#41 - report system

app/Http/Controllers/ReportController.php

@@ -0,0 +1,74 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Interns2025b\Http\Controllers;
+
+use Carbon\Carbon;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
+use Interns2025b\Http\Requests\StoreReportRequest;
+use Interns2025b\Http\Resources\ReportResource;
+use Interns2025b\Models\Event;
+use Interns2025b\Models\Organization;
+use Interns2025b\Models\Report;
+use Interns2025b\Models\User;
+use Symfony\Component\HttpFoundation\Response as Status;
+
+class ReportController
+{
+    public function store(StoreReportRequest $request): JsonResponse
+    {
+        $user = $request->user();
+
+        $type = match ($request->input("type")) {
+            "user" => User::class,
+            "organization" => Organization::class,
+            "event" => Event::class,
+        };
+
+        $alreadyReported = Report::where("reporter_id", $user->id)
+            ->where("reportable_type", $type)
+            ->where("reportable_id", $request->input("id"))
+            ->whereDate("created_at", Carbon::today())
+            ->exists();
+
+        if ($alreadyReported) {
+            return response()->json([
+                "message" => __("You have already reported this today."),
+            ], Status::HTTP_TOO_MANY_REQUESTS);
+        }
+
+        Report::create([
+            "reporter_id" => $user->id,
+            "reportable_type" => $type,
+            "reportable_id" => $request->input("id"),
+            "reason" => $request->input("reason"),
+        ]);
+
+        return response()->json([
+            "message" => __("Reported successfully."),
+        ], Status::HTTP_OK);
+    }
+
+    public function userReports(): AnonymousResourceCollection
+    {
+        return ReportResource::collection(
+            Report::where("reportable_type", User::class)->latest()->get(),
+        );
+    }
+
+    public function organizationReports(): AnonymousResourceCollection
+    {
+        return ReportResource::collection(
+            Report::where("reportable_type", Organization::class)->latest()->get(),
+        );
+    }
+
+    public function eventReports(): AnonymousResourceCollection
+    {
+        return ReportResource::collection(
+            Report::where("reportable_type", Event::class)->latest()->get(),
+        );
+    }
+}

app/Http/Requests/StoreReportRequest.php

@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Interns2025b\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class StoreReportRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            "type" => "required|in:user,organization,event",
+            "id" => "required|integer",
+            "reason" => "nullable|string|max:1000",
+        ];
+    }
+}

app/Http/Resources/ReportResource.php

@@ -0,0 +1,23 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Interns2025b\Http\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class ReportResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            "id" => $this->id,
+            "reporter_id" => $this->reporter_id,
+            "reportable_type" => class_basename($this->reportable_type),
+            "reportable_id" => $this->reportable_id,
+            "reason" => $this->reason,
+            "created_at" => $this->created_at->toISOString(),
+        ];
+    }
+}

app/Models/Report.php

@@ -0,0 +1,26 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Interns2025b\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\MorphTo;
+
+class Report extends Model
+{
+    use HasFactory;
+
+    protected $fillable = [
+        "reporter_id",
+        "reportable_type",
+        "reportable_id",
+        "reason",
+    ];
+
+    public function reportable(): MorphTo
+    {
+        return $this->morphTo();
+    }
+}

app/Models/User.php

@@ -103,6 +103,11 @@ public function followers(): MorphToMany
         );
     }
 
+    public function reports(): HasMany
+    {
+        return $this->hasMany(Report::class, "reporter_id");
+    }
+
     protected function casts(): array
     {
         return [

database/factories/ReportFactory.php

@@ -0,0 +1,37 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Database\Factories;
+
+use Illuminate\Database\Eloquent\Factories\Factory;
+use Interns2025b\Models\Event;
+use Interns2025b\Models\Organization;
+use Interns2025b\Models\Report;
+use Interns2025b\Models\User;
+
+class ReportFactory extends Factory
+{
+    protected $model = Report::class;
+
+    public function definition(): array
+    {
+        $reportables = [
+            User::class,
+            Organization::class,
+            Event::class,
+        ];
+
+        $reportableType = $this->faker->randomElement($reportables);
+        $reportableId = $reportableType::factory()->create()->id;
+
+        return [
+            "reporter_id" => User::factory()->create()->id,
+            "reportable_type" => $reportableType,
+            "reportable_id" => $reportableId,
+            "reason" => $this->faker->sentence(),
+            "created_at" => now(),
+            "updated_at" => now(),
+        ];
+    }
+}

database/migrations/2025_07_25_082312_create_reports_table.php

@@ -0,0 +1,32 @@
+<?php
+
+declare(strict_types=1);
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class() extends Migration {
+    public function up(): void
+    {
+        Schema::create("reports", function (Blueprint $table): void {
+            $table->id();
+            $table->foreignId("reporter_id")->constrained("users")->cascadeOnDelete();
+            $table->morphs("reportable");
+            $table->text("reason")->nullable();
+            $table->timestamps();
+
+            $table->unique([
+                "reporter_id",
+                "reportable_type",
+                "reportable_id",
+                "created_at",
+            ], "daily_unique_report");
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists("reports");
+    }
+};

routes/api.php

@@ -17,6 +17,7 @@
 use Interns2025b\Http\Controllers\OrganizationEventController;
 use Interns2025b\Http\Controllers\OrganizationInvitationController;
 use Interns2025b\Http\Controllers\RegisterController;
+use Interns2025b\Http\Controllers\ReportController;
 use Interns2025b\Http\Controllers\ResetPasswordController;
 use Interns2025b\Http\Controllers\UpdatePasswordController;
 use Interns2025b\Http\Controllers\UserDeletionController;
@@ -40,6 +41,7 @@
     Route::post("/events", [EventController::class, "store"]);
     Route::put("/events/{event}", [EventController::class, "update"]);
     Route::delete("/events/{event}", [EventController::class, "destroy"]);
+    Route::post("/reports", [ReportController::class, "store"]);
 
     Route::scopeBindings()->group(function (): void {
         Route::get("/organizations/{organization}/events", [OrganizationEventController::class, "index"]);
@@ -48,6 +50,7 @@
         Route::delete("/organizations/{organization}/events/{event}", [OrganizationEventController::class, "destroy"]);
     });
 });
+Route::get("/confirm-delete/{user}", [UserDeletionController::class, "confirmDelete"]);
 
 Route::get("/confirm-delete/{user}", [UserDeletionController::class, "confirmDelete"])
     ->middleware("signed")
@@ -81,6 +84,9 @@
     Route::put("/users/{user}", [UserManagementController::class, "update"])->name("users.update");
     Route::delete("/users/{user}", [UserManagementController::class, "destroy"])->name("users.destroy");
     Route::resource("organizations", OrganizationController::class);
+    Route::get("/reports/users", [ReportController::class, "userReports"]);
+    Route::get("/reports/organizations", [ReportController::class, "organizationReports"]);
+    Route::get("/reports/events", [ReportController::class, "eventReports"]);
 });
 
 Route::group(["middleware" => ["auth:sanctum", "role:superAdministrator"]], function (): void {