baodev0andClaude Opus 5.5
e888a6ed5d
- Turnstile (App\Support\Turnstile, middleware turnstile) cho login admin và login/register/forgot/reset của khách; cấu hình ở setting key=turnstile, secret mã hoá SignRSA. - Menu sidebar khách (setting client_menu) và nút tắt topbar (setting client_quick_links) do admin sửa qua administrator/client-menu[/quick-links], khách đọc v1/setting/menu, v1/setting/quick-links. - v1/setting và settings/public chỉ trả whitelist PublicSetting::FIELDS (trước đây lộ bot_token, inet_api_key). - Cài đặt tài khoản khách (preferences), rate limit theo IP cho register/resend-verify. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
76 lines
2.8 KiB
PHP
76 lines
2.8 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Support;
|
|
|
|
use App\Models\Setting;
|
|
|
|
final class ClientMenu
|
|
{
|
|
public const SETTING_KEY = 'client_menu';
|
|
|
|
public const HREF_PATTERN = '#^(/(?!/)|https?://)#i';
|
|
|
|
public const ICON_PATTERN = '/^[a-z0-9-]+:[a-z0-9-]+$/i';
|
|
|
|
/**
|
|
* @return list<array{title: string, icon: ?string, href: ?string, disabled: bool, children: list<array{title: string, icon: ?string, href: string, disabled: bool}>}>
|
|
*/
|
|
public static function items(): array
|
|
{
|
|
$value = json_decode((string) Setting::where('key', self::SETTING_KEY)->value('value'), true);
|
|
|
|
return is_array($value) ? $value : [];
|
|
}
|
|
|
|
/**
|
|
* @return array<string, mixed>
|
|
*/
|
|
public static function rules(): array
|
|
{
|
|
return [
|
|
'items' => 'present|array|max:30',
|
|
'items.*' => 'array',
|
|
'items.*.title' => 'required|string|max:60',
|
|
'items.*.icon' => ['nullable', 'string', 'max:100', 'regex:' . self::ICON_PATTERN],
|
|
'items.*.href' => ['nullable', 'required_without:items.*.children', 'string', 'max:255', 'regex:' . self::HREF_PATTERN],
|
|
'items.*.disabled' => 'sometimes|boolean',
|
|
'items.*.children' => 'sometimes|array|max:20',
|
|
'items.*.children.*.title' => 'required|string|max:60',
|
|
'items.*.children.*.icon' => ['nullable', 'string', 'max:100', 'regex:' . self::ICON_PATTERN],
|
|
'items.*.children.*.href' => ['required', 'string', 'max:255', 'regex:' . self::HREF_PATTERN],
|
|
'items.*.children.*.disabled' => 'sometimes|boolean',
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @param array<int, array<string, mixed>> $items
|
|
*/
|
|
public static function save(array $items): array
|
|
{
|
|
$normalized = array_map(fn (array $item) => [
|
|
...self::normalizeLink($item),
|
|
'children' => array_map(self::normalizeLink(...), array_values($item['children'] ?? [])),
|
|
], array_values($items));
|
|
|
|
Setting::updateOrCreate(['key' => self::SETTING_KEY], ['value' => json_encode($normalized, JSON_UNESCAPED_UNICODE)]);
|
|
|
|
return $normalized;
|
|
}
|
|
|
|
/**
|
|
* @param array<string, mixed> $item
|
|
* @return array{title: string, icon: ?string, href: ?string, disabled: bool}
|
|
*/
|
|
public static function normalizeLink(array $item): array
|
|
{
|
|
return [
|
|
'title' => trim((string) $item['title']),
|
|
'icon' => ($item['icon'] ?? '') !== '' ? (string) $item['icon'] : null,
|
|
'href' => ($item['href'] ?? '') !== '' ? (string) $item['href'] : null,
|
|
'disabled' => (bool) ($item['disabled'] ?? false),
|
|
];
|
|
}
|
|
}
|