feat(api): ajouter les endpoints session, documents, champs et squelette

2026-01-11 17:05:41 +01:00
parent 037ed782a7
commit fab1d25871
6 changed files with 1309 additions and 0 deletions
--- a/src/Controller/SessionProfileController.php
+++ b/src/Controller/SessionProfileController.php
@@ -0,0 +1,90 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Controller;
+
+use App\Repository\ProfileRepository;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Session\SessionInterface;
+use Symfony\Component\Routing\Attribute\Route;
+
+final class SessionProfileController
+{
+    public function __construct(private readonly ProfileRepository $profiles)
+    {
+    }
+
+    #[Route('/api/session/profile', name: 'api_session_profile_get', methods: ['GET'])]
+    public function getActiveProfile(Request $request): JsonResponse
+    {
+        $session = $request->getSession();
+        if (!$session instanceof SessionInterface) {
+            return new JsonResponse(['message' => 'Session indisponible.'], JsonResponse::HTTP_INTERNAL_SERVER_ERROR);
+        }
+
+        $profileId = $session->get('profileId');
+        if (!$profileId) {
+            return new JsonResponse(['message' => 'Aucun profil actif.'], JsonResponse::HTTP_UNAUTHORIZED);
+        }
+
+        $profile = $this->profiles->find($profileId);
+        if (!$profile || !$profile->isActive()) {
+            $session->remove('profileId');
+            return new JsonResponse(['message' => 'Profil introuvable ou inactif.'], JsonResponse::HTTP_UNAUTHORIZED);
+        }
+
+        return new JsonResponse([
+            'id' => $profile->getId(),
+            'firstName' => $profile->getFirstName(),
+            'lastName' => $profile->getLastName(),
+            'email' => $profile->getEmail(),
+            'isActive' => $profile->isActive(),
+            'roles' => $profile->getRoles(),
+        ]);
+    }
+
+    #[Route('/api/session/profile', name: 'api_session_profile_post', methods: ['POST'])]
+    public function activateProfile(Request $request): JsonResponse
+    {
+        $session = $request->getSession();
+        if (!$session instanceof SessionInterface) {
+            return new JsonResponse(['message' => 'Session indisponible.'], JsonResponse::HTTP_INTERNAL_SERVER_ERROR);
+        }
+
+        $payload = $request->toArray();
+        $profileId = $payload['profileId'] ?? null;
+
+        if (!$profileId) {
+            return new JsonResponse(['message' => 'profileId est requis.'], JsonResponse::HTTP_BAD_REQUEST);
+        }
+
+        $profile = $this->profiles->find($profileId);
+        if (!$profile || !$profile->isActive()) {
+            return new JsonResponse(['message' => 'Profil introuvable ou inactif.'], JsonResponse::HTTP_UNAUTHORIZED);
+        }
+
+        $session->set('profileId', $profile->getId());
+
+        return new JsonResponse([
+            'id' => $profile->getId(),
+            'firstName' => $profile->getFirstName(),
+            'lastName' => $profile->getLastName(),
+            'email' => $profile->getEmail(),
+            'isActive' => $profile->isActive(),
+            'roles' => $profile->getRoles(),
+        ]);
+    }
+
+    #[Route('/api/session/profile', name: 'api_session_profile_delete', methods: ['DELETE'])]
+    public function logout(Request $request): JsonResponse
+    {
+        $session = $request->getSession();
+        if ($session instanceof SessionInterface) {
+            $session->invalidate();
+        }
+
+        return new JsonResponse(['success' => true]);
+    }
+}