KanbanGit/app/Models/User.php

<?php

namespace App\Models;

// use Illuminate\Contracts\Auth\MustVerifyEmail;
use App\Actions\Permissions\PermissionService;
use App\Actions\Users\UpdateUserAvatar;
use App\Enums\Permission;
use Database\Factories\UserFactory;
use Illuminate\Database\Eloquent\Attributes\Fillable;
use Illuminate\Database\Eloquent\Attributes\Hidden;
use Illuminate\Database\Eloquent\Builder;
use Illuminate\Database\Eloquent\Casts\Attribute;
use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Database\Eloquent\Relations\BelongsToMany;
use Illuminate\Database\Eloquent\Relations\HasMany;
use Illuminate\Database\Eloquent\Relations\MorphMany;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Illuminate\Support\Facades\Storage;
use Laravel\Fortify\TwoFactorAuthenticatable;

#[Fillable(['name', 'email', 'password', 'must_change_password_on_next_login', 'avatar_path', 'avatar_color', 'avatar_is_generated'])]
#[Hidden(['password', 'two_factor_secret', 'two_factor_recovery_codes', 'remember_token', 'avatar_path'])]
class User extends Authenticatable
{
    /** @use HasFactory<UserFactory> */
    use HasFactory, Notifiable, TwoFactorAuthenticatable;

    /**
     * @var list<string>
     */
    protected $appends = [
        'avatar',
    ];

    /**
     * @var array<string, mixed>
     */
    protected $attributes = [
        'avatar_is_generated' => false,
    ];

    protected static function booted(): void
    {
        static::deleting(function (self $user): void {
            app(UpdateUserAvatar::class)->delete($user);

            $user->permissionAssignments()->delete();
        });
    }

    /**
     * Get the attributes that should be cast.
     *
     * @return array<string, string>
     */
    protected function casts(): array
    {
        return [
            'avatar_is_generated' => 'bool',
            'email_verified_at' => 'datetime',
            'must_change_password_on_next_login' => 'bool',
            'password' => 'hashed',
            'two_factor_confirmed_at' => 'datetime',
        ];
    }

    public function hasUploadedAvatar(): bool
    {
        return filled($this->avatar_path) && ! $this->avatar_is_generated;
    }

    /**
     * @return Attribute<?string, never>
     */
    protected function avatar(): Attribute
    {
        return Attribute::get(
            fn (): ?string => $this->avatarUrl(),
        );
    }

    private function avatarUrl(): ?string
    {
        if (blank($this->avatar_path)) {
            return null;
        }

        $diskName = config('filesystems.avatar_disk', 'public');
        $disk = Storage::disk(is_string($diskName) && $diskName !== '' ? $diskName : 'public');

        if ((bool) config('filesystems.avatar_urls_temporary', false)) {
            $expirationMinutes = max(1, (int) config('filesystems.avatar_url_expiration_minutes', 15));

            return $disk->temporaryUrl($this->avatar_path, now()->addMinutes($expirationMinutes));
        }

        return $disk->url($this->avatar_path);
    }

    public function permissionAssignments(): MorphMany
    {
        return $this->morphMany(PermissionAssignment::class, 'assignee');
    }

    public function teams(): BelongsToMany
    {
        return $this->belongsToMany(Team::class)
            ->withTimestamps();
    }

    public function gitConnections(): HasMany
    {
        return $this->hasMany(UserGitConnection::class)
            ->orderBy('provider')
            ->orderBy('base_url');
    }

    public function userApplications(): HasMany
    {
        return $this->hasMany(UserApplication::class)
            ->orderBy('name')
            ->orderBy('id');
    }

    public function assignedTickets(): HasMany
    {
        return $this->hasMany(Ticket::class, 'assignee_user_id');
    }

    public function authoredTickets(): HasMany
    {
        return $this->hasMany(Ticket::class, 'author_user_id');
    }

    public function scopeVisibleToProject(Builder $query, Project $project): Builder
    {
        $permissionService = app(PermissionService::class);

        $allowedUserIds = User::query()
            ->select('id')
            ->cursor()
            ->filter(fn (User $candidate) => $permissionService->allows(
                $candidate,
                Permission::ProjectRead,
                $project
            ))
            ->pluck('id')
            ->all();

        return $query->whereKey($allowedUserIds);
    }
}