feat: harden admin auth and ticket workflows

- add rotating admin refresh tokens and password gates\n- expand ticket galleries, exports, and client resources\n- improve IP allocation auditing and dashboard data\n- enforce encrypted client access tokens on public routes
2026-10-16 17:00:55 +07:00
parent 0cdf224309
commit 0b08689ea4
52 changed files with 1421 additions and 118 deletions
@@ -2,6 +2,7 @@

 namespace App\Http\Resources\Api\Ticket;

+use App\Support\TicketGallery;
 use Illuminate\Http\Request;
 use Illuminate\Http\Resources\Json\JsonResource;

@@ -18,7 +19,7 @@ class TicketResource extends JsonResource
            'status'      => $this->status,
            'room'        => $this->room,
            'data'        => $this->data ? (is_string($this->data) ? json_decode($this->data, true) : $this->data) : null,
-            'gallery'     => $this->gallery ?? [],
+            'gallery'     => TicketGallery::adminUrls($this->resource),
            'customer_id' => $this->customer_id,
            'customer'    => $this->whenLoaded('customer', fn() => [
                'id'       => $this->customer->id,