kang
a10135d6ee
在多个玩家相关控制器中引入 AdminSiteScope，确保管理员在执行操作前具备相应的接入站点权限。更新 Player 相关请求以支持 site_code 参数，增强权限验证逻辑，确保系统安全性与灵活性。同时，新增 AdminUser 模型方法以获取可访问的站点 ID 列表，优化权限管理。
55 lines
1.7 KiB
PHP
55 lines
1.7 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api\V1\Admin\Player;
|
|
|
|
use App\Models\Player;
|
|
use Illuminate\Http\Request;
|
|
use App\Support\ApiResponse;
|
|
use Illuminate\Http\JsonResponse;
|
|
use App\Http\Controllers\Controller;
|
|
use App\Support\AdminApiList;
|
|
use App\Support\AdminSiteScope;
|
|
use App\Support\PlayerApiPresenter;
|
|
|
|
/** GET /api/v1/admin/players */
|
|
final class AdminPlayerIndexController extends Controller
|
|
{
|
|
public function __invoke(Request $request): JsonResponse
|
|
{
|
|
$admin = $request->lotteryAdmin();
|
|
abort_if($admin === null, 401);
|
|
|
|
$p = AdminApiList::readPaging($request);
|
|
$keyword = trim((string) $request->query('keyword', ''));
|
|
$status = $request->query('status');
|
|
$siteCode = $request->query('site_code');
|
|
|
|
$q = Player::query()
|
|
->with(['wallets' => static fn ($wq) => $wq->orderBy('wallet_type')->orderBy('currency_code')])
|
|
->orderByDesc('id');
|
|
|
|
AdminSiteScope::applyPlayerFilters(
|
|
$q,
|
|
$admin,
|
|
is_string($siteCode) ? $siteCode : null,
|
|
);
|
|
|
|
if ($keyword !== '') {
|
|
$term = '%'.addcslashes($keyword, '%_\\').'%';
|
|
$q->where(static function ($sub) use ($term): void {
|
|
$sub->where('site_player_id', 'like', $term)
|
|
->orWhere('username', 'like', $term)
|
|
->orWhere('nickname', 'like', $term);
|
|
});
|
|
}
|
|
|
|
if ($status !== null && $status !== '') {
|
|
$q->where('status', (int) $status);
|
|
}
|
|
|
|
$paginator = $q->paginate($p['perPage'], ['*'], 'page', $p['page']);
|
|
|
|
return AdminApiList::json($paginator, fn (Player $player): array => PlayerApiPresenter::listItem($player));
|
|
}
|
|
}
|