Add application API keys

app/Http/Controllers/Settings/UserApplicationController.php

@@ -0,0 +1,57 @@
+<?php
+
+namespace App\Http\Controllers\Settings;
+
+use App\Actions\UserApplications\CreateUserApplication;
+use App\Actions\UserApplications\DeleteUserApplication;
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Settings\StoreUserApplicationRequest;
+use App\Http\Resources\UserApplicationResource;
+use App\Models\UserApplication;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class UserApplicationController extends Controller
+{
+    public function __construct(
+        private readonly CreateUserApplication $createUserApplication,
+        private readonly DeleteUserApplication $deleteUserApplication,
+    ) {}
+
+    public function edit(Request $request): Response
+    {
+        return Inertia::render('settings/Applications', [
+            'applicationKey' => $request->session()->get('applicationKey'),
+            'applications' => UserApplicationResource::collection($request->user()->userApplications)->resolve(),
+            'status' => $request->session()->get('status'),
+        ]);
+    }
+
+    public function store(StoreUserApplicationRequest $request): RedirectResponse
+    {
+        $result = $this->createUserApplication->handle($request->user(), $request->validated());
+
+        return to_route('applications.edit')
+            ->with('applicationKey', $result['plain_text_key'])
+            ->with('status', "{$result['application']->name} was created. Save this key now; it will not be shown again.");
+    }
+
+    public function destroy(Request $request, UserApplication $userApplication): RedirectResponse
+    {
+        $this->abortUnlessOwner($request, $userApplication);
+
+        $name = $this->deleteUserApplication->handle($userApplication);
+
+        return to_route('applications.edit')
+            ->with('status', "{$name} was removed.");
+    }
+
+    private function abortUnlessOwner(Request $request, UserApplication $userApplication): void
+    {
+        $user = $request->user();
+
+        abort_unless($userApplication->user_id === $user->id, 403);
+    }
+}