GuavaPopper
100 lines
5.1 KiB
PHP
100 lines
5.1 KiB
PHP
<?php
|
|
|
|
use App\Http\Controllers\ActivityLogController;
|
|
use App\Http\Controllers\AdminUserController;
|
|
use App\Http\Controllers\AuthController;
|
|
use App\Http\Controllers\BackupController;
|
|
use App\Http\Controllers\ExportController;
|
|
use App\Http\Controllers\IbadahController;
|
|
use App\Http\Controllers\ImportController;
|
|
use App\Http\Controllers\MiskinController;
|
|
use App\Http\Controllers\SettingController;
|
|
use Illuminate\Support\Facades\Route;
|
|
|
|
// Auth routes (public, redirect to /map if already logged in)
|
|
Route::get('/login', [AuthController::class, 'showLogin'])->name('login')->middleware('guest');
|
|
Route::post('/login', [AuthController::class, 'login'])->middleware('guest');
|
|
Route::post('/logout', [AuthController::class, 'logout'])->name('logout')->middleware('auth');
|
|
|
|
// All other routes require authentication
|
|
Route::middleware('auth')->group(function () {
|
|
|
|
// Web pages
|
|
Route::get('/', fn() => view('welcome'));
|
|
Route::get('/map', fn() => view('map'));
|
|
Route::get('/data', fn() => view('data'));
|
|
Route::get('/dashboard', fn() => view('dashboard'))->name('dashboard');
|
|
|
|
// Export routes — semua role authenticated bisa ekspor
|
|
Route::get('/export/pdf', [ExportController::class, 'allMiskinPDF'])->name('export.pdf.all');
|
|
Route::get('/export/pdf/radius/{ibadahId}/{radius}', [ExportController::class, 'radiusMiskinPDF'])
|
|
->name('export.pdf.radius')
|
|
->where(['ibadahId' => '[0-9]+', 'radius' => '[0-9]+']);
|
|
|
|
// API routes moved here for session + CSRF middleware
|
|
Route::prefix('api')->group(function () {
|
|
|
|
// Notifikasi — semua role authenticated
|
|
Route::get('/notifications', function (\Illuminate\Http\Request $request) {
|
|
$since = $request->query('since');
|
|
$after = $since ? \Carbon\Carbon::parse($since) : now()->subMinutes(1);
|
|
|
|
return response()->json([
|
|
'new_ibadah' => \App\Models\RumahIbadah::where('created_at', '>', $after)->count(),
|
|
'new_miskin' => \App\Models\RumahMiskin::where('created_at', '>', $after)->count(),
|
|
'latest_ibadah' => \App\Models\RumahIbadah::max('created_at'),
|
|
'latest_miskin' => \App\Models\RumahMiskin::max('created_at'),
|
|
]);
|
|
});
|
|
|
|
// Rumah Ibadah — read: all roles, write: administrator + pengurus_ibadah
|
|
Route::get('/ibadah', [IbadahController::class, 'index']);
|
|
Route::middleware('role:administrator|pengurus_ibadah')->group(function () {
|
|
Route::post('/ibadah', [IbadahController::class, 'store']);
|
|
Route::put('/ibadah/{id}', [IbadahController::class, 'update']);
|
|
Route::delete('/ibadah/{id}', [IbadahController::class, 'destroy']);
|
|
});
|
|
|
|
// Rumah Miskin — read: all roles, write: administrator + petugas_pendataan
|
|
Route::get('/miskin', [MiskinController::class, 'index']);
|
|
Route::middleware('role:administrator|petugas_pendataan')->group(function () {
|
|
Route::post('/miskin', [MiskinController::class, 'store']);
|
|
Route::put('/miskin/{id}', [MiskinController::class, 'update']);
|
|
Route::delete('/miskin/{id}', [MiskinController::class, 'destroy']);
|
|
});
|
|
});
|
|
|
|
// Admin routes — hanya administrator
|
|
Route::middleware('role:administrator')->group(function () {
|
|
Route::get('/admin/users', fn() => view('admin.users'))->name('admin.users');
|
|
Route::get('/admin/logs', fn() => view('admin.logs'))->name('admin.logs');
|
|
Route::get('/admin/settings', fn() => view('admin.settings'))->name('admin.settings');
|
|
|
|
Route::prefix('api/admin')->group(function () {
|
|
Route::get('/users', [AdminUserController::class, 'index']);
|
|
Route::post('/users', [AdminUserController::class, 'store']);
|
|
Route::put('/users/{id}', [AdminUserController::class, 'update']);
|
|
Route::delete('/users/{id}', [AdminUserController::class, 'destroy']);
|
|
Route::put('/users/{id}/password', [AdminUserController::class, 'resetPassword']);
|
|
|
|
Route::post('/ibadah/bulk-delete', [IbadahController::class, 'bulkDestroy']);
|
|
Route::post('/miskin/bulk-delete', [MiskinController::class, 'bulkDestroy']);
|
|
|
|
Route::post('/import/ibadah', [ImportController::class, 'ibadah']);
|
|
Route::post('/import/miskin', [ImportController::class, 'miskin']);
|
|
|
|
Route::get('/backup', [BackupController::class, 'download'])->name('admin.backup');
|
|
Route::get('/backup/list', [BackupController::class, 'listBackups']);
|
|
Route::get('/backup/download/{filename}', [BackupController::class, 'downloadStored'])
|
|
->where('filename', '[^/]+');
|
|
Route::post('/restore', [BackupController::class, 'restore']);
|
|
|
|
Route::get('/logs', [ActivityLogController::class, 'index']);
|
|
Route::get('/stats', [ActivityLogController::class, 'stats']);
|
|
|
|
Route::get('/settings', [SettingController::class, 'index']);
|
|
Route::put('/settings/{key}', [SettingController::class, 'update']);
|
|
});
|
|
});
|
|
});
|