feat: strava sync

2026-05-20 16:33:57 +02:00
parent a66fc41e1f
commit 67d4f05342
13 changed files with 565 additions and 0 deletions
@@ -0,0 +1,154 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Enums\WorkoutSource;
+use App\Http\Requests\StravaCallbackRequest;
+use App\Http\Requests\StravaSyncRequest;
+use App\Models\WorkoutSessions;
+use App\Services\StravaClient;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Carbon;
+use Illuminate\Support\Facades\Cache;
+use Illuminate\Support\Str;
+
+class StravaController extends Controller
+{
+    public function authorizationUrl(Request $request, StravaClient $strava): JsonResponse
+    {
+        $state = Str::random(40);
+
+        Cache::put($this->stateCacheKey($state), [
+            'user_id' => $request->user()->getKey(),
+        ], now()->addMinutes(10));
+
+        return response()->json([
+            'authorizationUrl' => $strava->authorizationUrl($state),
+            'scope' => config('services.strava.scope', 'read,activity:read'),
+        ]);
+    }
+
+    public function callback(StravaCallbackRequest $request, StravaClient $strava): JsonResponse
+    {
+        $data = $request->validated();
+        $state = Cache::pull($this->stateCacheKey($data['state']));
+
+        if (! is_array($state) || $state['user_id'] !== $request->user()->getKey()) {
+            return response()->json([
+                'message' => 'La connexion Strava a expiré. Relance la connexion.',
+            ], 422);
+        }
+
+        if (isset($data['error'])) {
+            return response()->json([
+                'message' => 'Connexion Strava refusée.',
+            ], 422);
+        }
+
+        $payload = $strava->exchangeCode($data['code']);
+        $scopes = $this->normalizeScopes($payload['scope'] ?? $data['scope'] ?? '');
+
+        $connection = $request->user()->stravaConnection()->updateOrCreate([], [
+            'athlete_id' => data_get($payload, 'athlete.id'),
+            'access_token' => $payload['access_token'],
+            'refresh_token' => $payload['refresh_token'],
+            'expires_at' => Carbon::createFromTimestamp((int) $payload['expires_at']),
+            'scopes' => $scopes,
+            'athlete' => $payload['athlete'] ?? null,
+        ]);
+
+        return response()->json([
+            'data' => [
+                'connected' => true,
+                'athleteId' => $connection->athlete_id,
+                'scopes' => $connection->scopes,
+                'expiresAt' => $connection->expires_at,
+            ],
+        ]);
+    }
+
+    public function status(Request $request): JsonResponse
+    {
+        $connection = $request->user()->stravaConnection;
+
+        return response()->json([
+            'data' => [
+                'connected' => $connection !== null,
+                'athleteId' => $connection?->athlete_id,
+                'scopes' => $connection?->scopes ?? [],
+                'expiresAt' => $connection?->expires_at,
+            ],
+        ]);
+    }
+
+    public function sync(StravaSyncRequest $request, StravaClient $strava): JsonResponse
+    {
+        $connection = $request->user()->stravaConnection;
+
+        if (! $connection) {
+            return response()->json([
+                'message' => 'Connecte Strava avant de synchroniser tes workouts.',
+            ], 422);
+        }
+
+        if (! $this->canReadActivities($connection->scopes ?? [])) {
+            return response()->json([
+                'message' => 'La connexion Strava doit autoriser le scope activity:read ou activity:read_all.',
+            ], 422);
+        }
+
+        $activities = $strava->activities(
+            $connection,
+            $request->integer('page', 1),
+            $request->integer('per_page', 30),
+        );
+
+        $importedCount = collect($activities)
+            ->map(fn (array $activity): WorkoutSessions => $this->storeActivity($request, $activity))
+            ->count();
+
+        return response()->json([
+            'data' => [
+                'importedCount' => $importedCount,
+                'fetchedCount' => count($activities),
+            ],
+        ]);
+    }
+
+    private function storeActivity(Request $request, array $activity): WorkoutSessions
+    {
+        return $request->user()->workouts()->updateOrCreate([
+            'source' => WorkoutSource::STRAVA,
+            'external_id' => (string) $activity['id'],
+        ], [
+            'type' => $activity['sport_type'] ?? $activity['type'] ?? 'workout',
+            'title' => $activity['name'] ?? 'Strava workout',
+            'duration_seconds' => max(1, (int) ($activity['moving_time'] ?? $activity['elapsed_time'] ?? 0)),
+            'calories_burned' => (int) round((float) ($activity['calories'] ?? 0)),
+            'distance_meters' => (int) round((float) ($activity['distance'] ?? 0)),
+            'started_at' => $activity['start_date'] ?? null,
+        ]);
+    }
+
+    private function canReadActivities(array $scopes): bool
+    {
+        return in_array('activity:read', $scopes, true)
+            || in_array('activity:read_all', $scopes, true);
+    }
+
+    private function normalizeScopes(string $scope): array
+    {
+        return Str::of($scope)
+            ->replace(',', ' ')
+            ->explode(' ')
+            ->filter()
+            ->values()
+            ->all();
+    }
+
+    private function stateCacheKey(string $state): string
+    {
+        return "strava:oauth-state:{$state}";
+    }
+}
@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class StravaCallbackRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'code' => ['required_without:error', 'string'],
+            'error' => ['nullable', 'string'],
+            'scope' => ['nullable', 'string'],
+            'state' => ['required', 'string'],
+        ];
+    }
+}
@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class StravaSyncRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'page' => ['sometimes', 'integer', 'min:1'],
+            'per_page' => ['sometimes', 'integer', 'min:1', 'max:100'],
+        ];
+    }
+}
@@ -0,0 +1,44 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Concerns\HasUlids;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+class StravaConnection extends Model
+{
+    use HasUlids;
+
+    protected $fillable = [
+        'user_id',
+        'athlete_id',
+        'access_token',
+        'refresh_token',
+        'expires_at',
+        'scopes',
+        'athlete',
+    ];
+
+    protected $hidden = [
+        'access_token',
+        'refresh_token',
+    ];
+
+    protected function casts(): array
+    {
+        return [
+            'athlete_id' => 'integer',
+            'access_token' => 'encrypted',
+            'refresh_token' => 'encrypted',
+            'expires_at' => 'datetime',
+            'scopes' => 'array',
+            'athlete' => 'array',
+        ];
+    }
+
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+}
@@ -9,6 +9,7 @@ use Illuminate\Database\Eloquent\Concerns\HasUlids;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Relations\BelongsToMany;
 use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\Relations\HasOne;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
 use Laravel\Sanctum\HasApiTokens;
@@ -78,6 +79,11 @@ class User extends Authenticatable implements FilamentUser
        return $this->hasMany(WorkoutSessions::class);
    }

+    public function stravaConnection(): HasOne
+    {
+        return $this->hasOne(StravaConnection::class);
+    }
+
    public function likedMealPosts(): BelongsToMany
    {
        return $this->belongsToMany(MealPosts::class, 'meal_post_likes', 'user_id', 'meal_posts_id')
@@ -0,0 +1,100 @@
+<?php
+
+namespace App\Services;
+
+use App\Models\StravaConnection;
+use Illuminate\Http\Client\PendingRequest;
+use Illuminate\Support\Carbon;
+use Illuminate\Support\Facades\Http;
+use RuntimeException;
+
+class StravaClient
+{
+    private const AUTHORIZE_URL = 'https://www.strava.com/oauth/mobile/authorize';
+
+    public function authorizationUrl(string $state): string
+    {
+        $clientId = config('services.strava.client_id');
+        $redirectUri = config('services.strava.redirect_uri');
+
+        if (! $clientId || ! $redirectUri) {
+            throw new RuntimeException('Strava is not configured.');
+        }
+
+        return self::AUTHORIZE_URL.'?'.http_build_query([
+            'client_id' => $clientId,
+            'redirect_uri' => $redirectUri,
+            'response_type' => 'code',
+            'approval_prompt' => 'auto',
+            'scope' => config('services.strava.scope', 'read,activity:read'),
+            'state' => $state,
+        ], '', '&', PHP_QUERY_RFC3986);
+    }
+
+    public function exchangeCode(string $code): array
+    {
+        return $this->tokenRequest()
+            ->post('/oauth/token', [
+                'client_id' => config('services.strava.client_id'),
+                'client_secret' => config('services.strava.client_secret'),
+                'code' => $code,
+                'grant_type' => 'authorization_code',
+            ])
+            ->throw()
+            ->json();
+    }
+
+    public function refresh(StravaConnection $connection): StravaConnection
+    {
+        $payload = $this->tokenRequest()
+            ->post('/oauth/token', [
+                'client_id' => config('services.strava.client_id'),
+                'client_secret' => config('services.strava.client_secret'),
+                'grant_type' => 'refresh_token',
+                'refresh_token' => $connection->refresh_token,
+            ])
+            ->throw()
+            ->json();
+
+        $connection->update([
+            'access_token' => $payload['access_token'],
+            'refresh_token' => $payload['refresh_token'],
+            'expires_at' => Carbon::createFromTimestamp((int) $payload['expires_at']),
+        ]);
+
+        return $connection->refresh();
+    }
+
+    public function activities(StravaConnection $connection, int $page, int $perPage): array
+    {
+        return Http::baseUrl('https://www.strava.com/api/v3')
+            ->withToken($this->accessToken($connection))
+            ->timeout(10)
+            ->connectTimeout(3)
+            ->retry([100, 500, 1000])
+            ->get('/athlete/activities', [
+                'page' => $page,
+                'per_page' => $perPage,
+            ])
+            ->throw()
+            ->json();
+    }
+
+    private function accessToken(StravaConnection $connection): string
+    {
+        if (! $connection->expires_at || $connection->expires_at->lte(now()->addMinutes(5))) {
+            $connection = $this->refresh($connection);
+        }
+
+        return $connection->access_token;
+    }
+
+    private function tokenRequest(): PendingRequest
+    {
+        return Http::baseUrl('https://www.strava.com')
+            ->asForm()
+            ->timeout(10)
+            ->connectTimeout(3)
+            ->retry([100, 500, 1000]);
+    }
+}