Add feature tests for domain order management

- Implement AdminDomainOrderTest to cover admin functionalities for domain orders including listing, confirming registration, KYC updates, activation, rejection, and refunds. - Implement ClientDomainOrderTest to cover client functionalities for placing domain orders, including validation for balance, duplicate orders, and domain normalization. - Ensure proper handling of domain pricing and service statuses throughout the tests.
2026-07-10 14:16:35 +07:00
parent 61c0e026c8
commit dfb926055d
81 changed files with 35743 additions and 481 deletions
@@ -5,10 +5,11 @@ namespace App\Http\Controllers\Api\Admin\Customer;
 use App\Http\Controllers\Controller;
 use App\Http\Requests\CreateCustomerRequest;
 use App\Http\Resources\Api\Admin\CustomerResource;
-use App\Jobs\Mail\PasswordRecoverJob;
+use App\Mail\Customer\ManualCustomerEmail;
 use App\Models\Customer;
 use App\Models\Invoice;
 use App\Models\Order;
+use App\Models\Template;
 use App\Models\Transaction;
 use App\Models\Log;
 use App\Repositories\Customer\CustomerRepositoryInterface;
@@ -25,6 +26,7 @@ use Illuminate\Http\Request;
 use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Facades\Hash;
 use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Mail;
 use Illuminate\Support\Str;
 use App\Enums\Invoice\InvoiceStatus;
 use App\Enums\Order\OrderStatus;
@@ -233,11 +235,31 @@ class CustomerController extends Controller

    public function trash(Request $request): JsonResponse
    {
-        $query = $this->customerRepository->onlyTrashed([], ['hosting', 'vps', 'domain']);
+        $perPage = min((int) $request->get('per_page', 15), 500);
+
+        $query = Customer::onlyTrashed()
+            ->with(['hosting', 'vps', 'domain']);
+
+        if ($filter = $request->get('filter')) {
+            $query->where(function ($q) use ($filter) {
+                $filter = trim($filter);
+                $q->where('fullname', 'LIKE', "%{$filter}%")
+                  ->orWhere('email', 'LIKE', "%{$filter}%")
+                  ->orWhere('phone', 'LIKE', "%{$filter}%");
+            });
+        }
+
+        $paginator = $query->paginate($perPage);

        return response()->json([
            'error' => false,
-            'data' => CustomerResource::collection($query->get())
+            'data'  => [
+                'items'        => CustomerResource::collection($paginator),
+                'total'        => $paginator->total(),
+                'per_page'     => $paginator->perPage(),
+                'current_page' => $paginator->currentPage(),
+                'last_page'    => $paginator->lastPage(),
+            ],
        ]);
    }

@@ -462,6 +484,105 @@ class CustomerController extends Controller
        }
    }

+    public function sendEmail(Request $request, string $uuid): JsonResponse
+    {
+        $data = $request->validate([
+            'template_id' => 'nullable|integer|exists:template,id',
+            'subject' => 'required_without:template_id|nullable|string|max:255',
+            'message' => 'required_without:template_id|nullable|string',
+            'to' => 'nullable|string|max:1000',
+            'cc' => 'nullable|string|max:1000',
+            'bcc' => 'nullable|string|max:1000',
+        ]);
+
+        $customer = $this->customerRepository->findBy('uuid', $uuid);
+
+        if (!$customer) {
+            return response()->json([
+                'error' => true,
+                'message' => "Can't find customer by UUID #" . $uuid,
+            ], 404);
+        }
+
+        $template = null;
+        $subject = trim((string) ($data['subject'] ?? ''));
+        $message = trim((string) ($data['message'] ?? ''));
+
+        if (!empty($data['template_id'])) {
+            $template = Template::query()
+                ->whereKey($data['template_id'])
+                ->where('status', 1)
+                ->first();
+
+            if (!$template) {
+                return response()->json([
+                    'error' => true,
+                    'message' => 'Template không tồn tại hoặc đang bị tắt.',
+                ], 422);
+            }
+
+            $subject = trim((string) $template->subject);
+            $message = trim((string) $template->message);
+        }
+
+        if ($subject === '' || $message === '') {
+            return response()->json([
+                'error' => true,
+                'message' => 'Subject và content không được để trống.',
+            ], 422);
+        }
+
+        $to = $this->parseEmailRecipients($data['to'] ?? null);
+        if ($to === []) {
+            $to = [$customer->email];
+        }
+
+        $cc = $this->parseEmailRecipients($data['cc'] ?? null);
+        $bcc = $this->parseEmailRecipients($data['bcc'] ?? null);
+
+        if ($to === []) {
+            return response()->json([
+                'error' => true,
+                'message' => 'Không có địa chỉ email nhận hợp lệ.',
+            ], 422);
+        }
+
+        try {
+            $mailer = Mail::to($to);
+            if ($cc !== []) {
+                $mailer->cc($cc);
+            }
+            if ($bcc !== []) {
+                $mailer->bcc($bcc);
+            }
+
+            $mailer->send(new ManualCustomerEmail($subject, $message));
+
+            $admin = Auth::guard('admin')->user();
+            Log::create([
+                'agent' => 'admin',
+                'client_ip' => $request->ip(),
+                'description' => sprintf(
+                    '%s gửi email cho customer %s%s',
+                    $admin->username ?? $admin->email ?? 'Admin',
+                    $customer->email,
+                    $template ? sprintf(' bằng template #%s', $template->id) : '',
+                ),
+                'customer_id' => $customer->id,
+            ]);
+
+            return response()->json([
+                'error' => false,
+                'message' => 'Đã gửi email cho khách hàng.',
+            ]);
+        } catch (\Throwable $e) {
+            return response()->json([
+                'error' => true,
+                'message' => $e->getMessage(),
+            ], 500);
+        }
+    }
+
    public function addCredit(Request $request, string $uuid): JsonResponse
    {
        $request->validate([
@@ -510,6 +631,20 @@ class CustomerController extends Controller
        }
    }

+    private function parseEmailRecipients(?string $value): array
+    {
+        if (!$value) {
+            return [];
+        }
+
+        return collect(preg_split('/[,;]+/', $value) ?: [])
+            ->map(fn($email) => trim((string) $email))
+            ->filter(fn($email) => $email !== '' && filter_var($email, FILTER_VALIDATE_EMAIL))
+            ->unique()
+            ->values()
+            ->all();
+    }
+
    public function addTotal(Request $request, string $uuid): JsonResponse
    {
        $request->validate([
@@ -0,0 +1,291 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers\Api\Admin\Domain;
+
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Api\Admin\Domain\ConfirmRegistrationRequest;
+use App\Http\Requests\Api\Admin\Domain\RejectAndRefundRequest;
+use App\Http\Requests\Api\Admin\Domain\UpdateKycUrlRequest;
+use App\Mail\Customer\DomainOrderStatusMail;
+use App\Models\Notification;
+use App\Models\Order;
+use App\Models\Service;
+use App\Models\Setting;
+use App\Models\Template;
+use App\Repositories\Api\Domain\DomainOrderRepository;
+use App\Services\Api\Domain\DomainOrderService;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Log;
+use Illuminate\Support\Facades\Mail;
+
+class AdminDomainOrderController extends Controller
+{
+    public function __construct(
+        private readonly DomainOrderRepository $repo,
+        private readonly DomainOrderService    $service,
+    ) {}
+
+    public function pendingCount(): JsonResponse
+    {
+        $count = $this->repo->countPending();
+
+        return response()->json(['error' => false, 'data' => ['count' => $count]]);
+    }
+
+    public function index(Request $request): JsonResponse
+    {
+        $orders = $this->repo->getDomainOrders(
+            $request->only(['status', 'customer', 'domain', 'from', 'to', 'per_page'])
+        );
+
+        $items = collect($orders->items())->map(fn ($order) => $this->formatOrder($order));
+
+        return response()->json([
+            'error' => false,
+            'data'  => [
+                'items'        => $items,
+                'total'        => $orders->total(),
+                'per_page'     => $orders->perPage(),
+                'current_page' => $orders->currentPage(),
+                'last_page'    => $orders->lastPage(),
+            ],
+        ]);
+    }
+
+    public function show(int $id): JsonResponse
+    {
+        $order = $this->repo->findDomainOrder($id);
+
+        if (!$order) {
+            return response()->json([
+                'error'   => true,
+                'message' => 'Không tìm thấy đơn hàng domain.',
+            ], 404);
+        }
+
+        return response()->json([
+            'error' => false,
+            'data'  => $this->formatOrder($order),
+        ]);
+    }
+
+    public function confirmRegistration(ConfirmRegistrationRequest $request, int $id): JsonResponse
+    {
+        $order = $this->repo->findDomainOrder($id);
+
+        if (!$order) {
+            return response()->json([
+                'error'   => true,
+                'message' => 'Không tìm thấy đơn hàng domain.',
+            ], 404);
+        }
+
+        try {
+            $service = $this->service->confirmRegistration($order, $request->validated());
+
+            return response()->json([
+                'error'   => false,
+                'message' => 'Xác nhận đăng ký tên miền thành công.',
+                'data'    => $this->formatService($service),
+            ]);
+        } catch (\InvalidArgumentException $e) {
+            return response()->json(['error' => true, 'message' => $e->getMessage()], 422);
+        } catch (\Throwable $e) {
+            Log::error('AdminDomainOrderController@confirmRegistration', ['error' => $e->getMessage(), 'id' => $id]);
+
+            return response()->json(['error' => true, 'message' => 'Xác nhận thất bại. Vui lòng thử lại.'], 500);
+        }
+    }
+
+    public function updateKyc(UpdateKycUrlRequest $request, int $id): JsonResponse
+    {
+        $order = $this->repo->findDomainOrder($id);
+
+        if (!$order) {
+            return response()->json([
+                'error'   => true,
+                'message' => 'Không tìm thấy đơn hàng domain.',
+            ], 404);
+        }
+
+        try {
+            $service = $this->service->updateKycUrl($order, $request->validated()['kyc_url']);
+
+            return response()->json([
+                'error'   => false,
+                'message' => 'Cập nhật link KYC thành công.',
+                'data'    => $this->formatService($service),
+            ]);
+        } catch (\InvalidArgumentException $e) {
+            return response()->json(['error' => true, 'message' => $e->getMessage()], 422);
+        } catch (\Throwable $e) {
+            Log::error('AdminDomainOrderController@updateKyc', ['error' => $e->getMessage(), 'id' => $id]);
+
+            return response()->json(['error' => true, 'message' => 'Cập nhật KYC thất bại. Vui lòng thử lại.'], 500);
+        }
+    }
+
+    public function activate(int $id): JsonResponse
+    {
+        $order = $this->repo->findDomainOrder($id);
+
+        if (!$order) {
+            return response()->json([
+                'error'   => true,
+                'message' => 'Không tìm thấy đơn hàng domain.',
+            ], 404);
+        }
+
+        try {
+            $service = $this->service->activate($order);
+
+            $this->notifyCustomerDomainStatus($order, 'approved');
+
+            return response()->json([
+                'error'   => false,
+                'message' => 'Kích hoạt dịch vụ tên miền thành công.',
+                'data'    => $this->formatService($service),
+            ]);
+        } catch (\InvalidArgumentException $e) {
+            return response()->json(['error' => true, 'message' => $e->getMessage()], 422);
+        } catch (\Throwable $e) {
+            Log::error('AdminDomainOrderController@activate', ['error' => $e->getMessage(), 'id' => $id]);
+
+            return response()->json(['error' => true, 'message' => 'Kích hoạt thất bại. Vui lòng thử lại.'], 500);
+        }
+    }
+
+    public function rejectAndRefund(RejectAndRefundRequest $request, int $id): JsonResponse
+    {
+        $order = $this->repo->findDomainOrder($id);
+
+        if (!$order) {
+            return response()->json([
+                'error'   => true,
+                'message' => 'Không tìm thấy đơn hàng domain.',
+            ], 404);
+        }
+
+        try {
+            $service = $this->service->rejectAndRefund($order, $request->validated()['reason']);
+
+            $this->notifyCustomerDomainStatus($order, 'rejected', $request->validated()['reason']);
+
+            return response()->json([
+                'error'   => false,
+                'message' => 'Từ chối và hoàn tiền thành công.',
+                'data'    => $this->formatService($service),
+            ]);
+        } catch (\InvalidArgumentException $e) {
+            return response()->json(['error' => true, 'message' => $e->getMessage()], 422);
+        } catch (\Throwable $e) {
+            Log::error('AdminDomainOrderController@rejectAndRefund', ['error' => $e->getMessage(), 'id' => $id]);
+
+            return response()->json(['error' => true, 'message' => 'Hoàn tiền thất bại. Vui lòng thử lại.'], 500);
+        }
+    }
+
+    // =========================================================================
+    // Private helpers
+    // =========================================================================
+
+    private function notifyCustomerDomainStatus(Order $order, string $status, string $reason = ''): void
+    {
+        $customer   = $order->customer;
+        $domainName = $order->orderItems->first()?->domain_name ?? '';
+        $orderNum   = $order->order_num;
+
+        if (!$customer) {
+            return;
+        }
+
+        [$title, $body, $templateName] = $status === 'approved'
+            ? ["Tên miền {$domainName} đã được duyệt", "Tên miền {$domainName} (#{$orderNum}) đã được kích hoạt thành công.", 'Domain Order Approved']
+            : ["Tên miền {$domainName} bị từ chối", "Tên miền {$domainName} (#{$orderNum}) đã bị từ chối. Lý do: {$reason}. Số dư đã được hoàn lại.", 'Domain Order Rejected'];
+
+        Notification::notifyCustomer($customer, [
+            'type'  => 'domain_order_' . $status,
+            'title' => $title,
+            'body'  => $body,
+            'link'  => '/don-hang',
+        ]);
+
+        try {
+            $setting      = Setting::where('key', 'setting')->first();
+            $settingValue = $setting ? json_decode((string) $setting->value, true) : [];
+
+            $template = Template::where('name', $templateName)->first();
+            if (!$template) {
+                return;
+            }
+
+            Mail::to($customer->email)->send(new DomainOrderStatusMail($template, [
+                'company_name' => $settingValue['company'] ?? config('app.name'),
+                'company_logo' => $settingValue['logo'] ?? '',
+                'domain_name'  => $domainName,
+                'client_name'  => $customer->fullname,
+                'order_num'    => $orderNum,
+                'reason'       => $reason,
+            ]));
+        } catch (\Throwable $e) {
+            Log::error('AdminDomainOrderController: không thể gửi email khách hàng: ' . $e->getMessage());
+        }
+    }
+
+    // =========================================================================
+    // Private formatters
+    // =========================================================================
+
+    private function formatOrder(Order $order): array
+    {
+        $item    = $order->orderItems->first();
+        $service = $item?->service;
+
+        return [
+            'id'          => $order->id,
+            'order_num'   => $order->order_num,
+            'status'      => $order->status,
+            'total'       => $order->total,
+            'payment_method' => $order->payment_method,
+            'created_at'  => $order->created_at?->toIso8601String(),
+            'customer'    => $order->customer ? [
+                'id'       => $order->customer->id,
+                'uuid'     => $order->customer->uuid,
+                'fullname' => $order->customer->fullname,
+                'email'    => $order->customer->email,
+            ] : null,
+            'domain_name' => $item?->domain_name,
+            'months'      => $item?->months,
+            'invoice'     => $order->invoice ? [
+                'id'             => $order->invoice->id,
+                'invoice_number' => $order->invoice->invoice_number,
+                'status'         => $order->invoice->status,
+                'total'          => $order->invoice->total,
+                'paid_at'        => $order->invoice->paid_at?->toIso8601String(),
+            ] : null,
+            'service'     => $service ? $this->formatService($service) : null,
+        ];
+    }
+
+    private function formatService(Service $service): array
+    {
+        return [
+            'id'                   => $service->id,
+            'uuid'                 => $service->uuid,
+            'status'               => $service->status,
+            'server_name'          => $service->server_name,
+            'registrar_reference'  => $service->registrar_reference,
+            'kyc_url'              => $service->kyc_url,
+            'rejection_reason'     => $service->rejection_reason,
+            'auto_renew'           => $service->auto_renew,
+            'started_at'           => $service->started_at?->toIso8601String(),
+            'expires_at'           => $service->expires_at?->toIso8601String(),
+            'refunded_at'          => $service->refunded_at?->toIso8601String(),
+            'cancelled_at'         => $service->cancelled_at?->toIso8601String(),
+            'created_at'           => $service->created_at?->toIso8601String(),
+        ];
+    }
+}
@@ -0,0 +1,137 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers\Api\Admin\Domain;
+
+use App\Http\Controllers\Controller;
+use App\Models\Setting;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Validator;
+
+class AdminDomainPricingController extends Controller
+{
+    /**
+     * Default domain pricing data (used as fallback and for seeding)
+     */
+    private function getDefaultData(): array
+    {
+        return [
+            'domains' => [
+                ['tld' => '.vn', 'setupFee' => 'Miễn phí', 'firstYear' => 400000, 'renewal' => 400000],
+                ['tld' => '.com.vn', 'setupFee' => 'Miễn phí', 'firstYear' => 300000, 'renewal' => 300000],
+                ['tld' => '.net.vn', 'setupFee' => 'Miễn phí', 'firstYear' => 300000, 'renewal' => 300000],
+                ['tld' => '.org.vn', 'setupFee' => 'Miễn phí', 'firstYear' => 300000, 'renewal' => 300000],
+                ['tld' => '.com', 'setupFee' => 'Miễn phí', 'firstYear' => 320000, 'renewal' => 340000],
+                ['tld' => '.net', 'setupFee' => 'Miễn phí', 'firstYear' => 369000, 'renewal' => 409000],
+                ['tld' => '.org', 'setupFee' => 'Miễn phí', 'firstYear' => 339000, 'renewal' => 369000],
+                ['tld' => '.biz', 'setupFee' => 'Miễn phí', 'firstYear' => 399000, 'renewal' => 409000],
+                ['tld' => '.info', 'setupFee' => 'Miễn phí', 'firstYear' => 490000, 'renewal' => 509000],
+                ['tld' => '.pro', 'setupFee' => 'Miễn phí', 'firstYear' => 469000, 'renewal' => 489000],
+                ['tld' => '.name', 'setupFee' => 'Miễn phí', 'firstYear' => 259000, 'renewal' => 259000],
+                ['tld' => '.ws', 'setupFee' => 'Miễn phí', 'firstYear' => 909000, 'renewal' => 909000],
+                ['tld' => '.tv', 'setupFee' => 'Miễn phí', 'firstYear' => 765000, 'renewal' => 819000],
+                ['tld' => '.mobi', 'setupFee' => 'Miễn phí', 'firstYear' => 589000, 'renewal' => 589000],
+                ['tld' => '.uk', 'setupFee' => 'Miễn phí', 'firstYear' => 537000, 'renewal' => 537000],
+                ['tld' => '.asia', 'setupFee' => 'Miễn phí', 'firstYear' => 380000, 'renewal' => 452000],
+                ['tld' => '.me', 'setupFee' => 'Miễn phí', 'firstYear' => 1029000, 'renewal' => 1029000],
+                ['tld' => '.us', 'setupFee' => 'Miễn phí', 'firstYear' => 323000, 'renewal' => 323000],
+            ],
+            'services' => [
+                ['name' => 'Chứng thực Rapid SSL', 'setupFee' => 230000, 'maintenance' => 750000, 'note' => '01 Domain'],
+                ['name' => 'Chứng thực Quick SSL', 'setupFee' => 230000, 'maintenance' => 2300000, 'note' => '01 Domain'],
+                ['name' => 'Chứng thực Wildcard SSL', 'setupFee' => 230000, 'maintenance' => 3300000, 'note' => 'Unlimited Subdomain'],
+                ['name' => 'Chứng thực True BusinessID', 'setupFee' => 540000, 'maintenance' => 3900000, 'note' => '01 Domain'],
+                ['name' => 'Chứng thực True BusinessID WildCard', 'setupFee' => 900000, 'maintenance' => 15000000, 'note' => 'Unlimited Subdomain'],
+                ['name' => 'Đăng ký DNS riêng', 'setupFee' => 200000, 'maintenance' => 'Miễn phí', 'note' => "dns1.tenmiencuaban.com\ndns2.tenmiencuaban.com"],
+                ['name' => 'Bảo mật thông tin tên miền', 'setupFee' => 'Miễn phí', 'maintenance' => 90000, 'note' => 'Toàn bộ thông tin Whois tên miền của bạn sẽ được giấu kín hoàn toàn với mọi công cụ Whois'],
+                ['name' => 'Khóa tên miền', 'setupFee' => 'Miễn phí', 'maintenance' => 'Miễn phí', 'note' => 'Tăng cường bảo mật cho tên miền'],
+            ],
+        ];
+    }
+
+    /**
+     * GET /administrator/domain-pricing
+     */
+    public function index(): JsonResponse
+    {
+        $setting = Setting::where('key', 'domain_pricing')->first();
+
+        if ($setting && !empty($setting->value)) {
+            $value = json_decode((string) $setting->value, true);
+            if (is_array($value) && !empty($value)) {
+                return response()->json([
+                    'error' => false,
+                    'data' => $value,
+                    'message' => 'Lấy bảng giá tên miền thành công.',
+                ]);
+            }
+        }
+
+        return response()->json([
+            'error' => false,
+            'data' => $this->getDefaultData(),
+            'message' => 'Lấy bảng giá tên miền thành công (mặc định).',
+        ]);
+    }
+
+    /**
+     * PUT /administrator/domain-pricing
+     */
+    public function update(Request $request): JsonResponse
+    {
+        $validator = Validator::make($request->all(), [
+            'domains'   => 'sometimes|array',
+            'services'  => 'sometimes|array',
+        ]);
+
+        if ($validator->fails()) {
+            return response()->json([
+                'error' => true,
+                'message' => $validator->errors()->first(),
+            ], 422);
+        }
+
+        $current = Setting::where('key', 'domain_pricing')->first();
+        $existing = $current ? json_decode((string) $current->value, true) : $this->getDefaultData();
+
+        if ($request->has('domains')) {
+            $existing['domains'] = $request->input('domains');
+        }
+        if ($request->has('services')) {
+            $existing['services'] = $request->input('services');
+        }
+
+        Setting::updateOrCreate(
+            ['key' => 'domain_pricing'],
+            ['value' => json_encode($existing, JSON_UNESCAPED_UNICODE)]
+        );
+
+        return response()->json([
+            'error' => false,
+            'message' => 'Cập nhật bảng giá tên miền thành công.',
+            'data' => $existing,
+        ]);
+    }
+
+    /**
+     * POST /administrator/domain-pricing/reset
+     * Reset to default values.
+     */
+    public function reset(): JsonResponse
+    {
+        $default = $this->getDefaultData();
+
+        Setting::updateOrCreate(
+            ['key' => 'domain_pricing'],
+            ['value' => json_encode($default, JSON_UNESCAPED_UNICODE)]
+        );
+
+        return response()->json([
+            'error' => false,
+            'message' => 'Đã reset bảng giá tên miền về mặc định.',
+            'data' => $default,
+        ]);
+    }
+}
@@ -0,0 +1,275 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers\Api\Admin\Domain;
+
+use App\Http\Controllers\Controller;
+use App\Models\Setting;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Http;
+use Illuminate\Support\Facades\Validator;
+
+class InetDomainController extends Controller
+{
+    private const BASE_URL = 'https://developers.inet.vn/api/gateway/v1/domain';
+
+    /**
+     * Lấy API key từ settings
+     */
+    private function getApiKey(): ?string
+    {
+        $setting = Setting::where('key', 'setting')->first();
+        $value = $setting ? json_decode((string) $setting->value, true) : [];
+        return $value['inet_api_key'] ?? $value['api_inet'] ?? null;
+    }
+
+    /**
+     * Headers mặc định cho iNET API
+     */
+    private function defaultHeaders(): array
+    {
+        $apiKey = $this->getApiKey();
+
+        if (! $apiKey) {
+            return [];
+        }
+
+        return [
+            'Authorization' => 'Bearer ' . $apiKey,
+            'Accept' => 'application/json',
+        ];
+    }
+
+    /**
+     * GET /administrator/inet-domain/whois/{domain}
+     * Tra cứu thông tin WHOIS của tên miền.
+     */
+    public function whois(string $domain, Request $request): JsonResponse
+    {
+        $apiKey = $this->getApiKey();
+
+        if (! $apiKey) {
+            return response()->json([
+                'error' => true,
+                'message' => 'Chưa cấu hình API key iNET (api_inet).',
+            ], 400);
+        }
+
+        $url = self::BASE_URL . '/whois/' . urlencode($domain);
+
+        if ($request->boolean('refreshCache')) {
+            $url .= '?refreshCache=true';
+        }
+
+        try {
+            $response = Http::withHeaders($this->defaultHeaders())
+                ->timeout(30)
+                ->get($url);
+
+            return $this->proxyResponse($response);
+        } catch (\Throwable $e) {
+            return response()->json([
+                'error' => true,
+                'message' => 'Lỗi kết nối iNET API: ' . $e->getMessage(),
+            ], 500);
+        }
+    }
+
+    /**
+     * GET /administrator/inet-domain/check-available
+     * Kiểm tra tên miền có khả dụng không.
+     */
+    public function checkAvailable(Request $request): JsonResponse
+    {
+        $apiKey = $this->getApiKey();
+
+        if (! $apiKey) {
+            return response()->json([
+                'error' => true,
+                'message' => 'Chưa cấu hình API key iNET (api_inet).',
+            ], 400);
+        }
+
+        $validator = Validator::make($request->all(), [
+            'name' => 'required|string|max:255',
+        ]);
+
+        if ($validator->fails()) {
+            return response()->json([
+                'error' => true,
+                'message' => $validator->errors()->first(),
+            ], 422);
+        }
+
+        $url = self::BASE_URL . '/check-available?name=' . urlencode($request->input('name'));
+
+        try {
+            $response = Http::withHeaders($this->defaultHeaders())
+                ->timeout(30)
+                ->get($url);
+
+            return $this->proxyResponse($response);
+        } catch (\Throwable $e) {
+            return response()->json([
+                'error' => true,
+                'message' => 'Lỗi kết nối iNET API: ' . $e->getMessage(),
+            ], 500);
+        }
+    }
+
+    /**
+     * POST /administrator/inet-domain/bulk-check-available
+     * Kiểm tra nhiều tên miền cùng lúc.
+     */
+    public function bulkCheckAvailable(Request $request): JsonResponse
+    {
+        $apiKey = $this->getApiKey();
+
+        if (! $apiKey) {
+            return response()->json([
+                'error' => true,
+                'message' => 'Chưa cấu hình API key iNET (api_inet).',
+            ], 400);
+        }
+
+        $validator = Validator::make($request->all(), [
+            'domains' => 'required|array|min:1',
+            'domains.*' => 'required|string|max:255',
+        ]);
+
+        if ($validator->fails()) {
+            return response()->json([
+                'error' => true,
+                'message' => $validator->errors()->first(),
+            ], 422);
+        }
+
+        try {
+            $response = Http::withHeaders([
+                ...$this->defaultHeaders(),
+                'Content-Type' => 'application/json',
+            ])
+                ->timeout(30)
+                ->post(self::BASE_URL . '/bulk-check-available', [
+                    'domains' => $request->input('domains'),
+                ]);
+
+            return $this->proxyResponse($response);
+        } catch (\Throwable $e) {
+            return response()->json([
+                'error' => true,
+                'message' => 'Lỗi kết nối iNET API: ' . $e->getMessage(),
+            ], 500);
+        }
+    }
+
+    /**
+     * POST /administrator/inet-domain/ai-suggest
+     * Gợi ý tên miền bằng AI.
+     */
+    public function aiSuggest(Request $request): JsonResponse
+    {
+        $apiKey = $this->getApiKey();
+
+        if (! $apiKey) {
+            return response()->json([
+                'error' => true,
+                'message' => 'Chưa cấu hình API key iNET (api_inet).',
+            ], 400);
+        }
+
+        $validator = Validator::make($request->all(), [
+            'tlds' => 'required|array|min:1',
+            'tlds.*' => 'required|string|max:50',
+            'message' => 'required|string|max:500',
+            'maxLength' => 'nullable|integer|min:1|max:100',
+        ]);
+
+        if ($validator->fails()) {
+            return response()->json([
+                'error' => true,
+                'message' => $validator->errors()->first(),
+            ], 422);
+        }
+
+        $payload = [
+            'tlds' => $request->input('tlds'),
+            'message' => $request->input('message'),
+        ];
+
+        if ($request->has('maxLength')) {
+            $payload['maxLength'] = $request->input('maxLength');
+        }
+
+        try {
+            $response = Http::withHeaders([
+                ...$this->defaultHeaders(),
+                'Content-Type' => 'application/json',
+            ])
+                ->timeout(30)
+                ->post(self::BASE_URL . '/ai-suggest', $payload);
+
+            return $this->proxyResponse($response);
+        } catch (\Throwable $e) {
+            return response()->json([
+                'error' => true,
+                'message' => 'Lỗi kết nối iNET API: ' . $e->getMessage(),
+            ], 500);
+        }
+    }
+
+    /**
+     * GET /administrator/inet-domain/suffixes
+     * Lấy danh sách đuôi tên miền (TLD) và bảng giá.
+     */
+    public function suffixes(): JsonResponse
+    {
+        $apiKey = $this->getApiKey();
+
+        if (! $apiKey) {
+            return response()->json([
+                'error' => true,
+                'message' => 'Chưa cấu hình API key iNET (api_inet).',
+            ], 400);
+        }
+
+        try {
+            $response = Http::withHeaders($this->defaultHeaders())
+                ->timeout(30)
+                ->get(self::BASE_URL . '/suffixes');
+
+            return $this->proxyResponse($response);
+        } catch (\Throwable $e) {
+            return response()->json([
+                'error' => true,
+                'message' => 'Lỗi kết nối iNET API: ' . $e->getMessage(),
+            ], 500);
+        }
+    }
+
+    /**
+     * Xử lý response từ iNET API và trả về client.
+     */
+    private function proxyResponse(\Illuminate\Http\Client\Response $response): JsonResponse
+    {
+        $status = $response->status();
+
+        if ($response->failed()) {
+            $body = $response->json() ?? ['message' => $response->body()];
+            return response()->json([
+                'error' => true,
+                'message' => $body['message'] ?? 'iNET API trả về lỗi HTTP ' . $status,
+                'data' => $body,
+            ], $status >= 400 && $status < 600 ? $status : 500);
+        }
+
+        $body = $response->json();
+
+        return response()->json([
+            'error' => false,
+            'data' => $body,
+        ]);
+    }
+}
@@ -0,0 +1,95 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers\Api\Admin\Media;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+
+class MediaController extends Controller
+{
+    private const IMAGE_MIME_TYPES = [
+        'image/jpeg',
+        'image/png',
+        'image/webp',
+        'image/gif',
+        'image/svg+xml',
+    ];
+
+    public function index(Request $request): JsonResponse
+    {
+        $validated = $request->validate([
+            'keyword' => ['sometimes', 'nullable', 'string', 'max:255'],
+            'type' => ['sometimes', 'nullable', 'in:all,image,file'],
+            'page' => ['sometimes', 'integer', 'min:1'],
+            'per_page' => ['sometimes', 'integer', 'min:1', 'max:100'],
+        ]);
+
+        $keyword = Str::lower((string) ($validated['keyword'] ?? ''));
+        $type = $validated['type'] ?? 'all';
+        $page = (int) ($validated['page'] ?? 1);
+        $perPage = (int) ($validated['per_page'] ?? 24);
+
+        $files = collect(Storage::disk('local')->allFiles())
+            ->filter(fn (string $path) => ! Str::startsWith(basename($path), '.'))
+            ->map(fn (string $path) => $this->formatFile($path))
+            ->filter(function (array $file) use ($keyword, $type) {
+                if ($type === 'image' && ! $file['is_image']) {
+                    return false;
+                }
+
+                if ($type === 'file' && $file['is_image']) {
+                    return false;
+                }
+
+                if ($keyword === '') {
+                    return true;
+                }
+
+                return Str::contains(Str::lower($file['name']), $keyword)
+                    || Str::contains(Str::lower($file['path']), $keyword)
+                    || Str::contains(Str::lower((string) $file['mime_type']), $keyword);
+            })
+            ->sortByDesc('last_modified')
+            ->values();
+
+        $total = $files->count();
+        $items = $files->slice(($page - 1) * $perPage, $perPage)->values();
+
+        return response()->json([
+            'error' => false,
+            'data' => [
+                'items' => $items,
+                'current_page' => $page,
+                'per_page' => $perPage,
+                'total' => $total,
+                'last_page' => (int) ceil($total / $perPage),
+            ],
+        ]);
+    }
+
+    private function formatFile(string $path): array
+    {
+        $disk = Storage::disk('local');
+        $mimeType = $disk->mimeType($path) ?: 'application/octet-stream';
+        $isPublic = Str::startsWith($path, 'public/');
+        $publicPath = $isPublic ? Str::after($path, 'public/') : null;
+
+        return [
+            'id' => sha1($path),
+            'disk' => $isPublic ? 'public' : 'local',
+            'name' => basename($path),
+            'path' => $path,
+            'directory' => trim(dirname($path), '.'),
+            'mime_type' => $mimeType,
+            'is_image' => in_array($mimeType, self::IMAGE_MIME_TYPES, true),
+            'size' => $disk->size($path),
+            'last_modified' => date(DATE_ATOM, $disk->lastModified($path)),
+            'url' => $publicPath ? Storage::disk('public')->url($publicPath) : null,
+        ];
+    }
+}
@@ -50,6 +50,7 @@ class SettingController extends Controller
    {
        $validator = Validator::make($request->all(), [
            'setting'               => 'sometimes|array',
+            'setting.api_inet'      => 'sometimes|string|nullable',
            'smtp'                  => 'sometimes|array',
            'smtp.host'             => 'sometimes|string',
            'smtp.port'             => 'sometimes|integer',