Proje dosyaları eklendi

app/Http/Controllers/TestTaskController.php

@@ -0,0 +1,77 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Enums\RoleName;
+use App\Models\EarnApiToken;
+use App\Models\EarnTaskAssignment;
+use App\Models\User;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\DB;
+use RuntimeException;
+
+/**
+ * Kodular istemcisine cihazla eşleştirilmiş JSON görev akışı sağlar.
+ *
+ * @author Gökhan Engin - İletişim : https://bit.ly/YazılımUzmanı
+ */
+class TestTaskController extends Controller
+{
+    /**
+     * Yapılandırılmış görevleri gerçek müşteri sahibiyle doğrulayıp token ve cihaza tekil olarak atar.
+     *
+     * @author Gökhan Engin - İletişim : https://bit.ly/YazılımUzmanı
+     */
+    public function index(Request $request): JsonResponse
+    {
+        $allowedHosts = config('test_tasks.allowed_hosts', []);
+        $tasks = config('test_tasks.tasks', []);
+        $customerEmail = config('test_tasks.customer_email');
+        $token = $request->attributes->get('earn_api_token');
+        $deviceHash = $request->attributes->get('earn_device_hash');
+
+        if (! $token instanceof EarnApiToken || ! is_string($deviceHash) || ! is_string($customerEmail)) {
+            throw new RuntimeException('Test task ownership is not configured.');
+        }
+
+        $customer = User::query()->where('email', $customerEmail)->first();
+        if (! $customer?->hasRole(RoleName::Customer)) {
+            throw new RuntimeException('Test task customer is invalid.');
+        }
+
+        $payload = [];
+        foreach ($tasks as $task) {
+            $url = $task['url'] ?? null;
+
+            if (! is_string($url) || parse_url($url, PHP_URL_SCHEME) !== 'https' || ! in_array(parse_url($url, PHP_URL_HOST), $allowedHosts, true)) {
+                throw new RuntimeException('Test task configuration contains a URL outside the HTTPS allowlist.');
+            }
+
+            // Görevi ilk istemciye atomik olarak kilitler.
+            // Yazar: Gökhan Engin - İletişim : https://bit.ly/YazılımUzmanı
+            $assignment = DB::transaction(function () use ($task, $customer, $token, $deviceHash): EarnTaskAssignment {
+                return EarnTaskAssignment::query()->lockForUpdate()->firstOrCreate(
+                    ['task_id' => $task['task_id']],
+                    ['user_id' => $customer->id, 'earn_member_id' => $token->tokenable_id,
+                        'personal_access_token_id' => $token->id, 'device_id_hash' => $deviceHash,
+                        'url' => $task['url'], 'duration_seconds' => $task['duration_seconds'], 'assigned_at' => now()],
+                );
+            }, 3);
+
+            if ($assignment->personal_access_token_id !== $token->id
+                || ! hash_equals($assignment->device_id_hash, $deviceHash)
+                || $assignment->result()->exists()) {
+                continue;
+            }
+
+            $payload[] = ['CID' => $assignment->user_id, 'task_id' => $assignment->task_id,
+                'url' => $assignment->url, 'duration_seconds' => $assignment->duration_seconds,
+                'completed' => false, 'responseCode' => null, 'error' => null];
+        }
+
+        return response()
+            ->json(['tasks' => $payload])
+            ->header('Cache-Control', 'no-store');
+    }
+}