Updated accept invitation logic and created decline invitation route

Author: WendellAdriel

kits/API/Teams/app/Http/Controllers/Teams/AcceptTeamInvitationController.php

@@ -3,37 +3,26 @@
 namespace App\Http\Controllers\Teams;
 
 use App\Http\Controllers\Controller;
+use App\Http\Requests\Teams\AcceptTeamInvitationRequest;
 use App\Http\Responses\MessageResponse;
 use App\Models\TeamInvitation;
-use App\Models\User;
-use Illuminate\Http\Request;
 use Illuminate\Http\Response;
 use Illuminate\Support\Facades\DB;
-use Illuminate\Validation\ValidationException;
+use Knuckles\Scribe\Attributes\Authenticated;
 use Knuckles\Scribe\Attributes\Endpoint;
 use Knuckles\Scribe\Attributes\Group;
 use Knuckles\Scribe\Attributes\Response as ScribeResponse;
 
 #[Group('Team Invitations')]
+#[Authenticated]
 class AcceptTeamInvitationController extends Controller
 {
-    #[Endpoint('Accept an invitation', 'Accept a team invitation using the signed link delivered to the invitee by email. The link must be valid, unexpired, and resolve to an existing user account.')]
+    #[Endpoint('Accept an invitation', 'Accept a pending team invitation for the authenticated user.')]
     #[ScribeResponse(['message' => 'Invitation accepted successfully.'], description: 'Invitation accepted')]
-    #[ScribeResponse(status: Response::HTTP_FORBIDDEN, description: 'Invalid signature or no matching user.')]
-    #[ScribeResponse(status: Response::HTTP_UNPROCESSABLE_ENTITY, description: 'Invitation already accepted or expired.')]
-    public function __invoke(Request $request, TeamInvitation $invitation): MessageResponse
+    #[ScribeResponse(status: Response::HTTP_UNPROCESSABLE_ENTITY, description: 'Invitation already accepted, expired, or sent to a different email address.')]
+    public function __invoke(AcceptTeamInvitationRequest $request, TeamInvitation $invitation): MessageResponse
     {
-        if ($invitation->isAccepted() || $invitation->isExpired()) {
-            throw ValidationException::withMessages([
-                'invitation' => __('This invitation is no longer valid.'),
-            ]);
-        }
-
-        $user = User::query()
-            ->whereRaw('LOWER(email) = ?', [strtolower($invitation->email)])
-            ->first();
-
-        abort_if($user === null, Response::HTTP_FORBIDDEN);
+        $user = $request->user();
 
         DB::transaction(function () use ($user, $invitation) {
             $invitation->team->memberships()->firstOrCreate(

kits/API/Teams/app/Http/Controllers/Teams/DeclineTeamInvitationController.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Http\Controllers\Teams;
+
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Teams\AcceptTeamInvitationRequest;
+use App\Http\Responses\MessageResponse;
+use App\Models\TeamInvitation;
+use Illuminate\Http\Response;
+use Knuckles\Scribe\Attributes\Authenticated;
+use Knuckles\Scribe\Attributes\Endpoint;
+use Knuckles\Scribe\Attributes\Group;
+use Knuckles\Scribe\Attributes\Response as ScribeResponse;
+
+#[Group('Team Invitations')]
+#[Authenticated]
+class DeclineTeamInvitationController extends Controller
+{
+    #[Endpoint('Decline an invitation', 'Decline a pending team invitation for the authenticated user.')]
+    #[ScribeResponse(['message' => 'Invitation declined successfully.'], description: 'Invitation declined')]
+    #[ScribeResponse(status: Response::HTTP_UNPROCESSABLE_ENTITY, description: 'Invitation already accepted, expired, or sent to a different email address.')]
+    public function __invoke(AcceptTeamInvitationRequest $request, TeamInvitation $invitation): MessageResponse
+    {
+        $invitation->delete();
+
+        return new MessageResponse('Invitation declined successfully.');
+    }
+}

kits/API/Teams/routes/teams.php

@@ -1,17 +1,19 @@
 <?php
 
 use App\Http\Controllers\Teams\AcceptTeamInvitationController;
+use App\Http\Controllers\Teams\DeclineTeamInvitationController;
 use App\Http\Controllers\Teams\TeamController;
 use App\Http\Controllers\Teams\TeamInvitationController;
 use App\Http\Controllers\Teams\TeamMemberController;
 use App\Http\Middleware\EnsureTeamMembership;
 use Illuminate\Support\Facades\Route;
 
-Route::get('invitations/{invitation}/accept', AcceptTeamInvitationController::class)
-    ->middleware('signed')
-    ->name('invitations.accept');
-
 Route::middleware('auth:sanctum')->group(function () {
+    Route::post('invitations/{invitation}/accept', AcceptTeamInvitationController::class)
+        ->name('invitations.accept');
+    Route::delete('invitations/{invitation}', DeclineTeamInvitationController::class)
+        ->name('invitations.decline');
+
     Route::middleware('verified')->group(function () {
         Route::get('teams', [TeamController::class, 'index'])->name('teams.index');
         Route::post('teams', [TeamController::class, 'store'])->name('teams.store');