wip

app/Http/ApiControllers/PortfolioController.php

@@ -5,22 +5,53 @@ declare(strict_types=1);
 namespace App\Http\ApiControllers;
 
 use App\Models\Portfolio;
-use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Gate;
 use HackerEsq\FilterModels\FilterModels;
 use App\Http\Resources\PortfolioResource;
+use App\Http\Requests\StorePortfolioRequest;
+use App\Http\Requests\UpdatePortfolioRequest;
 use App\Http\ApiControllers\Controller as ApiController;
 
 class PortfolioController extends ApiController
 {
     public function index(FilterModels $filters)
     {
-
         $filters->setQuery(Portfolio::query());
         $filters->setScopes(['myPortfolios']);
         $filters->setEagerRelations(['users', 'transactions', 'holdings']);
-        $filters->setFilterableRelations(['holdings' => 'symbol', 'transactions' => 'symbol']);
+        $filters->setFilterableRelations(['holdings.symbol']);
         $filters->setSearchableColumns(['title', 'notes']);
 
         return PortfolioResource::collection($filters->paginated());
     }
+
+    public function store(StorePortfolioRequest $request)
+    {
+        $portfolio = Portfolio::create($request->validated());
+        
+        return PortfolioResource::make($portfolio);
+    }
+
+    public function show(Portfolio $portfolio)
+    {
+        Gate::authorize('readOnly', $portfolio);
+
+        return PortfolioResource::make($portfolio);
+    }
+
+    public function update(UpdatePortfolioRequest $request, Portfolio $portfolio)
+    {
+        Gate::authorize('fullAccess', $portfolio);
+
+        $portfolio->update($request->validated());
+
+        return PortfolioResource::make($portfolio);
+    }
+
+    public function destroy(Portfolio $portfolio)
+    {
+        Gate::authorize('fullAccess', $portfolio);
+
+        return response()->noContent();
+    }
 }

app/Http/Requests/StorePortfolioRequest.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class StorePortfolioRequest extends FormRequest
+{
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'title' => ['required', 'string', 'max:255'],
+            'notes' => ['sometimes', 'nullable', 'string'],
+            'wishlist' => ['sometimes', 'nullable', 'boolean'],
+        ];
+    }
+}

app/Http/Requests/UpdatePortfolioRequest.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class UpdatePortfolioRequest extends FormRequest
+{
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'title' => ['sometimes', 'string', 'max:255'],
+            'notes' => ['sometimes', 'nullable', 'string'],
+            'wishlist' => ['sometimes', 'nullable', 'boolean'],
+        ];
+    }
+}

app/Http/Resources/PortfolioResource.php

@@ -19,6 +19,7 @@ class PortfolioResource extends JsonResource
         return [
             'id' => $this->id,
             'title' => $this->title,
+            'notes' => $this->notes,
             'wishlist' => $this->wishlist,
             'owner' => UserResource::make($this->owner),
             'transactions' => TransactionResource::collection($this->whenLoaded('transactions')),