Illuminate\Support\Str;
use Stripe\Stripe;
use Stripe\Checkout\Session;
use Stripe\StripeClient;
use Exception;
use PayPal\Api\Amount;
use PayPal\Api\Payer;
use PayPal\Api\Payment;
use PayPal\Api\RedirectUrls;
use PayPal\Api\Transaction;
use PayPal\Rest\ApiContext;
use PayPal\Auth\OAuthTokenCredential;
use App\Models\Tenant;
use App\Models\EventPurchase;
use App\Models\Package;
use App\Models\TenantPackage;
use App\Models\PackagePurchase;
use Illuminate\Support\Facades\Auth;

class MarketingController extends Controller
{
    public function __construct()
    {
        Stripe::setApiKey(config('services.stripe.key'));
    }

    public function index()
    {
        $packages = [
            ['id' => 'basic', 'name' => 'Basic', 'events' => 1, 'price' => 0, 'description' => '1 Event, 100 Fotos, Grundfunktionen'],
            ['id' => 'standard', 'name' => 'Standard', 'events' => 10, 'price' => 99, 'description' => '10 Events, Unbegrenzt Fotos, Erweiterte Features'],
            ['id' => 'premium', 'name' => 'Premium', 'events' => 50, 'price' => 199, 'description' => '50 Events, Support & Custom, Alle Features'],
        ];

        return view('marketing', compact('packages'));
    }

    public function contact(Request $request)
    {
        $request->validate([
            'name' => 'required|string|max:255',
            'email' => 'required|email|max:255',
            'message' => 'required|string|max:1000',
        ]);

        Mail::raw("Kontakt-Anfrage von {$request->name} ({$request->email}): {$request->message}", function ($message) use ($request) {
            $message->to('admin@fotospiel.de')
                    ->subject('Neue Kontakt-Anfrage');
        });

        return redirect()->back()->with('success', 'Nachricht gesendet!');
    }

    /**
     * Handle package purchase flow.
     */
    public function buyPackages(Request $request, $packageId)
    {
        $package = Package::findOrFail($packageId);

        if (!Auth::check()) {
            return redirect()->route('register', ['package_id' => $package->id])
                ->with('message', __('marketing.packages.register_required'));
        }

        $user = Auth::user();
        if (!$user->email_verified_at) {
            return redirect()->route('verification.notice')
                ->with('message', __('auth.verification_required'));
        }

        $tenant = $user->tenant;
        if (!$tenant) {
            abort(500, 'Tenant not found');
        }

        if ($package->price == 0) {
            TenantPackage::updateOrCreate(
                [
                    'tenant_id' => $tenant->id,
                    'package_id' => $package->id,
                ],
                [
                    'active' => true,
                    'purchased_at' => now(),
                    'expires_at' => now()->addYear(),
                ]
            );

            PackagePurchase::create([
                'tenant_id' => $tenant->id,
                'package_id' => $package->id,
                'provider_id' => 'free',
                'price' => 0,
                'type' => $package->type,
                'purchased_at' => now(),
                'refunded' => false,
            ]);

            return redirect('/admin')->with('success', __('marketing.packages.free_assigned'));
        }

        if ($request->input('provider') === 'paypal') {
            return $this->paypalCheckout($request, $packageId);
        }

        return $this->checkout($request, $packageId);
    }

    /**
     * Checkout for Stripe with auth metadata.
     */
    public function checkout(Request $request, $packageId)
    {
        $package = Package::findOrFail($packageId);
        $user = Auth::user();
        $tenant = $user->tenant;

        $stripe = new StripeClient(config('services.stripe.secret'));
        $session = $stripe->checkout->sessions->create([
            'payment_method_types' => ['card'],
            'line_items' => [[
                'price_data' => [
                    'currency' => 'eur',
                    'product_data' => [
                        'name' => $package->name,
                    ],
                    'unit_amount' => $package->price * 100,
                ],
                'quantity' => 1,
            ]],
            'mode' => 'payment',
            'success_url' => route('marketing.success', $packageId),
            'cancel_url' => route('packages'),
            'metadata' => [
                'user_id' => $user->id,
                'tenant_id' => $tenant->id,
                'package_id' => $package->id,
                'type' => $package->type,
            ],
        ]);

        return redirect($session->url, 303);
    }

    /**
     * PayPal checkout with auth metadata.
     */
    public function paypalCheckout(Request $request, $packageId)
    {
        $package = Package::findOrFail($packageId);
        $user = Auth::user();
        $tenant = $user->tenant;

        $apiContext = new ApiContext(
            new OAuthTokenCredential(
                config('services.paypal.client_id'),
                config('services.paypal.secret')
            )
        );

        $payment = new Payment();
        $payer = new Payer();
        $payer->setPaymentMethod('paypal');

        $amountObj = new Amount();
        $amountObj->setCurrency('EUR');
        $amountObj->setTotal($package->price);

        $transaction = new Transaction();
        $transaction->setAmount($amountObj);

        $redirectUrls = new RedirectUrls();
        $redirectUrls->setReturnUrl(route('marketing.success', $packageId));
        $redirectUrls->setCancelUrl(route('packages'));

        $customData = json_encode([
            'user_id' => $user->id,
            'tenant_id' => $tenant->id,
            'package_id' => $package->id,
            'type' => $package->type,
        ]);

        $payment->setIntent('sale')
                ->setPayer($payer)
                ->setTransactions([$transaction])
                ->setRedirectUrls($redirectUrls)
                ->setNoteToPayer('Package: ' . $package->name)
                ->setCustom($customData);

        try {
            $payment->create($apiContext);

            session(['paypal_payment_id' => $payment->getId()]);

            return redirect($payment->getApprovalLink());
        } catch (\Exception $e) {
            Log::error('PayPal checkout error: ' . $e->getMessage());
            return back()->with('error', 'Zahlung fehlgeschlagen');
        }
    }

    public function stripeCheckout($sessionId)
    {
        // Handle Stripe success
        return view('marketing.success', ['provider' => 'Stripe']);
    }

    public function blogIndex(Request $request)
    {
        $locale = $request->get('locale', app()->getLocale());
        $posts = \Stephenjude\FilamentBlog\Models\Post::query()
            ->where('is_published', true)
            ->whereNotNull('published_at')
            ->where('published_at', '<=', now())
            ->whereJsonContains("translations->locale->title->{$locale}", true)
            ->orderBy('published_at', 'desc')
            ->paginate(8);

        return view('marketing.blog', compact('posts'));
    }

    public function blogShow($slug)
    {
        $locale = app()->getLocale();
        $post = \Stephenjude\FilamentBlog\Models\Post::query()
            ->where('slug', $slug)
            ->where('is_published', true)
            ->whereNotNull('published_at')
            ->where('published_at', '<=', now())
            ->whereJsonContains("translations->locale->title->{$locale}", true)
            ->firstOrFail();

        return view('marketing.blog-show', compact('post'));
    }
}