63 lines
1.7 KiB
PHP
63 lines
1.7 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace MintyPHP\Module\Audit\Support;
|
||
|
|
|
||
|
|
use MintyPHP\Buffer;
|
||
|
|
use MintyPHP\Router;
|
||
|
|
use MintyPHP\Session;
|
||
|
|
use MintyPHP\Support\Flash;
|
||
|
|
use MintyPHP\Support\Guard;
|
||
|
|
|
||
|
|
final class AuditPageHelper
|
||
|
|
{
|
||
|
|
/**
|
||
|
|
* Guard a purge action: require login, ability, POST method, and valid CSRF token.
|
||
|
|
* Redirects on any failure (never returns in that case).
|
||
|
|
*/
|
||
|
|
public static function requirePurgePost(string $ability, string $route, string $flashGroup): void
|
||
|
|
{
|
||
|
|
Guard::requireLogin();
|
||
|
|
Guard::requireAbility($ability);
|
||
|
|
|
||
|
|
if (strtoupper((string) requestInput()->method()) !== 'POST') {
|
||
|
|
Router::redirect($route);
|
||
|
|
}
|
||
|
|
|
||
|
|
$errorBag = formErrors();
|
||
|
|
if (!Session::checkCsrfToken()) {
|
||
|
|
$errorBag->addGlobal(t('Form expired, please try again'));
|
||
|
|
flashFormErrors($errorBag, $route, $flashGroup);
|
||
|
|
Router::redirect($route);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Guard a view action: require login + ability, find record by ID, redirect on not-found.
|
||
|
|
*
|
||
|
|
* @return array<string, mixed> The found record
|
||
|
|
*/
|
||
|
|
public static function findOrRedirect(
|
||
|
|
string $ability,
|
||
|
|
string $serviceClass,
|
||
|
|
string $route,
|
||
|
|
string $errorMessage,
|
||
|
|
string $flashGroup,
|
||
|
|
string $title,
|
||
|
|
mixed $id = null
|
||
|
|
): array {
|
||
|
|
Guard::requireLogin();
|
||
|
|
Guard::requireAbility($ability);
|
||
|
|
|
||
|
|
$recordId = (int) ($id ?? 0);
|
||
|
|
$record = $recordId > 0 ? app($serviceClass)->find($recordId) : null;
|
||
|
|
if (!$record) {
|
||
|
|
Flash::error(t($errorMessage), $route, $flashGroup);
|
||
|
|
Router::redirect($route);
|
||
|
|
}
|
||
|
|
|
||
|
|
Buffer::set('title', t($title));
|
||
|
|
|
||
|
|
return $record;
|
||
|
|
}
|
||
|
|
}
|