77 lines
2.4 KiB
PHP
77 lines
2.4 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Http\Controllers\Api;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Models\Artwork;
|
|
use App\Services\ArtworkStatsService;
|
|
use App\Services\XPService;
|
|
use Illuminate\Http\JsonResponse;
|
|
use Illuminate\Http\Request;
|
|
|
|
/**
|
|
* POST /api/art/{id}/view
|
|
*
|
|
* Fire-and-forget view tracker.
|
|
*
|
|
* Deduplication strategy (layered):
|
|
* 1. Session key (`art_viewed.{id}`) — prevents double-counts within the
|
|
* same browser session (survives page reloads).
|
|
* 2. Route throttle (5 per 10 minutes per IP+artwork) — catches bots that
|
|
* don't send session cookies.
|
|
*
|
|
* The frontend should additionally guard with sessionStorage so it only
|
|
* calls this endpoint once per page load.
|
|
*/
|
|
final class ArtworkViewController extends Controller
|
|
{
|
|
public function __construct(
|
|
private readonly ArtworkStatsService $stats,
|
|
private readonly XPService $xp,
|
|
) {}
|
|
|
|
public function __invoke(Request $request, int $id): JsonResponse
|
|
{
|
|
$artwork = Artwork::public()
|
|
->published()
|
|
->where('id', $id)
|
|
->first();
|
|
|
|
if (! $artwork) {
|
|
return response()->json(['error' => 'Not found'], 404);
|
|
}
|
|
|
|
$sessionKey = 'art_viewed.' . $id;
|
|
|
|
// Already counted this session — return early without touching the DB.
|
|
if ($request->hasSession() && $request->session()->has($sessionKey)) {
|
|
return response()->json(['ok' => true, 'counted' => false]);
|
|
}
|
|
|
|
// Write persistent event log (auth user_id or null for guests).
|
|
$this->stats->logViewEvent((int) $artwork->id, $request->user()?->id);
|
|
|
|
// Defer to Redis when available, fall back to direct DB increment.
|
|
$this->stats->incrementViews((int) $artwork->id, 1, defer: true);
|
|
|
|
$viewerId = $request->user()?->id;
|
|
if ($artwork->user_id !== null && (int) $artwork->user_id !== (int) ($viewerId ?? 0)) {
|
|
$this->xp->awardArtworkViewReceived(
|
|
(int) $artwork->user_id,
|
|
(int) $artwork->id,
|
|
$viewerId,
|
|
(string) $request->ip(),
|
|
);
|
|
}
|
|
|
|
// Mark this session so the artwork is not counted again.
|
|
if ($request->hasSession()) {
|
|
$request->session()->put($sessionKey, true);
|
|
}
|
|
|
|
return response()->json(['ok' => true, 'counted' => true]);
|
|
}
|
|
}
|