feat: administration page

.gitignore

@@ -18,3 +18,4 @@ yarn-error.log
 /.idea
 /.vscode
 public/css/sqlite_test
+bun.lockb

.prettierrc.json

@@ -0,0 +1,6 @@
+{
+    "printWidth": 120,
+    "tabWidth": 2,
+    "trailingComma": "all",
+    "singleQuote": true
+}

app/Http/Controllers/AdministrationController.php

@@ -0,0 +1,67 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Helpers\Products;
+use App\Http\Resources\UserResource;
+use App\Models\LicenceKey;
+use App\Models\User;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Gate;
+use Inertia\Inertia;
+
+class AdministrationController extends Controller
+{
+    public function index(Request $request)
+    {
+        if (! Gate::allows('administration')) {
+            abort(403);
+        }
+
+        $usersCollection = UserResource::collection(User::paginate(20));
+
+        return Inertia::render('Administration/Index', [
+            'users' => $usersCollection,
+            'last_week_count' => User::where('created_at', '>=', now()->subWeek())->count(),
+            'last_month_count' => User::where('created_at', '>=', now()->subMonth())->count(),
+        ]);
+    }
+
+    public function show(Request $request, User $user)
+    {
+        if (! Gate::allows('administration')) {
+            abort(403);
+        }
+
+        $licences = $user->licenceKeys()
+            ->with('plan')
+            ->get()
+            ->map(function (LicenceKey $licence) use ($request): array {
+                $price = app(Products::class)
+                    ->getProductPrices(collect([$licence->plan->plan_id_on_paddle]), $request->user())
+                    ->first();
+
+                return [
+                    'id' => $licence->id,
+                    'plan' => [
+                        'id' => $licence->plan->id,
+                        'product' => $licence->plan->product,
+                        'friendly_name' => $licence->plan->friendly_name,
+                        'description' => $licence->plan->description,
+                        'plan_name' => $licence->plan->plan_name,
+                        'price' => $price['price'],
+                        'frequency' => $price['frequency_name'],
+                    ],
+                    'key' => $licence->key,
+                    'subscription_state' => $licence->subscription_state,
+                    'created_at' => $licence->created_at->isoFormat('LL'),
+                    'valid_until_at' => $licence->valid_until_at_formatted,
+                ];
+            });
+
+        return Inertia::render('Administration/Show', [
+            'users' => new UserResource($user),
+            'licences' => $licences,
+        ]);
+    }
+}

app/Http/Middleware/RestrictAdministrationAccess.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+
+class RestrictAdministrationAccess
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @param  \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse)  $next
+     * @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
+     */
+    public function handle(Request $request, Closure $next)
+    {
+        if (Auth::user()->instance_administrator) {
+            return $next($request);
+        } else {
+            abort(401);
+        }
+    }
+}

app/Http/Resources/UserResource.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Resources;
+
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class UserResource extends JsonResource
+{
+    /**
+     * Transform the resource into an array.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return array|\Illuminate\Contracts\Support\Arrayable|\JsonSerializable
+     */
+    public function toArray($request)
+    {
+        return [
+            'id' => $this->id,
+            'name' => $this->name,
+            'email' => $this->email,
+            'created_at' => $this->created_at->isoFormat('L'),
+        ];
+    }
+}

app/Models/User.php

@@ -37,6 +37,7 @@ class User extends Authenticatable implements MustVerifyEmail
         'postal_code',
         'country',
         'state',
+        'instance_administrator',
     ];
 
     /**
@@ -58,6 +59,7 @@ class User extends Authenticatable implements MustVerifyEmail
      */
     protected $casts = [
         'email_verified_at' => 'datetime',
+        'instance_administrator' => 'boolean',
     ];
 
     /**
@@ -117,4 +119,14 @@ public function webauthnKeys()
     {
         return $this->hasMany(WebauthnKey::class);
     }
+
+    /**
+     * Get the created at date formatted.
+     *
+     * @return string|null
+     */
+    public function getCreatedAtFormattedAttribute(): ?string
+    {
+        return $this->created_at->isoFormat('LL');
+    }
 }

app/Providers/AuthServiceProvider.php

@@ -2,7 +2,9 @@
 
 namespace App\Providers;
 
+use App\Models\User;
 use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
+use Illuminate\Support\Facades\Gate;
 use Laravel\Passport\Passport;
 
 class AuthServiceProvider extends ServiceProvider
@@ -34,5 +36,9 @@ public function boot()
         if (! $this->app->routesAreCached()) {
             Passport::routes();
         }
+
+        Gate::define('administration', function (User $user) {
+            return $user->instance_administrator === true;
+        });
     }
 }

database/factories/UserFactory.php

@@ -39,6 +39,7 @@ public function definition()
             'postal_code' => $this->faker->postcode(),
             'country' => $this->faker->countryCode(),
             'state' => $this->faker->state(),
+            'instance_administrator' => false,
         ];
     }
 

database/migrations/2022_07_10_000000_administrator.php

@@ -0,0 +1,32 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        Schema::table('users', function (Blueprint $table) {
+            $table->boolean('instance_administrator')->default(false)->after('locale');
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        Schema::table('users', function (Blueprint $table) {
+            $table->dropColumn('instance_administrator');
+        });
+    }
+};

phpstan.neon

@@ -11,6 +11,7 @@ parameters:
         - '#Parameter \#1 \$view of function view expects view-string|null, string given\.#'
         - '#Access to an undefined property App\\Models\\Receipt::\$billable_id\.#'
         - '#Access to an undefined property App\\Models\\Subscription::\$billable_id\.#'
+        - '#Access to an undefined property App\\Http\\Resources.*\.#'
 
         - message: '#Access to an undefined property Laravel\\Paddle\\Receipt::.*\.#'
           path: */Http/Controllers/DashboardController.php

resources/js/Layouts/AppLayout.vue

@@ -87,6 +87,10 @@ const logout = () => {
                                             {{ $t('Settings') }}
                                         </JetDropdownLink>
 
+                                        <JetDropdownLink v-if="$page.props.user.instance_administrator" :href="route('administration.index')">
+                                          Administration
+                                        </JetDropdownLink>
+
                                         <JetDropdownLink v-if="$page.props.jetstream.hasApiFeatures" :href="route('api-tokens.index')">
                                             {{ $t('API Tokens') }}
                                         </JetDropdownLink>
@@ -158,6 +162,10 @@ const logout = () => {
                                 {{ $t('Settings') }}
                             </JetResponsiveNavLink>
 
+                            <JetResponsiveNavLink v-if="$page.props.user.instance_administrator" :href="route('administration.index')" :active="route().current('administration.index')">
+                              Administration
+                            </JetResponsiveNavLink>
+
                             <JetResponsiveNavLink v-if="$page.props.jetstream.hasApiFeatures" :href="route('api-tokens.index')" :active="route().current('api-tokens.index')">
                                 {{ $t('API Tokens') }}
                             </JetResponsiveNavLink>