feat: reviews

app/Http/Controllers/PostReviewsController.php

@@ -0,0 +1,85 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\PostReviewsRequest;
+use App\Http\Resources\PostReviewsResource;
+use App\Models\MealPosts;
+use App\Models\PostReviews;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
+use Illuminate\Http\Response;
+
+class PostReviewsController extends Controller
+{
+    public function index(Request $request, MealPosts $mealPost): AnonymousResourceCollection
+    {
+        $perPage = max(1, min($request->integer('per_page', 15), 100));
+
+        $reviews = $mealPost->reviews()
+            ->with('user:id,name,avatar_url')
+            ->latest()
+            ->paginate($perPage)
+            ->withQueryString();
+
+        return PostReviewsResource::collection($reviews);
+    }
+
+    public function store(PostReviewsRequest $request, MealPosts $mealPost): JsonResponse
+    {
+        $userId = $request->user()->getKey();
+
+        abort_if(
+            PostReviews::query()
+                ->where('meal_post_id', $mealPost->getKey())
+                ->where('user_id', $userId)
+                ->exists(),
+            409,
+            'Vous avez déjà donné un avis pour ce repas.'
+        );
+
+        $postReview = PostReviews::create([
+            ...$request->validated(),
+            'meal_post_id' => $mealPost->getKey(),
+            'user_id' => $userId,
+        ]);
+
+        return (new PostReviewsResource($postReview->load('user:id,name,avatar_url')))
+            ->response()
+            ->setStatusCode(201);
+    }
+
+    public function show(PostReviews $postReview): PostReviewsResource
+    {
+        return new PostReviewsResource($postReview->loadMissing(
+            'mealPost.ingredients',
+            'mealPost.user:id,name,avatar_url',
+            'user:id,name,avatar_url',
+        ));
+    }
+
+    public function update(PostReviewsRequest $request, PostReviews $postReview): PostReviewsResource
+    {
+        $this->abortIfNotOwner($request, $postReview);
+
+        $postReview->update($request->validated());
+
+        return new PostReviewsResource($postReview->refresh()->loadMissing('user:id,name,avatar_url'));
+    }
+
+    public function destroy(Request $request, PostReviews $postReview): Response
+    {
+        $this->abortIfNotOwner($request, $postReview);
+
+        $postReview->delete();
+
+        return response()->noContent();
+    }
+
+    private function abortIfNotOwner(Request $request, PostReviews $postReview): void
+    {
+        abort_unless($request->user(), 401);
+        abort_unless($postReview->user_id === $request->user()->getKey(), 404);
+    }
+}

app/Http/Requests/PostReviewsRequest.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class PostReviewsRequest extends FormRequest
+{
+    public function rules(): array
+    {
+        $isCreating = $this->isMethod('post');
+
+        return [
+            'rating' => [$isCreating ? 'required' : 'sometimes', 'integer', 'min:1', 'max:5'],
+            'comment' => ['sometimes', 'nullable', 'string', 'max:1000'],
+        ];
+    }
+
+    public function authorize(): bool
+    {
+        return true;
+    }
+}

app/Http/Resources/PostReviewsResource.php

@@ -0,0 +1,34 @@
+<?php
+
+namespace App\Http\Resources;
+
+use App\Models\PostReviews;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+use Illuminate\Support\Facades\Storage;
+
+/** @mixin PostReviews */
+class PostReviewsResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'rating' => $this->rating,
+            'comment' => $this->comment,
+            'created_at' => $this->created_at,
+            'updated_at' => $this->updated_at,
+            'user' => $this->whenLoaded('user', function (): ?array {
+                if (! $this->user) {
+                    return null;
+                }
+
+                return [
+                    'id' => $this->user->id,
+                    'name' => $this->user->name,
+                    'avatarUrl' => $this->user->avatar_url ? asset(Storage::url($this->user->avatar_url)) : null,
+                ];
+            }),
+        ];
+    }
+}