expense/app/Http/Controllers/Forms/FormUpCountryController.php

<?php

namespace App\Http\Controllers\Forms;

use Illuminate\Http\Request;
use App\Http\Controllers\Controller;
use App\Models\FormUpCountry;
use App\Models\Rayon;
use Illuminate\Support\Facades\DB;
use Illuminate\Support\Facades\Storage;
use App\Models\Region;
use App\Models\Cabang;
use App\Models\UserHasCabang;
use App\Models\Kategori;
use Illuminate\Support\Str;
use Illuminate\Support\Facades\Mail;
use App\Mail\ExpenseApproved;
use App\Mail\ExpenseRejected;
use App\Mail\FinalApprove;
use App\Helpers\WhatsappHelper;
use App\Helpers\AuditTrailHelper;
use App\Helpers\NextCloudHelper;
use App\Rules\FileType;

class FormUpCountryController extends Controller
{
  public function index()
  {
    $this->checkAuthorization(auth()->user(), ['forms.country.view']);

    $role = auth()->user()->getRoleNames()[0];
    $forms = FormUpCountry::get();

		if ($role == 'Admin Region' || $role == 'Marketing Operational Manager Region') {
			$region_id = auth()->user()->getMyCabangAndRegionId()['region'];

			if ($region_id) {
				$users = UserHasCabang::whereHas('cabang', function ($query) use ($region_id) {
					$query->where('region_id', $region_id);
				})->get();

				$userIds = $users->pluck('user_id')->toArray();
				$forms = $forms->whereIn('user_id', $userIds);
			}
		}
    else if ($role == 'Area Manager Cabang') {
      $cabang_id = auth()->user()->getMyCabangAndRegionId()['cabang'];

      if ($cabang_id) {
        $users = UserHasCabang::where('cabang_id', $cabang_id)->get();
        $userIds = $users->pluck('user_id')->toArray();
        $forms = $forms->whereIn('user_id', $userIds);
      }
    }
    else if ($role == 'Medical Representatif') {
      $forms = $forms->where('user_id', auth()->user()->id);
    } 
    else {
      $forms = $forms;
    }

    session()->put('redirect_url', route('forms.up-country'));
		return view('backend.pages.forms.upcountry.index', [
			'forms' => $forms
		]);
	}

  public function detail($id)
  {
    $this->checkAuthorization(auth()->user(), ['forms.country.view']);

    $form = FormUpCountry::with(['rayon', 'user'])->findOrFail($id);
    $form->bukti1 = $form->bukti1 ? NextCloudHelper::getFileUrl($form->bukti1) : null;
    $form->bukti2 = $form->bukti2 ? NextCloudHelper::getFileUrl($form->bukti2) : null;
    $form->bukti3 = $form->bukti3 ? NextCloudHelper::getFileUrl($form->bukti3) : null;
    return response()->json($form);
  }

	public function create()
	{
    $this->checkAuthorization(auth()->user(), ['forms.country.create']);

		return view('backend.pages.forms.upcountry.create', [
			'rayons' => Rayon::all()
		]);
	}

	public function store(Request $request)
	{
    $this->checkAuthorization(auth()->user(), ['forms.country.create']);

    $request->validate([
      'rayon_id' => 'required|exists:rayon,id',
      'tanggal' => 'required',
      'tujuan' => 'required',
      'jarak' => 'required',
      'allowance' => 'required',
      'transport_dalkot' => 'required',
      'transport_ankot' => 'required',
      'bukti1' => 'nullable|image|mimes:jpeg,png,jpg,gif,svg,heic,heif|max:51200',
      'bukti2' => ['nullable', 'file', new FileType(['php', 'exe', 'js', 'sh', 'bat', 'exe', 'sh', 'php', 'vbs'])],
      'bukti3' => ['nullable', 'file', new FileType(['php', 'exe', 'js', 'sh', 'bat', 'exe', 'sh', 'php', 'vbs'])],
    ]);

    $cabang = UserHasCabang::with('cabang')->where('user_id', auth()->user()->id)->first()->cabang;
    $region = Region::where('id', $cabang->region_id)->first();
    $kategori = Kategori::where('name', 'Up Country')->first();

    $filePaths = [];
    $folderPath = '/expense/' . $region->code . '/' . $cabang->code . '/upcountry';

		if ($request->hasFile('bukti1')) {
      $bukti1 = $request->file('bukti1');
			$filename = Str::uuid() . '.' . $bukti1->extension();

			$filePaths['bukti1'] = $folderPath . '/' . $filename;

      NextCloudHelper::uploadFile(
        $folderPath,
        $bukti1->getContent(),
				$filename
      );

    }
    if ($request->hasFile('bukti2')) {
      $bukti2 = $request->file('bukti2');
			$filename = Str::uuid() . '.' . $bukti2->extension();

			$filePaths['bukti2'] = $folderPath . '/' . $filename;

			NextCloudHelper::uploadFile(
				$folderPath,
				$bukti2->getContent(),
				$filename
			);
    }
    if ($request->hasFile('bukti3')) {
      $bukti3 = $request->file('bukti3');
			$filename = Str::uuid() . '.' . $bukti3->extension();

			$filePaths['bukti3'] = $folderPath . '/' . $filename;

			NextCloudHelper::uploadFile(
				$folderPath,
				$bukti3->getContent(),
				$filename
			);
    }

    // Generate sequence number and expense number
		$sequence_number = FormUpCountry::withTrashed()->where('expense_number', 'like', $region->code . '-' . $cabang->code . '-UPC-' . date('ym') . '%')->count() + 1;
    $formatted_sequence_number = str_pad($sequence_number, 4, '0', STR_PAD_LEFT);
    $expense_number = $region->code . '-' . $cabang->code . '-UPC-' . date('ym') . $formatted_sequence_number;

    // Save the form data
    FormUpCountry::create([
      'expense_number' => $expense_number,
      'user_id' => auth()->user()->id,
      'rayon_id' => $request->rayon_id,
      'tanggal' => $request->tanggal,
      'tujuan' => $request->tujuan,
      'jarak' => $request->jarak,
      'allowance' => $request->allowance,
      'transport_dalkot' => $request->transport_dalkot,
      'transport_ankot' => $request->transport_ankot,
      'hotel' => $request->hotel,
      'total' => $request->allowance + $request->transport_dalkot + $request->transport_ankot + $request->hotel,
      'bukti1' => $filePaths['bukti1'] ?? null,
      'bukti2' => $filePaths['bukti2'] ?? null,
      'bukti3' => $filePaths['bukti3'] ?? null,
      'account_number' => $kategori->account_number,
      'status' => 'On Progress',
    ]);

    AuditTrailHelper::AddAuditTrail('Insert', 'Insert New Expense at Form Entertainment Presentation (' . $expense_number . ')');
    session()->flash('success', 'Form has been created.');
    return redirect()->back();
	}

	public function edit($id)
	{
    $this->checkAuthorization(auth()->user(), ['forms.country.edit']);

    $form = FormUpCountry::with('rayon')->findOrfail($id);
    if($form->status == 'Closed') {
      session()->flash('error', 'Form has been closed, you cannot edit it.');
      return redirect()->back();
    }
    
		return view('backend.pages.forms.upcountry.edit', [
			'rayons' => Rayon::all(),
      'form' => $form
		]);
	}

	public function update(Request $request, $id)
	{
    $this->checkAuthorization(auth()->user(), ['forms.country.edit']);

    $request->validate([
      'rayon_id' => 'required|exists:rayon,id',
      'tanggal' => 'required',
      'tujuan' => 'required',
      'jarak' => 'required',
      'allowance' => 'required',
      'transport_dalkot' => 'required',
      'transport_ankot' => 'required',
      'hotel' => 'required',
      'bukti1' => 'nullable|image|mimes:jpeg,png,jpg,gif,svg,heic,heif|max:51200',
      'bukti2' => ['nullable', 'file', new FileType(['php', 'exe', 'js', 'sh', 'bat', 'exe', 'sh', 'php', 'vbs'])],
      'bukti3' => ['nullable', 'file', new FileType(['php', 'exe', 'js', 'sh', 'bat', 'exe', 'sh', 'php', 'vbs'])],
    ]);

    $form = FormUpCountry::findOrfail($id);
    if($form->status == 'Closed') {
      session()->flash('error', 'Form has been closed, you cannot edit it.');
      return redirect()->back();
    }

    $cabang = UserHasCabang::with('cabang')->where('user_id', $form->user_id)->first()->cabang;
    $region = Region::where('id', $cabang->region_id)->first();
    $kategori = Kategori::where('name', 'Up Country')->first();

    $filePaths = [];
    $folderPath = '/expense/' . $region->code . '/' . $cabang->code . '/upcountry';

    if ($request->hasFile('bukti1')) {
      $bukti1 = $request->file('bukti1');
			$filename = Str::uuid() . '.' . $bukti1->extension();

			$filePaths['bukti1'] = $folderPath . '/' . $filename;

      NextCloudHelper::uploadFile(
        $folderPath,
        $bukti1->getContent(),
				$filename
      );

    }
    if ($request->hasFile('bukti2')) {
      $bukti2 = $request->file('bukti2');
			$filename = Str::uuid() . '.' . $bukti2->extension();

			$filePaths['bukti2'] = $folderPath . '/' . $filename;

			NextCloudHelper::uploadFile(
				$folderPath,
				$bukti2->getContent(),
				$filename
			);
    }
    if ($request->hasFile('bukti3')) {
      $bukti3 = $request->file('bukti3');
			$filename = Str::uuid() . '.' . $bukti3->extension();

			$filePaths['bukti3'] = $folderPath . '/' . $filename;

			NextCloudHelper::uploadFile(
				$folderPath,
				$bukti3->getContent(),
				$filename
			);
    }

    // Save the form data
    $form->update([
      'rayon_id' => $request->rayon_id,
      'tanggal' => $request->tanggal,
      'tujuan' => $request->tujuan,
      'jarak' => $request->jarak,
      'allowance' => $request->allowance,
      'transport_dalkot' => $request->transport_dalkot,
      'transport_ankot' => $request->transport_ankot,
      'hotel' => $request->hotel,
      'total' => $request->allowance + $request->transport_dalkot + $request->transport_ankot + $request->hotel,
      'bukti1' => $filePaths['bukti1'] ?? $form->bukti1,
      'bukti2' => $filePaths['bukti2'] ?? $form->bukti2,
      'bukti3' => $filePaths['bukti3'] ?? $form->bukti3,
      'account_number' => $kategori->account_number,
    ]);

    AuditTrailHelper::AddAuditTrail('Update', 'Update Record at Form Entertainment Presentation (' . $form->expense_number . ')');
    session()->flash('success', 'Form has been updated.');
    return redirect()->back();
	}

  public function approve(Request $request, $id)
  {
    $this->checkAuthorization(auth()->user(), ['approval.approve']);

    $form = FormUpCountry::findOrfail($id);
    $approved_data = [
      'allowance' => $request->allowance ? $form->allowance : 0,
      'transport_dalkot' => $request->transport_dalkot ? $form->transport_dalkot : 0,
      'transport_ankot' => $request->transport_ankot ? $form->transport_ankot : 0,
      'hotel' => $request->hotel ? $form->hotel : 0,
    ];

    $form->update([
      'approved_at' => now(),
      'approved_by' => auth()->user()->id,
      'status' => 'Approved',

      'approved_allowance' => $approved_data['allowance'],
      'approved_transport_dalkot' => $approved_data['transport_dalkot'],
      'approved_transport_ankot' => $approved_data['transport_ankot'],
      'approved_hotel' => $approved_data['hotel'],
      'approved_total' => array_sum($approved_data),
    ]);

    $heads = $form->user->getCabangAndRegionHead();
    $name = $form->user->name;
    $expense_number = $form->expense_number;
    $tanggal = $form->tanggal;
    $total = $form->total;

    // Collect all recipients
    $recipients = [$form->user->email, auth()->user()->email];
    $phoneNumbers = [$form->user->phone, auth()->user()->phone];

    if ($heads['cabang_head']) {
      $recipients[] = $heads['cabang_head']['email'];
      $phoneNumbers[] = $heads['cabang_head']['phone'];
    }

    if ($heads['region_head']) {
      $recipients[] = $heads['region_head']['email'];
      $phoneNumbers[] = $heads['region_head']['phone'];
    }

    // Remove duplicate data, if any
    $recipients = array_unique($recipients);
    $phoneNumbers = array_unique($phoneNumbers);

    // // Send bulk email
    // Mail::to($recipients)->send(new ExpenseApproved(
    //   $name,
    //   $expense_number,
    //   $tanggal,
    //   $total
    // ));

    // send whatsapp message
    WhatsappHelper::approveExpense($phoneNumbers, $expense_number);

    AuditTrailHelper::AddAuditTrail('Approve', 'Approve Expense at Form Entertainment Presentation (' . $form->expense_number . ')');
    session()->flash('success', 'Form has been approved.');
    return redirect()->back();
  }

  public function reject($id)
  {
    $this->checkAuthorization(auth()->user(), ['approval.approve']);

    $form = FormUpCountry::findOrfail($id);
    $form->update([
      'status' => 'Rejected'
    ]);

    $heads = $form->user->getCabangAndRegionHead();
    $name = $form->user->name;
    $expense_number = $form->expense_number;
    $tanggal = $form->tanggal;
    $total = $form->total;

    // Collect all recipients
    $recipients = [$form->user->email, auth()->user()->email];
    $phoneNumbers = [$form->user->phone, auth()->user()->phone];

    if ($heads['cabang_head']) {
      $recipients[] = $heads['cabang_head']['email'];
      $phoneNumbers[] = $heads['cabang_head']['phone'];
    }

    if ($heads['region_head']) {
      $recipients[] = $heads['region_head']['email'];
      $phoneNumbers[] = $heads['region_head']['phone'];
    }

    // Remove duplicate email addresses, if any
    $recipients = array_unique($recipients);
    $phoneNumbers = array_unique($phoneNumbers);

    // Send bulk email
    Mail::to($recipients)->send(new ExpenseRejected(
      $name,
      $expense_number,
      $tanggal,
      $total
    ));

    // send whatsapp message
    WhatsappHelper::rejectExpense($phoneNumbers, $expense_number);

    AuditTrailHelper::AddAuditTrail('Reject', 'Reject Expense at Form Entertainment Presentation (' . $form->expense_number . ')');
    session()->flash('success', 'Form has been rejected.');
    return redirect()->back();
  }

  public function finalApprove($id)
  {
    $this->checkAuthorization(auth()->user(), ['final_approval.approve']);

    $form = FormUpCountry::findOrfail($id);
    if($form->approved_at == null) {
      session()->flash('error', 'Form must be approved by MIS first.');
      return redirect()->back();
    }

    $form->update([
      'final_approved_at' => now(),
      'final_approved_by' => auth()->user()->id,
      'status' => 'Closed'
    ]);

    $heads = $form->user->getCabangAndRegionHead();
    $name = $form->user->name;
    $expense_number = $form->expense_number;
    $tanggal = $form->tanggal;
    $total = $form->total;

    // Collect all recipients
    $recipients = [$form->user->email, auth()->user()->email];
    $phoneNumbers = [$form->user->phone, auth()->user()->phone];

    if ($heads['cabang_head']) {
      $recipients[] = $heads['cabang_head']['email'];
      $phoneNumbers[] = $heads['cabang_head']['phone'];
    }

    if ($heads['region_head']) {
      $recipients[] = $heads['region_head']['email'];
      $phoneNumbers[] = $heads['region_head']['phone'];
    }

    // Remove duplicate email addresses, if any
    $recipients = array_unique($recipients);
    $phoneNumbers = array_unique($phoneNumbers);

    // Send bulk email
    Mail::to($recipients)->send(new FinalApprove(
      $name,
      $expense_number,
      $tanggal,
      $total
    ));

    // send whatsapp message
    WhatsappHelper::finalApprove($phoneNumbers, $expense_number);

    AuditTrailHelper::AddAuditTrail('Final Approve', 'Final Approve Expense at Form Entertainment Presentation (' . $form->expense_number . ')');
    session()->flash('success', 'Form has been final approved.');
    return redirect()->back();
  }

  public function open($id)
  {
    $this->checkAuthorization(auth()->user(), ['final_approval.open']);

    $form = FormUpCountry::findOrfail($id);
    $form->update([
      'final_approved_at' => null,
      'final_approved_by' => null,
      'status' => 'Approved'
    ]);

    AuditTrailHelper::AddAuditTrail('Open', 'Open Expense at Form Entertainment Presentation (' . $form->expense_number . ')');
    session()->flash('success', 'Form has been opened.');
    return redirect()->back();
  }

	public function destroy($id)
	{
    $this->checkAuthorization(auth()->user(), ['forms.country.delete']);
    
		$form = FormUpCountry::findOrfail($id);
    AuditTrailHelper::AddAuditTrail('Delete', 'Delete Record at Form Entertainment Presentation (' . $form->expense_number . ')');
    
		$form->delete();

		session()->flash('success', 'Form has been deleted.');
		return redirect()->back();
	}
}