ots/app/Http/Controllers/TeamController.php

<?php

namespace App\Http\Controllers;

use App\Concerns\ReservedSlugs;
use App\Enums\TeamMemberRole;
use App\Http\Requests\StoreTeamRequest;
use App\Http\Requests\UpdateTeamRequest;
use App\Http\Resources\TeamInviteResource;
use App\Http\Resources\TeamResource;
use App\Models\Team;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Arr;
use Illuminate\Support\Facades\DB;
use Illuminate\Support\Str;
use Illuminate\Validation\ValidationException;
use Inertia\Inertia;
use Inertia\Response;

// TODO if a team requires 2fa after non 2fa users joins

class TeamController extends Controller
{
    use ReservedSlugs;

    /**
     * Display a listing of the resource.
     */
    public function index(Request $request): Response
    {
        return Inertia::render('team/Index', [
            'teams' => TeamResource::collection(Team::visibleTo($request->user())->with('members')->get())->resolve($request),
        ]);
    }

    public function show(Request $request, Team $team): Response
    {
        $teamManager = $request->user()->can('manage', $team);
        $team->load('members');

        return Inertia::render('team/Show', [
            'team' => TeamResource::make($team)->resolve($request),
            'canManageTeam' => $teamManager,
        ] + ($teamManager ? [
            'teamInvites' => TeamInviteResource::collection($team->invites()->with('invitedBy')->get())->resolve($request),
        ] : []));
    }

    /**
     * Store a newly created resource in storage.
     */
    public function store(StoreTeamRequest $request): RedirectResponse
    {
        $validated = $request->validated();
        $user = $request->user();

        if (Arr::get($validated, 'require_2fa', false) && ! $user->hasEnabledTwoFactorAuthentication()) {
            throw ValidationException::withMessages([
                'require_2fa' => 'Du musst 2FA einrichten, damit du 2FA aktivieren kannst!',
            ]);
        }
        try {
            DB::transaction(function () use ($validated, $user): void {
                $team = Team::create($validated);
                $team->members()->attach($user, ['role' => TeamMemberRole::Owner]);
            });
        } catch (\Exception $exception) {
            report($exception);
            Inertia::flash('error', 'Team could not be created.');

            return back()->withInput();
        }

        Inertia::flash('success', 'Team successfully created.');

        return to_route('teams.index');
    }

    public function create(): Response
    {
        return Inertia::render('team/Create');
    }

    /**
     * Show the form for editing the specified resource.
     */
    public function edit(Request $request, Team $team): Response
    {
        return Inertia::render('team/Edit', [
            'team' => TeamResource::make($team)->resolve($request),
        ]);
    }

    /**
     * Update the specified resource in storage.
     */
    public function update(UpdateTeamRequest $request, Team $team): RedirectResponse
    {
        $validated = $request->validated();
        $user = $request->user();

        if (Arr::get($validated, 'require_2fa', false) && ! $user->hasEnabledTwoFactorAuthentication()) {
            throw ValidationException::withMessages([
                'require_2fa' => 'Du musst 2FA einrichten, damit du 2FA aktivieren kannst!',
            ]);
        }

        try {
            $team->update($request->validated());
        } catch (\Exception $exception) {
            report($exception);
            Inertia::flash('error', 'Team could not be updated.');

            return back()->withInput();
        }

        Inertia::flash('success', 'Team successfully updated.');

        return to_route('teams.show', $team);
    }

    public function destroy(Request $request, Team $team)
    {
        try {
            $team->delete();
        } catch (\Exception $exception) {
            report($exception);
            Inertia::flash('error', 'Team could not be deleted.');
        }

        Inertia::flash('success', 'Team successfully deleted.');
    }

    public function nameToSlug(Request $request): JsonResponse
    {
        $validated = $request->validate([
            'name' => 'required|string|max:255',
            'ignored_slug' => 'nullable|string|max:255',
        ]);

        $name = Arr::get($validated, 'name');
        $slug = Str::slug($name);
        $ignoredSlug = Arr::get($validated, 'ignored_slug');

        return response()->json([
            'name' => $name,
            'slug' => $slug,
            'taken' => $this->isReserved($slug) || ($slug !== $ignoredSlug && Team::whereSlug($slug)->exists()),
        ]);
    }
}