current(); if ($tenant) { return view('site.landing', [ 'name' => $tenant->display_name ?? $tenant->name, 'city' => $tenant->city, 'phone' => $tenant->phone, 'email' => $tenant->email, 'themeColor' => $tenant->settings['theme_color'] ?? '#3B82F6', 'services' => (array) ($tenant->settings['services'] ?? []), 'cars' => (array) ($tenant->settings['cars'] ?? []), 'logoUrl' => $tenant->getLogoUrl(), 'faviconUrl' => $tenant->getFaviconUrl(), ]); } // On the central domain → redirect to admin. return redirect('/admin'); }); // ─── Plăți / Billing (tenant-side) ────────────────────────────────── // /billing — listă facturi tenant + buton plată // /pay/{id} — start checkout (Stripe / PayPal / bank) Route::get('/billing', [\App\Http\Controllers\PaymentController::class, 'billing'])->name('billing'); Route::post('/pay/{subscription}', [\App\Http\Controllers\PaymentController::class, 'startCheckout']) ->where('subscription', '\d+') ->name('pay.start'); Route::get('/pay/{subscription}/success', [\App\Http\Controllers\PaymentController::class, 'success']) ->where('subscription', '\d+') ->name('pay.success'); Route::get('/pay/{subscription}/cancel', [\App\Http\Controllers\PaymentController::class, 'cancel']) ->where('subscription', '\d+') ->name('pay.cancel'); // ─── Webhooks (central, no auth) ──────────────────────────────────── Route::post('/payments/stripe/webhook', [\App\Http\Controllers\PaymentController::class, 'stripeWebhook']) ->withoutMiddleware([\Illuminate\Foundation\Http\Middleware\VerifyCsrfToken::class]); Route::post('/payments/paypal/webhook', [\App\Http\Controllers\PaymentController::class, 'paypalWebhook']) ->withoutMiddleware([\Illuminate\Foundation\Http\Middleware\VerifyCsrfToken::class]); Route::post('/payments/paynet/webhook', [\App\Http\Controllers\PaymentController::class, 'paynetWebhook']) ->withoutMiddleware([\Illuminate\Foundation\Http\Middleware\VerifyCsrfToken::class]); // DEBUG — verifică starea storage symlink + media library. // TODO: remove after debug. Route::get('/debug-storage', function () { $publicStoragePath = public_path('storage'); $storageAppPublic = storage_path('app/public'); // Try to write a test file if (! is_dir($storageAppPublic)) @mkdir($storageAppPublic, 0775, true); @file_put_contents($storageAppPublic . '/test.txt', 'OK ' . now()->toIso8601String()); $latestMedia = \DB::table('media')->latest('id')->first(); return response()->json([ 'public_storage' => [ 'path' => $publicStoragePath, 'is_link' => is_link($publicStoragePath), 'exists' => file_exists($publicStoragePath), 'target' => is_link($publicStoragePath) ? readlink($publicStoragePath) : null, 'is_dir' => is_dir($publicStoragePath), ], 'storage_app_public' => [ 'path' => $storageAppPublic, 'exists' => is_dir($storageAppPublic), 'test_file_written' => file_exists($storageAppPublic . '/test.txt'), 'test_file_url' => url('/storage/test.txt'), ], 'latest_media' => $latestMedia ? [ 'id' => $latestMedia->id, 'model' => $latestMedia->model_type . '#' . $latestMedia->model_id, 'collection' => $latestMedia->collection_name, 'name' => $latestMedia->file_name, 'disk' => $latestMedia->disk, 'expected_path' => $storageAppPublic . '/' . $latestMedia->id . '/' . $latestMedia->file_name, 'file_exists' => file_exists($storageAppPublic . '/' . $latestMedia->id . '/' . $latestMedia->file_name), ] : null, 'media_disk_config' => config('media-library.disk_name'), 'app_url' => config('app.url'), ]); }); // Stub `login` route — needed because Laravel's auth middleware tries to // route('login') when redirecting unauthenticated requests. We don't have a // global /login (panels use /admin/login and /app/login), so stub it. Route::get('/login', function (Request $request) { if ($request->expectsJson() || $request->is('api/*')) { return response()->json(['message' => 'Unauthenticated.'], 401); } $tenant = app(TenantManager::class)->current(); return redirect($tenant ? '/app/login' : '/admin/login'); })->name('login'); // Locale switch — POST /locale/{lang} sets session and persists to user. Route::post('/locale/{lang}', function (Request $request, string $lang) { if (! in_array($lang, ['ro', 'ru', 'en'], true)) { abort(404); } $request->session()->put('locale', $lang); if ($u = $request->user()) { $u->forceFill(['locale' => $lang])->saveQuietly(); } return back(); })->name('locale.switch'); // PWA — manifest pentru panou central (service.mir.md). Route::get('/admin-manifest.json', function () { return response()->json([ 'name' => 'AutoCRM Admin', 'short_name' => 'AutoCRM', 'description' => 'Panou administrativ AutoCRM SaaS', 'start_url' => '/admin', 'scope' => '/', 'display' => 'standalone', 'orientation' => 'any', 'background_color' => '#ffffff', 'theme_color' => '#6366f1', 'lang' => 'ro', 'icons' => [ ['src' => '/pwa/admin-192.png', 'sizes' => '192x192', 'type' => 'image/png', 'purpose' => 'any'], ['src' => '/pwa/admin-512.png', 'sizes' => '512x512', 'type' => 'image/png', 'purpose' => 'any'], ['src' => '/pwa/admin-512.png', 'sizes' => '512x512', 'type' => 'image/png', 'purpose' => 'maskable'], ], ])->header('Cache-Control', 'public, max-age=3600'); }); // SVG favicon for the central panel (referenced from ) Route::get('/pwa/admin-icon.svg', function () { $svg = ' A '; return response($svg, 200, ['Content-Type' => 'image/svg+xml', 'Cache-Control' => 'public, max-age=86400']); }); // PNG icons generated on-the-fly with GD if available, with PNG fallback baked from SVG. // Browsers (Chrome) require real PNG bytes for the install prompt. Route::get('/pwa/admin-{size}.png', function (int $size) { if (! in_array($size, [192, 512], true)) abort(404); if (! extension_loaded('gd')) { // Fallback: serve a transparent 1x1 PNG. Install prompt may not show. return response(base64_decode('iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNkYPhfDwAChwGA60e6kgAAAABJRU5ErkJggg=='), 200, ['Content-Type' => 'image/png']); } $img = imagecreatetruecolor($size, $size); $bg = imagecolorallocate($img, 99, 102, 241); // #6366f1 $fg = imagecolorallocate($img, 255, 255, 255); imagefilledrectangle($img, 0, 0, $size, $size, $bg); $letter = 'A'; $fontSize = (int) ($size * 0.55); // Use bundled GD font 5 (largest built-in) repeated. if (function_exists('imagettftext')) { $font = '/usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf'; if (file_exists($font)) { $box = imagettfbbox($fontSize, 0, $font, $letter); $w = $box[2] - $box[0]; $h = $box[1] - $box[7]; $x = (int) (($size - $w) / 2); $y = (int) (($size + $h) / 2); imagettftext($img, $fontSize, 0, $x, $y, $fg, $font, $letter); } } else { // Fallback: built-in font $charW = imagefontwidth(5); $charH = imagefontheight(5); $scale = max(1, (int) ($size / 8)); imagestring($img, 5, (int) (($size - $charW * $scale) / 2), (int) (($size - $charH * $scale) / 2), $letter, $fg); } ob_start(); imagepng($img); $png = ob_get_clean(); imagedestroy($img); return response($png, 200, [ 'Content-Type' => 'image/png', 'Cache-Control' => 'public, max-age=86400', ]); })->where('size', '\d+'); // Service worker pentru PWA central (necesar pentru prompt-ul de install). // Header `Service-Worker-Allowed: /admin` permite SW-ului servit de la root // să controleze scope-ul `/admin/*` (cerut de manifest). Route::get('/admin-sw.js', function () { return response(<<<'JS' const CACHE = 'autocrm-admin-shell-v1'; const SHELL = ['/admin-manifest.json']; self.addEventListener('install', e => { e.waitUntil(caches.open(CACHE).then(c => c.addAll(SHELL).catch(() => {}))); self.skipWaiting(); }); self.addEventListener('activate', e => { e.waitUntil(caches.keys().then(keys => Promise.all(keys.filter(k => k !== CACHE).map(k => caches.delete(k))) )); self.clients.claim(); }); self.addEventListener('fetch', e => { if (e.request.method !== 'GET') return; const u = new URL(e.request.url); if (u.pathname.startsWith('/build/') || u.pathname.startsWith('/pwa/')) { e.respondWith(caches.match(e.request).then(m => m || fetch(e.request).then(r => { const copy = r.clone(); caches.open(CACHE).then(c => c.put(e.request, copy)); return r; }).catch(() => caches.match(e.request)))); } }); JS, 200, [ 'Content-Type' => 'application/javascript', 'Cache-Control' => 'public, max-age=3600', 'Service-Worker-Allowed' => '/', ]); }); // PWA — manifest dinamic per tenant. Route::get('/manifest.json', function (Request $request) { $tenant = app(TenantManager::class)->current(); $name = $tenant?->display_name ?? $tenant?->name ?? 'AutoCRM'; $themeColor = $tenant?->settings['theme_color'] ?? '#3B82F6'; $shortName = $tenant?->slug ?? 'autocrm'; return response()->json([ 'name' => $name, 'short_name' => mb_substr($shortName, 0, 12), 'description' => 'CRM autoservice — ' . $name, 'start_url' => '/app', 'display' => 'standalone', 'orientation' => 'any', 'background_color' => '#ffffff', 'theme_color' => $themeColor, 'lang' => $tenant?->settings['language'] ?? 'ro', 'icons' => [ ['src' => '/pwa/icon-192.png', 'sizes' => '192x192', 'type' => 'image/png'], ['src' => '/pwa/icon-512.png', 'sizes' => '512x512', 'type' => 'image/png'], ['src' => '/pwa/icon-maskable.png', 'sizes' => '512x512', 'type' => 'image/png', 'purpose' => 'maskable'], ], ])->header('Cache-Control', 'public, max-age=3600'); }); // Service worker stub — minimal cache for shell. Route::get('/sw.js', function () { return response(<<<'JS' const CACHE = 'autocrm-shell-v1'; const SHELL = ['/manifest.json']; self.addEventListener('install', e => { e.waitUntil(caches.open(CACHE).then(c => c.addAll(SHELL))); }); self.addEventListener('activate', e => { e.waitUntil(caches.keys().then(keys => Promise.all(keys.filter(k => k !== CACHE).map(k => caches.delete(k))) )); }); self.addEventListener('fetch', e => { const u = new URL(e.request.url); if (e.request.method !== 'GET') return; // network-first for app routes; cache-first for static if (u.pathname.startsWith('/build/') || u.pathname.startsWith('/pwa/')) { e.respondWith(caches.match(e.request).then(m => m || fetch(e.request).then(r => { const copy = r.clone(); caches.open(CACHE).then(c => c.put(e.request, copy)); return r; }))); } }); JS, 200, ['Content-Type' => 'application/javascript', 'Cache-Control' => 'public, max-age=3600']); });