initial commit

routes/api.php

@@ -0,0 +1,131 @@
+<?php
+
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Route;
+
+use App\Http\Controllers\AuthController;
+use App\Http\Controllers\AdminUserController;
+use App\Http\Controllers\DiseaseController;
+use App\Http\Controllers\DiseaseRecordController;
+use App\Http\Controllers\FileController;
+use App\Http\Controllers\LogActionController;
+use App\Http\Controllers\CommentController;
+use App\Http\Controllers\DiseaseRecordExportController;
+/*
+|--------------------------------------------------------------------------
+| API Routes
+|--------------------------------------------------------------------------
+|
+| Here is where you can register API routes for your application. These
+| routes are loaded by the RouteServiceProvider and all of them will
+| be assigned to the "api" middleware group. Make something great!
+|
+*/
+
+Route::middleware('auth:sanctum')->group(function () {
+    
+    // Admin-only routes for user management
+    Route::middleware(['checkRole:admin'])->prefix('admin')->group(function () {
+        Route::get('/dashboard', [AuthController::class, 'adminDashboard'])->name('admin.dashboard');
+    
+        Route::prefix('users')->group(function(){
+            Route::get('/', [AdminUserController::class, 'getUsers'])->name('admin.users.index');
+            Route::post('/', [AdminUserController::class, 'createUser'])->name('admin.users.create');
+            Route::post('/approve/{userId}', [AdminUserController::class, 'approveUser'])->name('admin.users.approve');
+            Route::post('/reject/{userId}', [AdminUserController::class, 'rejectUser'])->name('admin.users.reject');
+            Route::put('/{userId}', [AdminUserController::class, 'editUser'])->name('admin.users.edit');
+            Route::delete('/{userId}', [AdminUserController::class, 'deleteUser'])->name('admin.users.delete');
+            Route::get('/{userId}', [AdminUserController::class, 'getUserDetails'])->name('admin.users.show');
+        });
+
+        Route::get('/logs', [LogActionController::class, 'getLogActions'])->name('admin.logs.index');
+    });
+
+    Route::get('users/profile', [AdminUserController::class, 'getUserProfile'])->name('admin.users.show');
+    // Disease Route
+    Route::prefix('diseases')->middleware(['checkDiseaseAccess'])->group(function() {
+        Route::get('/', [DiseaseController::class, 'getDiseases']);
+        
+        // Admin-only routes
+        Route::middleware(['checkRole:admin'])->group(function() {
+            Route::get('/stats', [DiseaseController::class, 'getStatistics']);
+            Route::post('/', [DiseaseController::class, 'createDisease']);
+            Route::put('/{diseaseId}', [DiseaseController::class, 'editDisease']);
+            Route::delete('/{diseaseId}', [DiseaseController::class, 'deleteDisease']);
+        });
+
+        // Get Disease
+        Route::get('/{diseaseId}', [DiseaseController::class, 'getDiseaseDetails']);
+        
+        // Comment Routes
+        Route::prefix('{diseaseId}/comments')->group(function () {
+            Route::get('/', [CommentController::class, 'getComments']);
+            Route::post('/', [CommentController::class, 'createComment']);
+            Route::put('/{commentId}', [CommentController::class, 'editComment'])->middleware('checkCommentAuthorOrAdmin');
+            Route::delete('/{commentId}', [CommentController::class, 'deleteComment'])->middleware('checkCommentAuthorOrAdmin');
+        });
+        
+
+        // Disease records routes
+        Route::prefix('{diseaseId}/records')->group(function () {
+            Route::get('/', [DiseaseRecordController::class, 'getDiseaseRecords']);
+            Route::get('/{recordId}', [DiseaseRecordController::class, 'getDiseaseRecordDetails']);
+            
+            Route::middleware(['checkRole:admin,operator', 'ensureOperatorManagesDisease'])->group(function() {
+                Route::post('/', [DiseaseRecordController::class, 'createDiseaseRecord']);
+                Route::put('/{recordId}', [DiseaseRecordController::class, 'editDiseaseRecord']);
+                Route::delete('/{recordId}', [DiseaseRecordController::class, 'deleteDiseaseRecord']);
+            });
+        });
+
+    });
+
+    // // Files Route
+    // Route::get('files/records/download/{path}', [FileController::class, 'downloadRecord'])
+    // ->where('path', 'diseases/records/[0-9]+/.*')
+    // ->middleware(['checkDiseaseAccess'])
+    // ->name('files.download.record');
+    
+    // Route::get('files/records/preview/{path}', [FileController::class, 'previewFile'])
+    // ->where('path', 'diseases/records/[0-9]+/.*')
+    // ->middleware(['checkDiseaseAccess'])
+    // ->name('files.records.preview');
+
+    Route::middleware(['auth:sanctum', 'checkDiseaseAccess'])->group(function () {
+        // Export all records
+        Route::get('/diseases/{diseaseId}/export', [
+            DiseaseRecordExportController::class, 
+            'exportToCsv'
+        ])->name('disease.records.export');
+        
+        // Export single record
+        Route::get('/diseases/{diseaseId}/records/{recordId}/export', [
+            DiseaseRecordExportController::class, 
+            'exportSingleRecord'
+        ])->name('disease.record.export');
+    });
+});
+
+// Authentication Routes
+Route::prefix('auth')->group(function () {
+    Route::post('/register', [AuthController::class, 'register'])->name('auth.register');
+    Route::post('/login', [AuthController::class, 'login'])->name('auth.login');
+    Route::middleware('auth:sanctum')->post('/logout', [AuthController::class, 'logout'])->name('auth.logout');
+});
+
+// Root route
+Route::get('/', function () {
+    return response()->json([
+        'success' => true,
+        'data' => [],
+        'message' => 'Welcome Home'
+    ]);
+})->name('home');
+
+Route::fallback(static function () {
+    return response()->json([
+        'success' => false,
+        'data' => [],
+        'message' => 'Not found'
+    ], 404);
+});

routes/channels.php

@@ -0,0 +1,18 @@
+<?php
+
+use Illuminate\Support\Facades\Broadcast;
+
+/*
+|--------------------------------------------------------------------------
+| Broadcast Channels
+|--------------------------------------------------------------------------
+|
+| Here you may register all of the event broadcasting channels that your
+| application supports. The given channel authorization callbacks are
+| used to check if an authenticated user can listen to the channel.
+|
+*/
+
+Broadcast::channel('App.Models.User.{id}', function ($user, $id) {
+    return (int) $user->id === (int) $id;
+});

routes/console.php

@@ -0,0 +1,19 @@
+<?php
+
+use Illuminate\Foundation\Inspiring;
+use Illuminate\Support\Facades\Artisan;
+
+/*
+|--------------------------------------------------------------------------
+| Console Routes
+|--------------------------------------------------------------------------
+|
+| This file is where you may define all of your Closure based console
+| commands. Each Closure is bound to a command instance allowing a
+| simple approach to interacting with each command's IO methods.
+|
+*/
+
+Artisan::command('inspire', function () {
+    $this->comment(Inspiring::quote());
+})->purpose('Display an inspiring quote');

routes/web.php

@@ -0,0 +1,24 @@
+<?php
+
+use Illuminate\Support\Facades\Route;
+
+/*
+|--------------------------------------------------------------------------
+| Web Routes
+|--------------------------------------------------------------------------
+|
+| Here is where you can register web routes for your application. These
+| routes are loaded by the RouteServiceProvider and all of them will
+| be assigned to the "web" middleware group. Make something great!
+|
+*/
+
+Route::redirect('/', '/api/');
+
+Route::fallback(static function () {
+    return response()->json([
+        'success' => false,
+        'data' => [],
+        'message' => 'Not found'
+    ], 404);
+});