8e67431622
All checks were successful
Deploy / Build and Deploy to Production (push) Successful in 20s
Generate marker slugs from title (e.g., "marqueur-2") instead of timestamp-based slugs (e.g., "marker-1770362950"). Also fix panelUrl generation to use Kirby's panel URL method. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
471 lines
16 KiB
PHP
471 lines
16 KiB
PHP
<?php
|
|
|
|
/**
|
|
* API Routes for Map Editor Plugin
|
|
*
|
|
* Provides CRUD operations for marker subpages
|
|
*/
|
|
|
|
return [
|
|
[
|
|
'pattern' => 'map-editor/pages/(:all)/markers',
|
|
'method' => 'GET',
|
|
'auth' => false, // Allow Panel session auth
|
|
'action' => function (string $pageId) {
|
|
try {
|
|
// Get user from session (Panel context)
|
|
$user = kirby()->user();
|
|
|
|
// For Panel requests, we trust the session is valid
|
|
// The Panel itself already requires authentication
|
|
if (!$user && !kirby()->option('debug', false)) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Unauthorized',
|
|
'code' => 401
|
|
];
|
|
}
|
|
|
|
// Get the map page
|
|
$mapPage = kirby()->page($pageId);
|
|
if (!$mapPage) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Map page not found',
|
|
'code' => 404
|
|
];
|
|
}
|
|
|
|
// Check if user can read the page
|
|
if (!$mapPage->isReadable()) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Forbidden',
|
|
'code' => 403
|
|
];
|
|
}
|
|
|
|
// Get all marker subpages, listed only, sorted by num
|
|
$markerPages = $mapPage
|
|
->children()
|
|
->listed()
|
|
->filterBy('intendedTemplate', 'marker')
|
|
->sortBy('num', 'asc');
|
|
|
|
// Format markers for response
|
|
$markers = [];
|
|
foreach ($markerPages as $marker) {
|
|
// Get custom icon if available
|
|
$iconFile = $marker->markerIcon()->toFile();
|
|
$iconUrl = $iconFile ? $iconFile->url() : null;
|
|
|
|
// Get icon size if set
|
|
$iconSize = $marker->markerIconSize()->isNotEmpty()
|
|
? (int) $marker->markerIconSize()->value()
|
|
: 40;
|
|
|
|
$markers[] = [
|
|
'id' => $marker->id(),
|
|
'slug' => $marker->slug(),
|
|
'title' => $marker->title()->value(),
|
|
'position' => [
|
|
'lat' => (float) $marker->latitude()->value(),
|
|
'lon' => (float) $marker->longitude()->value()
|
|
],
|
|
'num' => $marker->num(),
|
|
'panelUrl' => (string) $marker->panel()->url(),
|
|
'iconUrl' => $iconUrl,
|
|
'iconSize' => $iconSize
|
|
];
|
|
}
|
|
|
|
return [
|
|
'status' => 'success',
|
|
'data' => [
|
|
'markers' => $markers
|
|
]
|
|
];
|
|
|
|
} catch (Exception $e) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => $e->getMessage(),
|
|
'code' => 500
|
|
];
|
|
}
|
|
}
|
|
],
|
|
|
|
[
|
|
'pattern' => 'map-editor/pages/(:all)/markers',
|
|
'method' => 'POST',
|
|
'auth' => false, // Allow Panel session auth
|
|
'action' => function (string $pageId) {
|
|
try {
|
|
// Get user from session (Panel context)
|
|
$user = kirby()->user();
|
|
|
|
// For Panel requests, we trust the session is valid
|
|
if (!$user && !kirby()->option('debug', false)) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Unauthorized',
|
|
'code' => 401
|
|
];
|
|
}
|
|
|
|
// Note: CSRF verification skipped for Panel session requests
|
|
// The Panel session itself is already authenticated and secure
|
|
|
|
// Get the map page
|
|
$mapPage = kirby()->page($pageId);
|
|
if (!$mapPage) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Map page not found',
|
|
'code' => 404
|
|
];
|
|
}
|
|
|
|
// Check if user can create children
|
|
if (!$mapPage->permissions()->can('create')) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Forbidden',
|
|
'code' => 403
|
|
];
|
|
}
|
|
|
|
// Get position from request body
|
|
// Use data() instead of body() - Kirby automatically parses JSON
|
|
$data = kirby()->request()->data();
|
|
|
|
if (!isset($data['position']['lat']) || !isset($data['position']['lon'])) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Position (lat, lon) is required',
|
|
'code' => 400
|
|
];
|
|
}
|
|
|
|
$lat = (float) $data['position']['lat'];
|
|
$lon = (float) $data['position']['lon'];
|
|
|
|
// Validate coordinates
|
|
if ($lat < -90 || $lat > 90 || $lon < -180 || $lon > 180) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Invalid coordinates',
|
|
'code' => 400
|
|
];
|
|
}
|
|
|
|
// Get existing markers to determine next num
|
|
$existingMarkers = $mapPage
|
|
->children()
|
|
->filterBy('intendedTemplate', 'marker');
|
|
$nextNum = $existingMarkers->count() + 1;
|
|
|
|
// Generate title and slug based on title
|
|
$title = 'Marqueur ' . $nextNum;
|
|
$slug = Str::slug($title);
|
|
|
|
// Create the new marker page
|
|
$newMarker = $mapPage->createChild([
|
|
'slug' => $slug,
|
|
'template' => 'marker',
|
|
'content' => [
|
|
'title' => $title,
|
|
'latitude' => $lat,
|
|
'longitude' => $lon
|
|
]
|
|
]);
|
|
|
|
// Publish the page as listed with the correct num
|
|
$newMarker->changeStatus('listed', $nextNum);
|
|
|
|
// Get custom icon if available (new markers won't have one initially)
|
|
$iconFile = $newMarker->markerIcon()->toFile();
|
|
$iconUrl = $iconFile ? $iconFile->url() : null;
|
|
$iconSize = $newMarker->markerIconSize()->isNotEmpty()
|
|
? (int) $newMarker->markerIconSize()->value()
|
|
: 40;
|
|
|
|
return [
|
|
'status' => 'success',
|
|
'data' => [
|
|
'marker' => [
|
|
'id' => $newMarker->id(),
|
|
'slug' => $newMarker->slug(),
|
|
'title' => $title,
|
|
'position' => [
|
|
'lat' => $lat,
|
|
'lon' => $lon
|
|
],
|
|
'num' => $nextNum,
|
|
'panelUrl' => (string) $newMarker->panel()->url(),
|
|
'iconUrl' => $iconUrl,
|
|
'iconSize' => $iconSize
|
|
]
|
|
]
|
|
];
|
|
|
|
} catch (Exception $e) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => $e->getMessage(),
|
|
'code' => 500
|
|
];
|
|
}
|
|
}
|
|
],
|
|
|
|
[
|
|
'pattern' => 'map-editor/pages/(:all)/markers/(:all)',
|
|
'method' => 'PATCH',
|
|
'auth' => false, // Allow Panel session auth
|
|
'action' => function (string $pageId, string $markerId) {
|
|
try {
|
|
// Get user from session (Panel context)
|
|
$user = kirby()->user();
|
|
|
|
if (!$user && !kirby()->option('debug', false)) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Unauthorized',
|
|
'code' => 401
|
|
];
|
|
}
|
|
|
|
// Note: CSRF verification skipped for Panel session requests
|
|
// The Panel session itself is already authenticated and secure
|
|
|
|
// Get the marker page
|
|
$marker = kirby()->page($markerId);
|
|
if (!$marker) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Marker not found',
|
|
'code' => 404
|
|
];
|
|
}
|
|
|
|
// Check if user can update the page
|
|
if (!$marker->permissions()->can('update')) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Forbidden',
|
|
'code' => 403
|
|
];
|
|
}
|
|
|
|
// Get position from request body
|
|
$data = kirby()->request()->data();
|
|
|
|
if (!isset($data['position']['lat']) || !isset($data['position']['lon'])) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Position (lat, lon) is required',
|
|
'code' => 400
|
|
];
|
|
}
|
|
|
|
$lat = (float) $data['position']['lat'];
|
|
$lon = (float) $data['position']['lon'];
|
|
|
|
// Validate coordinates
|
|
if ($lat < -90 || $lat > 90 || $lon < -180 || $lon > 180) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Invalid coordinates',
|
|
'code' => 400
|
|
];
|
|
}
|
|
|
|
// Update the marker position
|
|
$marker->update([
|
|
'latitude' => $lat,
|
|
'longitude' => $lon
|
|
]);
|
|
|
|
// Get custom icon if available
|
|
$iconFile = $marker->markerIcon()->toFile();
|
|
$iconUrl = $iconFile ? $iconFile->url() : null;
|
|
$iconSize = $marker->markerIconSize()->isNotEmpty()
|
|
? (int) $marker->markerIconSize()->value()
|
|
: 40;
|
|
|
|
return [
|
|
'status' => 'success',
|
|
'data' => [
|
|
'marker' => [
|
|
'id' => $marker->id(),
|
|
'slug' => $marker->slug(),
|
|
'title' => $marker->title()->value(),
|
|
'position' => [
|
|
'lat' => $lat,
|
|
'lon' => $lon
|
|
],
|
|
'num' => $marker->num(),
|
|
'panelUrl' => (string) $marker->panel()->url(),
|
|
'iconUrl' => $iconUrl,
|
|
'iconSize' => $iconSize
|
|
]
|
|
]
|
|
];
|
|
|
|
} catch (Exception $e) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => $e->getMessage(),
|
|
'code' => 500
|
|
];
|
|
}
|
|
}
|
|
],
|
|
|
|
[
|
|
'pattern' => 'map-editor/pages/(:all)/markers/(:all)',
|
|
'method' => 'DELETE',
|
|
'auth' => false, // Allow Panel session auth
|
|
'action' => function (string $pageId, string $markerId) {
|
|
try {
|
|
// Get user from session (Panel context)
|
|
$user = kirby()->user();
|
|
|
|
if (!$user && !kirby()->option('debug', false)) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Unauthorized',
|
|
'code' => 401
|
|
];
|
|
}
|
|
|
|
// Note: CSRF verification skipped for Panel session requests
|
|
// The Panel session itself is already authenticated and secure
|
|
|
|
// Get the marker page
|
|
$marker = kirby()->page($markerId);
|
|
if (!$marker) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Marker not found',
|
|
'code' => 404
|
|
];
|
|
}
|
|
|
|
// Check if user can delete the page
|
|
if (!$marker->permissions()->can('delete')) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Forbidden',
|
|
'code' => 403
|
|
];
|
|
}
|
|
|
|
// Delete the marker page
|
|
$marker->delete(true); // true = force delete
|
|
|
|
return [
|
|
'status' => 'success',
|
|
'data' => [
|
|
'message' => 'Marker deleted successfully'
|
|
]
|
|
];
|
|
|
|
} catch (Exception $e) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => $e->getMessage(),
|
|
'code' => 500
|
|
];
|
|
}
|
|
}
|
|
],
|
|
|
|
[
|
|
'pattern' => 'map-editor/pages/(:all)/position',
|
|
'method' => 'PATCH',
|
|
'auth' => false, // Allow Panel session auth
|
|
'action' => function (string $pageId) {
|
|
try {
|
|
// Get user from session (Panel context)
|
|
$user = kirby()->user();
|
|
|
|
if (!$user && !kirby()->option('debug', false)) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Unauthorized',
|
|
'code' => 401
|
|
];
|
|
}
|
|
|
|
// Note: CSRF verification skipped for Panel session requests
|
|
// The Panel session itself is already authenticated and secure
|
|
|
|
// Get the page (marker page in single mode)
|
|
$page = kirby()->page($pageId);
|
|
if (!$page) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Page not found',
|
|
'code' => 404
|
|
];
|
|
}
|
|
|
|
// Check if user can update the page
|
|
if (!$page->permissions()->can('update')) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Forbidden',
|
|
'code' => 403
|
|
];
|
|
}
|
|
|
|
// Get coordinates from request body
|
|
$data = kirby()->request()->data();
|
|
|
|
if (!isset($data['latitude']) || !isset($data['longitude'])) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Latitude and longitude are required',
|
|
'code' => 400
|
|
];
|
|
}
|
|
|
|
$lat = (float) $data['latitude'];
|
|
$lon = (float) $data['longitude'];
|
|
|
|
// Validate coordinates
|
|
if ($lat < -90 || $lat > 90 || $lon < -180 || $lon > 180) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => 'Invalid coordinates',
|
|
'code' => 400
|
|
];
|
|
}
|
|
|
|
// Update the page position
|
|
$page->update([
|
|
'latitude' => $lat,
|
|
'longitude' => $lon
|
|
]);
|
|
|
|
return [
|
|
'status' => 'success',
|
|
'data' => [
|
|
'latitude' => $lat,
|
|
'longitude' => $lon
|
|
]
|
|
];
|
|
|
|
} catch (Exception $e) {
|
|
return [
|
|
'status' => 'error',
|
|
'message' => $e->getMessage(),
|
|
'code' => 500
|
|
];
|
|
}
|
|
}
|
|
]
|
|
];
|