ahmido
73a879d061
## Summary
- implement Spec 147 for workspace-first tenant selector and remembered tenant context enforcement
- harden canonical and tenant-bound route behavior so selected tenant mismatch stays informational
- fix drift finding subject fallback for workspace-safe RBAC identifiers and centralize finding subject resolution
## Testing
- vendor/bin/sail artisan test --compact tests/Feature/Filament/FindingViewRbacEvidenceTest.php tests/Feature/Findings/FindingsListDefaultsTest.php
- vendor/bin/sail bin pint --dirty --format agent
## Notes
- branch pushed at de0679cd8b
- includes the spec artifacts under specs/147-tenant-selector-remembered-context-enforcement/
Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #176
49 lines
1.5 KiB
PHP
49 lines
1.5 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Support\Tenants\TenantPageCategory;
|
|
use App\Support\Workspaces\WorkspaceContext;
|
|
use Filament\Facades\Filament;
|
|
use Illuminate\Http\RedirectResponse;
|
|
use Illuminate\Http\Request;
|
|
|
|
final class ClearTenantContextController
|
|
{
|
|
public function __invoke(Request $request): RedirectResponse
|
|
{
|
|
Filament::setTenant(null, true);
|
|
|
|
$workspaceContext = app(WorkspaceContext::class);
|
|
|
|
$workspaceContext->clearRememberedTenantContext($request);
|
|
|
|
$previousUrl = url()->previous();
|
|
|
|
$previousHost = parse_url((string) $previousUrl, PHP_URL_HOST);
|
|
$previousPath = (string) (parse_url((string) $previousUrl, PHP_URL_PATH) ?? '');
|
|
|
|
if ($previousHost !== null && $previousHost !== $request->getHost()) {
|
|
return redirect()->route('admin.operations.index');
|
|
}
|
|
|
|
if (TenantPageCategory::fromPath($previousPath) === TenantPageCategory::TenantBound) {
|
|
$workspace = $workspaceContext->currentWorkspace($request);
|
|
|
|
if ($workspace !== null) {
|
|
return redirect()->route('admin.workspace.managed-tenants.index', ['workspace' => $workspace]);
|
|
}
|
|
|
|
return redirect()->route('admin.home');
|
|
}
|
|
|
|
if ($previousPath === '' || $previousPath === '/admin/clear-tenant-context') {
|
|
return redirect()->route('admin.operations.index');
|
|
}
|
|
|
|
return redirect()->to((string) $previousUrl);
|
|
}
|
|
}
|