Setup Project Base work

.env.example

@@ -37,6 +37,13 @@ MAIL_ENCRYPTION=null
 MAIL_FROM_ADDRESS=null
 MAIL_FROM_NAME="${APP_NAME}"
 
+# USED FOR ERROR HANDLER
+MAIL_ERRORS="equipe.web@ldc.fr"
+
+# USED FOR RECAPTCHA V3
+RECAPTCHA_3_PUB_KEY=""
+RECAPTCHA_3_PRIV_KEY=""
+
 AWS_ACCESS_KEY_ID=
 AWS_SECRET_ACCESS_KEY=
 AWS_DEFAULT_REGION=us-east-1

.gitignore

@@ -1,6 +1,17 @@
 /node_modules
 /public/hot
 /public/storage
+/public/css
+/public/js
+/public/images
+/public/fonts
+/public/medias
+/public/uploads
+/public/assets
+/public/cache
+/public/mix-manifest.json
+.vscode
+
 /storage/*.key
 /vendor
 .env
@@ -13,3 +24,8 @@ npm-debug.log
 yarn-error.log
 /.idea
 /.vscode
+
+/public/.htpasswd
+/public/.htaccess
+
+/resourcesLegacy

.htaccess

@@ -0,0 +1,6 @@
+SetOutputFilter DEFLATE
+AddOutputFilterByType DEFLATE "application/atom+xml" "application/javascript" "application/json" "application/ld+json" "application/manifest+json" "application/rdf+xml" "application/rss+xml" "application/schema+json" "application/vnd.geo+json" "application/vnd.ms-fontobject" "application/x-font-ttf" "application/x-javascript" "application/x-web-app-manifest+json" "application/xhtml+xml" "application/xml" "font/eot" "font/opentype" "image/bmp" "image/svg+xml" "image/vnd.microsoft.icon" "image/x-icon" "text/cache-manifest" "text/css" "text/html" "text/javascript" "text/plain" "text/vcard" "text/vnd.rim.location.xloc" "text/vtt" "text/x-component" "text/x-cross-domain-policy" "text/xml"
+
+# SECTION BEGIN GIT PROTECTION
+RedirectMatch 404 /\.git
+# SECTION END GIT PROTECTION

README.md

@@ -1,64 +0,0 @@
-<p align="center"><a href="https://laravel.com" target="_blank"><img src="https://raw.githubusercontent.com/laravel/art/master/logo-lockup/5%20SVG/2%20CMYK/1%20Full%20Color/laravel-logolockup-cmyk-red.svg" width="400"></a></p>
-
-<p align="center">
-<a href="https://travis-ci.org/laravel/framework"><img src="https://travis-ci.org/laravel/framework.svg" alt="Build Status"></a>
-<a href="https://packagist.org/packages/laravel/framework"><img src="https://img.shields.io/packagist/dt/laravel/framework" alt="Total Downloads"></a>
-<a href="https://packagist.org/packages/laravel/framework"><img src="https://img.shields.io/packagist/v/laravel/framework" alt="Latest Stable Version"></a>
-<a href="https://packagist.org/packages/laravel/framework"><img src="https://img.shields.io/packagist/l/laravel/framework" alt="License"></a>
-</p>
-
-## About Laravel
-
-Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable and creative experience to be truly fulfilling. Laravel takes the pain out of development by easing common tasks used in many web projects, such as:
-
-- [Simple, fast routing engine](https://laravel.com/docs/routing).
-- [Powerful dependency injection container](https://laravel.com/docs/container).
-- Multiple back-ends for [session](https://laravel.com/docs/session) and [cache](https://laravel.com/docs/cache) storage.
-- Expressive, intuitive [database ORM](https://laravel.com/docs/eloquent).
-- Database agnostic [schema migrations](https://laravel.com/docs/migrations).
-- [Robust background job processing](https://laravel.com/docs/queues).
-- [Real-time event broadcasting](https://laravel.com/docs/broadcasting).
-
-Laravel is accessible, powerful, and provides tools required for large, robust applications.
-
-## Learning Laravel
-
-Laravel has the most extensive and thorough [documentation](https://laravel.com/docs) and video tutorial library of all modern web application frameworks, making it a breeze to get started with the framework.
-
-If you don't feel like reading, [Laracasts](https://laracasts.com) can help. Laracasts contains over 1500 video tutorials on a range of topics including Laravel, modern PHP, unit testing, and JavaScript. Boost your skills by digging into our comprehensive video library.
-
-## Laravel Sponsors
-
-We would like to extend our thanks to the following sponsors for funding Laravel development. If you are interested in becoming a sponsor, please visit the Laravel [Patreon page](https://patreon.com/taylorotwell).
-
-### Premium Partners
-
-- **[Vehikl](https://vehikl.com/)**
-- **[Tighten Co.](https://tighten.co)**
-- **[Kirschbaum Development Group](https://kirschbaumdevelopment.com)**
-- **[64 Robots](https://64robots.com)**
-- **[Cubet Techno Labs](https://cubettech.com)**
-- **[Cyber-Duck](https://cyber-duck.co.uk)**
-- **[Many](https://www.many.co.uk)**
-- **[Webdock, Fast VPS Hosting](https://www.webdock.io/en)**
-- **[DevSquad](https://devsquad.com)**
-- **[Curotec](https://www.curotec.com/services/technologies/laravel/)**
-- **[OP.GG](https://op.gg)**
-- **[WebReinvent](https://webreinvent.com/?utm_source=laravel&utm_medium=github&utm_campaign=patreon-sponsors)**
-- **[Lendio](https://lendio.com)**
-
-## Contributing
-
-Thank you for considering contributing to the Laravel framework! The contribution guide can be found in the [Laravel documentation](https://laravel.com/docs/contributions).
-
-## Code of Conduct
-
-In order to ensure that the Laravel community is welcoming to all, please review and abide by the [Code of Conduct](https://laravel.com/docs/contributions#code-of-conduct).
-
-## Security Vulnerabilities
-
-If you discover a security vulnerability within Laravel, please send an e-mail to Taylor Otwell via [taylor@laravel.com](mailto:taylor@laravel.com). All security vulnerabilities will be promptly addressed.
-
-## License
-
-The Laravel framework is open-sourced software licensed under the [MIT license](https://opensource.org/licenses/MIT).

TODO.md

@@ -0,0 +1 @@
+# TODO

app/Console/Commands/CreateAdmin.php

@@ -0,0 +1,90 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Models\User;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\Validator;
+use Illuminate\Validation\ValidationException;
+
+/**
+ * Creates a new user
+ */
+class CreateAdmin extends Command
+{
+    /**
+     * The name and signature of the console command.
+     *
+     * @var string
+     */
+    protected $signature = 'user:create';
+
+    /**
+     * The console command description.
+     *
+     * @var string
+     */
+    protected $description = 'Create a backend admin user';
+
+    /**
+     * Execute the console command.
+     *
+     * @return integer
+     */
+    public function handle()
+    {
+        $email = null;
+        while (is_null($email)) {
+            try {
+                $tmp       = $this->ask('Type the wanted user email', 'equipe.web@ldc.fr');
+                $validator = Validator::make(['email' => $tmp], [
+                    'email' => 'required|unique:users,email|email:rfc,dns'
+                ]);
+                $validator->validate();
+                $email = $tmp;
+            } catch (ValidationException $e) {
+                $this->error(sprintf(
+                    'Please provide a valid email %s',
+                    \implode(',', collect($e->errors())->flatten()->all())
+                ));
+                continue;
+            }
+        }
+        $name = null;
+        while (is_null($name)) {
+            try {
+                $tmp       = $this->ask('Type the wanted user name', 'Admin');
+                $validator = Validator::make(['name' => $tmp], [
+                    'name' => 'required|min:5,max:255'
+                ]);
+                $validator->validate();
+                $name = $tmp;
+            } catch (ValidationException $e) {
+                $this->error(sprintf(
+                    'Please provide a valid name %s',
+                    \implode(',', collect($e->errors())->flatten()->all())
+                ));
+                continue;
+            }
+        }
+
+        $password = null;
+        while (
+            ($password = $this->secret(
+                (!\is_null($password) ? 'Failed to confirm, ' : '') . 'Type the wanted user password'
+            )) !== $this->secret('Confirm the password')
+        ) {
+            continue;
+        };
+
+        $admin = new User([
+            'name' => $name,
+            'email' => $email,
+            'password' => $password
+        ]);
+        $admin->saveOrFail();
+
+        $this->info('User created.');
+        return 0;
+    }
+}

app/Console/Kernel.php

@@ -10,12 +10,11 @@ class Kernel extends ConsoleKernel
     /**
      * Define the application's command schedule.
      *
-     * @param  \Illuminate\Console\Scheduling\Schedule  $schedule
+     * @param  \Illuminate\Console\Scheduling\Schedule $schedule
      * @return void
      */
     protected function schedule(Schedule $schedule)
     {
-        // $schedule->command('inspire')->hourly();
     }
 
     /**
@@ -25,7 +24,7 @@ class Kernel extends ConsoleKernel
      */
     protected function commands()
     {
-        $this->load(__DIR__.'/Commands');
+        $this->load(__DIR__ . '/Commands');
 
         require base_path('routes/console.php');
     }

app/Exceptions/Handler.php

@@ -2,7 +2,7 @@
 
 namespace App\Exceptions;
 
-use Illuminate\Foundation\Exceptions\Handler as ExceptionHandler;
+use Kwaadpepper\ExceptionHandler\Exceptions\ExceptionHandler;
 use Throwable;
 
 class Handler extends ExceptionHandler
@@ -13,8 +13,7 @@ class Handler extends ExceptionHandler
      * @var array<int, class-string<Throwable>>
      */
     protected $dontReport = [
-        //
-    ];
+            ];
 
     /**
      * A list of the inputs that are never flashed for validation exceptions.
@@ -35,7 +34,6 @@ class Handler extends ExceptionHandler
     public function register()
     {
         $this->reportable(function (Throwable $e) {
-            //
         });
     }
 }

app/Http/Controllers/Bo/Auth/LoginController.php

@@ -0,0 +1,99 @@
+<?php
+
+namespace App\Http\Controllers\Bo\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Providers\RouteServiceProvider;
+use Illuminate\Foundation\Auth\AuthenticatesUsers;
+use Illuminate\Foundation\Auth\ThrottlesLogins;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Session;
+
+class LoginController extends Controller
+{
+    use AuthenticatesUsers;
+    use ThrottlesLogins;
+
+    /**
+     * Where to redirect users after login.
+     *
+     * @var string
+     */
+    protected $redirectTo = RouteServiceProvider::HOME;
+
+    /**
+     * Create a new controller instance.
+     *
+     * @return void
+     */
+    public function __construct()
+    {
+        $this->middleware('guest:backend')->except('logout');
+    }
+
+    /**
+     * Show the application's login form.
+     *
+     * @return \Illuminate\View\View
+     */
+    public function showLoginForm()
+    {
+        return view('back.auth.login');
+    }
+
+    /**
+     * Attempt to log the user into the application.
+     *
+     * @param \Illuminate\Http\Request $request
+     * @return boolean
+     */
+    protected function attemptLogin(Request $request)
+    {
+        return Auth::guard('backend')->attempt(
+            $this->credentials($request),
+            $request->filled('remember')
+        );
+    }
+
+    /**
+     * The user has been authenticated.
+     *
+     * @param \Illuminate\Http\Request $request
+     * @param null                     $user
+     * @return mixed
+     * @phpcs:disable Squiz.Commenting.FunctionComment.TypeHintMissing, Generic.CodeAnalysis.UnusedFunctionParameter.FoundInExtendedClassBeforeLastUsed
+     */
+    protected function authenticated(Request $request, $user)
+    {
+        /** @var \App\Models\User|null */
+        $user = Auth::guard('backend')->user();
+        if ($user) {
+            $user->last_connection = now();
+            $user->saveOrFail();
+            Session::flash('info', trans('Vous êtes à présent connecté'));
+        }
+    }
+
+    /**
+     * The user has logged out of the application.
+     *
+     * @param \Illuminate\Http\Request $request
+     * @return mixed
+     * @phpcs:disable Generic.CodeAnalysis.UnusedFunctionParameter.FoundInExtendedClass
+     */
+    protected function loggedOut(Request $request)
+    {
+        Session::flash('info', trans('Vous êtes à présent déconnecté'));
+    }
+
+    /**
+     * Get the post register / login redirect path.
+     *
+     * @return string
+     */
+    public function redirectPath()
+    {
+        return response()->redirectToRoute('bo.dashboard')->getTargetUrl();
+    }
+}

app/Http/Controllers/Bo/HomeController.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Http\Controllers\Bo;
+
+use App\Http\Controllers\Controller;
+
+class HomeController extends Controller
+{
+    /**
+     * Dashboard view
+     *
+     * @return \Illuminate\Contracts\View\View|\Illuminate\Contracts\View\Factory
+     */
+    public function dashboard()
+    {
+        return view('back.dashboard');
+    }
+}

app/Http/Controllers/Controller.php

@@ -2,12 +2,164 @@
 
 namespace App\Http\Controllers;
 
+use Illuminate\Database\Eloquent\Builder;
+use Illuminate\Database\Eloquent\Model;
 use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
 use Illuminate\Foundation\Bus\DispatchesJobs;
 use Illuminate\Foundation\Validation\ValidatesRequests;
 use Illuminate\Routing\Controller as BaseController;
+use Illuminate\Support\Facades\File;
+use Illuminate\Support\Facades\Schema;
+use Illuminate\Support\Facades\Session;
+use Illuminate\Support\Str;
 
 class Controller extends BaseController
 {
-    use AuthorizesRequests, DispatchesJobs, ValidatesRequests;
+    use AuthorizesRequests;
+    use DispatchesJobs;
+    use ValidatesRequests;
+
+    /**
+     * Search query
+     *
+     * @param Builder      $query    The eloquent query builder.
+     * @param string       $search   The query string.
+     * @param string|array ...$field Either a simple array or a string
+     * in case of a string the two fields would be concatenate to make the search.
+     * @return Builder
+     */
+    protected function searchQuery(
+        Builder $query,
+        string $search,
+        ...$field
+    ): Builder {
+        if (count($field)) {
+            $table = $query->getModel()->getTable();
+            $query = $query->where(function ($q) use ($field, $search, $table) {
+                foreach ($field as $f) {
+                    $f = str_replace('?', '\?', $f);
+                    if (is_array($f)) {
+                        $q->orWhereRaw(
+                            sprintf("UPPER(CONCAT(%s)) LIKE UPPER(?)", collect($f)->map(function ($q) use ($table) {
+                                return "`$table`.`$q`";
+                            })->implode(', \' \', ')),
+                            ["%$search%"]
+                        );
+                    } else {
+                        $q->orWhereRaw("UPPER(`$table`.`$f`) LIKE UPPER(?)", ["%$search%"]);
+                    }
+                }
+            });
+        }
+        return $query;
+    }
+
+    /**
+     * Sort columns with a query
+     *
+     * @param Builder $query
+     * @param array   $ignore
+     * @return Builder
+     */
+    protected function sortQuery(Builder $query, array $ignore = []): Builder
+    {
+        $rName = request()->route()->getName();
+        $table = $query->getModel()->getTable();
+        if (request()->sort_col) {
+            Session::put("$rName.sort_col", request()->sort_col);
+        }
+        if (request()->sort_way) {
+            Session::put("$rName.sort_way", request()->sort_way);
+        }
+        if (request()->rst) {
+            Session::remove("$rName.sort_col");
+            Session::remove("$rName.sort_way");
+        }
+        if (request()->sort_col and request()->sort_way and Schema::hasColumn($table, request()->sort_col)) {
+            if (
+                !isset($ignore) or
+                (isset($ignore) and !in_array(request()->sort_col, $ignore))
+            ) {
+                $query = $query->orderBy(\sprintf("$table.%s", request()->sort_col), request()->sort_way);
+            }
+        } elseif (Schema::hasColumn($table, 'order')) {
+            $query = $query->orderBy('order', 'ASC');
+            Session::put("$rName.sort_col", 'order');
+            Session::put("$rName.sort_way", 'asc');
+        }
+        return $query;
+    }
+
+    /**
+     * Store an image of different types
+     *
+     * @param string                                            $table
+     * @param \Illuminate\Http\UploadedFile|\SplFileInfo|string $image
+     * @return string
+     * @throws \ErrorException If file copy fails.
+     */
+    public static function storeImage(string $table, $image): string
+    {
+        /** @var \Illuminate\Http\UploadedFile $image */
+        if (\is_object($image) and get_class($image) === UploadedFile::class) {
+            $newPath = self::prepareMoveFile($table, $image->getClientOriginalName());
+            $newPath = str_replace(storage_path('app'), '', $newPath);
+            $image->storePubliclyAs(
+                pathinfo($newPath, \PATHINFO_DIRNAME),
+                pathinfo($newPath, \PATHINFO_BASENAME)
+            );
+            return 'storage' . str_replace('/public', '', $newPath);
+        }
+        /** @var \SplFileInfo  $image */
+        if (\is_object($image) and get_class($image) === \SplFileInfo::class) {
+            $newPath = self::prepareMoveFile($table, $image->getBaseName());
+            if (!File::copy($image->getRealPath(), $newPath)) {
+                throw new \ErrorException(sprintf(
+                    'Failed to copy file %s to %s',
+                    $image->getRealPath(),
+                    $newPath
+                ));
+            }
+            return \ltrim(str_replace(\storage_path('app/public'), '/storage', $newPath), '/');
+        }
+        if (\is_string($image)) {
+            return $image;
+        }
+    }
+
+    /**
+     * Prepare storage path and return
+     * the image full path
+     *
+     * @param string $table    Model table name.
+     * @param string $filename The basename for the file.
+     * @return string
+     */
+    private static function prepareMoveFile(string $table, string $filename): string
+    {
+        $pathFolder = \storage_path(sprintf('app/public/images/%s', $table));
+        if (!File::exists($pathFolder)) {
+            File::makeDirectory($pathFolder, 0755, true);
+        }
+        $filename = sprintf('%s-%s', Str::uuid(), $filename);
+        $fullPath = sprintf('%s/%s', $pathFolder, $filename);
+        if (File::exists($fullPath)) {
+            File::delete($fullPath);
+        }
+        return $fullPath;
+    }
+
+    /**
+     * Destroy uploaded image
+     *
+     * @param Model  $model
+     * @param string $attribute
+     * @return void
+     */
+    public function removeUploadedImage(Model $model, string $attribute)
+    {
+        if (File::exists(ltrim($model->{$attribute}, '/')) and \strpos($model->{$attribute}, '/storage') === 0) {
+            File::delete(ltrim($model->{$attribute}, '/'));
+        }
+    }
 }

app/Http/Controllers/Fo/HomeController.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Http\Controllers\Fo;
+
+use App\Http\Controllers\Controller;
+
+class HomeController extends Controller
+{
+    /**
+     * Application home page
+     *
+     * @return \Illuminate\Contracts\View\View|\Illuminate\Contracts\View\Factory
+     */
+    public function home()
+    {
+        return view('front.home');
+    }
+}

app/Http/Kernel.php

@@ -14,7 +14,7 @@ class Kernel extends HttpKernel
      * @var array<int, class-string|string>
      */
     protected $middleware = [
-        // \App\Http\Middleware\TrustHosts::class,
+        \App\Http\Middleware\TrustHosts::class,
         \App\Http\Middleware\TrustProxies::class,
         \Fruitcake\Cors\HandleCors::class,
         \App\Http\Middleware\PreventRequestsDuringMaintenance::class,
@@ -33,17 +33,12 @@ class Kernel extends HttpKernel
             \App\Http\Middleware\EncryptCookies::class,
             \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
             \Illuminate\Session\Middleware\StartSession::class,
-            // \Illuminate\Session\Middleware\AuthenticateSession::class,
+            \Illuminate\Session\Middleware\AuthenticateSession::class,
             \Illuminate\View\Middleware\ShareErrorsFromSession::class,
             \App\Http\Middleware\VerifyCsrfToken::class,
             \Illuminate\Routing\Middleware\SubstituteBindings::class,
-        ],
-
-        'api' => [
-            // \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
-            'throttle:api',
-            \Illuminate\Routing\Middleware\SubstituteBindings::class,
-        ],
+            \App\Http\Middleware\SecureHeaders::class
+        ]
     ];
 
     /**
@@ -63,5 +58,6 @@ class Kernel extends HttpKernel
         'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class,
         'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
         'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
+        'xss' => \App\Http\Middleware\XssSanitizer::class,
     ];
 }

app/Http/Middleware/Authenticate.php

@@ -3,19 +3,36 @@
 namespace App\Http\Middleware;
 
 use Illuminate\Auth\Middleware\Authenticate as Middleware;
+use Illuminate\Support\Facades\Session;
 
 class Authenticate extends Middleware
 {
     /**
      * Get the path the user should be redirected to when they are not authenticated.
      *
-     * @param  \Illuminate\Http\Request  $request
+     * @param  \Illuminate\Http\Request $request
      * @return string|null
+     * @phpcs:disable Squiz.Commenting.FunctionComment.TypeHintMissing
      */
     protected function redirectTo($request)
     {
-        if (! $request->expectsJson()) {
+        $logins = [
+            'backend' => route('bo.login')
+        ];
+        if (!$request->expectsJson()) {
+            // * Notify must login
+            Session::flash('warning', trans('Veuillez vous connecter pour continuer'));
+
+            foreach ($request->route()->gatherMiddleware() as $middleware) {
+                if (\is_string($middleware) and strpos($middleware, 'auth:') !== false) {
+                    $route = $logins[str_replace('auth:', '', $middleware)] ?? null;
+                    if ($route) {
+                        return $route;
+                    }
+                }
+            }
             return route('login');
         }
+        abort(401);
     }
 }

app/Http/Middleware/EncryptCookies.php

@@ -11,7 +11,5 @@ class EncryptCookies extends Middleware
      *
      * @var array<int, string>
      */
-    protected $except = [
-        //
-    ];
+    protected $except = [];
 }

app/Http/Middleware/PreventRequestsDuringMaintenance.php

@@ -11,7 +11,5 @@ class PreventRequestsDuringMaintenance extends Middleware
      *
      * @var array<int, string>
      */
-    protected $except = [
-        //
-    ];
+    protected $except = [];
 }

app/Http/Middleware/RedirectIfAuthenticated.php

@@ -2,7 +2,6 @@
 
 namespace App\Http\Middleware;
 
-use App\Providers\RouteServiceProvider;
 use Closure;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
@@ -12,18 +11,21 @@ class RedirectIfAuthenticated
     /**
      * Handle an incoming request.
      *
-     * @param  \Illuminate\Http\Request  $request
-     * @param  \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse)  $next
-     * @param  string|null  ...$guards
+     * @param \Illuminate\Http\Request $request
+     * @param \Closure                 $next
+     * @param string|null              ...$guards
      * @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
      */
     public function handle(Request $request, Closure $next, ...$guards)
     {
+        $logins = [
+            'backend' => route('bo.dashboard')
+        ];
         $guards = empty($guards) ? [null] : $guards;
 
         foreach ($guards as $guard) {
             if (Auth::guard($guard)->check()) {
-                return redirect(RouteServiceProvider::HOME);
+                return \redirect()->to($logins[$guard]);
             }
         }
 

app/Http/Middleware/SecureHeaders.php

@@ -0,0 +1,72 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Route;
+use Illuminate\Support\Facades\View;
+
+class SecureHeaders
+{
+    /**
+     * Enumerate headers which you do not want in your application's responses.
+     * Great starting point would be to go check out @Scott_Helme's:
+     * https://securityheaders.com/
+     *
+     * @var array
+     */
+    private $unwantedHeaderList = [
+        'X-Powered-By',
+        'Server',
+    ];
+
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request $request
+     * @param  \Closure                 $next
+     * @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
+     */
+    public function handle(Request $request, Closure $next)
+    {
+        View::share('nonce', $nonce = \uniqid());
+        // * For VueJS dev tool to execute
+        $jsDev     = config('app.debug') ? "'unsafe-eval' 'unsafe-inline'" : "'nonce-$nonce'";
+        $cssDev    = config('app.debug') ? "'unsafe-inline'" : "'nonce-$nonce'";
+        $reportUri = Route::has('cspReportUri') ?
+            \sprintf('report-uri %s', \parse_url(route('cspReportUri'), \PHP_URL_PATH)) : '';
+        $this->removeUnwantedHeaders($this->unwantedHeaderList);
+        $response = $next($request);
+        $response->headers->set('Referrer-Policy', 'no-referrer-when-downgrade');
+        $response->headers->set('X-Content-Type-Options', 'nosniff');
+        $response->headers->set('X-XSS-Protection', '1; mode=block');
+        $response->headers->set('X-Frame-Options', 'SAMEORIGIN');
+        $response->headers->set('Strict-Transport-Security', 'max-age=31536000; includeSubDomains;');
+        $cspPolicies = [
+            // phpcs:ignore Generic.Files.LineLength.TooLong
+            "style-src 'self' $cssDev;",
+            // phpcs:ignore Generic.Files.LineLength.TooLong
+            "script-src 'self' $jsDev;"
+        ];
+        $response->headers->set(
+            'Content-Security-Policy',
+            implode(' ', $cspPolicies) . $reportUri
+        );
+        $response->headers->set('Feature-Policy', 'fullscreen \'self\';');
+        return $response;
+    }
+
+    /**
+     * Remove unwanted headers
+     *
+     * @param array $headerList
+     * @return void
+     */
+    private function removeUnwantedHeaders(array $headerList)
+    {
+        foreach ($headerList as $header) {
+            header_remove($header);
+        }
+    }
+}

app/Http/Middleware/TrustProxies.php

@@ -17,7 +17,7 @@ class TrustProxies extends Middleware
     /**
      * The headers that should be used to detect proxies.
      *
-     * @var int
+     * @var integer
      */
     protected $headers =
         Request::HEADER_X_FORWARDED_FOR |

app/Http/Middleware/VerifyCsrfToken.php

@@ -11,7 +11,5 @@ class VerifyCsrfToken extends Middleware
      *
      * @var array<int, string>
      */
-    protected $except = [
-        //
-    ];
+    protected $except = [];
 }

app/Http/Middleware/XssSanitizer.php

@@ -0,0 +1,46 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Lib\ToolboxHelper;
+use Illuminate\Http\Request;
+
+class XssSanitizer
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request $request
+     * @param  \Closure                 $next
+     * @param  mixed                    ...$params
+     * @return mixed
+     */
+    public function handle(Request $request, \Closure $next, ...$params)
+    {
+        $inputs = $request->all();
+        array_walk_recursive($inputs, function (&$input, $name) use ($params) {
+            if (!is_string($input)) {
+                return;
+            }
+            if (in_array($name, $params)) {
+                // ? Is a json input ?
+                if ($isJson = \json_decode($input, true) and is_array($isJson)) {
+                    // ! Decode each json field recursive.
+                    \array_walk_recursive($isJson, function (&$item) {
+                        if (\is_string($item)) {
+                            $item = clean($item);
+                            $item = ToolboxHelper::stripCkEditorSchemesOnMediaInputs($item);
+                        }
+                    });
+                } else {
+                    $input = clean($input);
+                    $input = ToolboxHelper::stripCkEditorSchemesOnMediaInputs($input);
+                }
+            } else {
+                $input = strip_tags($input);
+            }
+        });
+        $request->merge($inputs);
+        return $next($request);
+    }
+}

app/Lib/ToolboxHelper.php

@@ -0,0 +1,419 @@
+<?php
+
+namespace App\Lib;
+
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Http\Request;
+use Illuminate\Support\Carbon;
+use Illuminate\Support\Facades\File;
+use Illuminate\Support\Facades\Http;
+use Illuminate\Support\Facades\Route;
+use Illuminate\Support\Facades\Session;
+use Illuminate\Support\Facades\Validator;
+use Illuminate\Support\Str;
+use Illuminate\Validation\Rule;
+use Illuminate\Validation\ValidationException;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+class ToolboxHelper
+{
+    /**
+     * Strip scheme (https) on oembed urls
+     * Only embed allowed are for MP4 self hosted videos right now
+     *
+     * https is force by ckeditor MediaElements which natively supports
+     * only cloud hosted medias (youtube, spotify etc..)
+     *
+     * @param string $input
+     * @return string
+     */
+    public static function stripCkEditorSchemesOnMediaInputs(string $input): string
+    {
+        $input = \preg_replace('/(?<=<oembed url=")(https:\/\/)(?=.*?">)/m', '', $input);
+        return $input;
+    }
+
+    /**
+     * Assert That no Back Office url is present on txt
+     *
+     * @param string $field
+     * @param string $text
+     * @return string
+     * @throws \Illuminate\Validation\ValidationException If url is a bo url.
+     */
+    public static function assertNoInternalBoUrls(string $field, string $text): string
+    {
+        $routes = Route::getRoutes();
+        // * Url replace and email replace.
+        $text = preg_replace_callback(
+            // phpcs:ignore Generic.Files.LineLength.TooLong
+            '/(?P<url>(?:http[s]?:\/\/.)?(?:www\.)?[-a-zA-Z0-9@%._\+~#=]{2,256}\.[a-z]{2,6}\b(?:[-a-zA-Z0-9@:%_\+.~#?&\/\/=]*))/',
+            function ($matches) use ($routes, $field) {
+                $match = collect($matches)->first() ?? '';
+                $url   = $match;
+                try {
+                    $request = Request::create($url);
+                    // If a route is match then it do not throws exception.
+                    if (
+                        \parse_url(config('app.url'), \PHP_URL_HOST) === \parse_url($url, \PHP_URL_HOST) &&
+                        trim($routes->match($request)->getPrefix() ?? '', '/') === 'bo'
+                    ) {
+                        // Removes the matched url.
+                        throw ValidationException::withMessages([
+                            $field => sprintf(
+                                '%s : Il est interdit de coller une url du back office dans ce champ',
+                                trans($field)
+                            )
+                        ]);
+                    }
+                    return $match;
+                } catch (NotFoundHttpException $e) {
+                    return $match;
+                }
+            },
+            $text
+        );
+        return $text;
+    }
+
+    /**
+     * Assert That only external url is present on txt
+     *
+     * @param string $field
+     * @param string $text
+     * @return string
+     * @throws \Illuminate\Validation\ValidationException If url is a bo url.
+     */
+    public static function assertNoInternalUrls(string $field, string $text): string
+    {
+        self::assertNoInternalBoUrls($field, $text);
+        $routes = Route::getRoutes();
+        // * Url replace and email replace.
+        $text = preg_replace_callback(
+            // phpcs:ignore Generic.Files.LineLength.TooLong
+            '/(?P<url>(?:http[s]?:\/\/.)?(?:www\.)?[-a-zA-Z0-9@%._\+~#=]{2,256}\.[a-z]{2,6}\b(?:[-a-zA-Z0-9@:%_\+.~#?&\/\/=]*))/',
+            function ($matches) use ($routes, $field) {
+                $match = collect($matches)->first() ?? '';
+                $url   = $match;
+                try {
+                    $request = Request::create($url);
+                    // If a route is match then it do not throws exception.
+                    if (
+                        \parse_url(config('app.url'), \PHP_URL_HOST) === \parse_url($url, \PHP_URL_HOST) &&
+                        $routes->match($request)
+                    ) {
+                        // Removes the matched url.
+                        throw ValidationException::withMessages([
+                            $field => sprintf(
+                                '%s : Il est interdit de coller une url de %s dans ce champ',
+                                trans($field),
+                                config('app.name')
+                            )
+                        ]);
+                    }
+                    return $match;
+                } catch (NotFoundHttpException $e) {
+                    return $match;
+                }
+            },
+            $text
+        );
+        return $text;
+    }
+
+    /**
+     * Generates an array from a dot separated string
+     *
+     * @param string $path
+     * @param mixed  $value
+     * @param string $separator
+     * @return array
+     */
+    public static function dotStringToNestedArray(string $path, $value, string $separator = '.'): array
+    {
+        $arr  = $value;
+        $keys = array_reverse(explode($separator, $path));
+
+        foreach ($keys as $key) {
+            $arr = [$key => $arr];
+        }
+        return $arr;
+    }
+
+    /**
+     * Generate url using laravel route passing our group query if present
+     * This is used to keep ou group tracking
+     * Curd-policies is only used for root users as it cannot keep track of our group
+     * and validate things
+     *
+     * @param array|string $name
+     * @param mixed        $parameters
+     * @param boolean      $absolute
+     * @return string
+     * @throws \ErrorException If an object given as parameter is not a Model.
+     */
+    public static function routeWithGroup($name, $parameters = [], bool $absolute = true): string
+    {
+        // * Handle if parameter if is an object.
+        if (\is_object($parameters)) {
+            $parents = \class_parents($parameters);
+            if ($parents === false or !\in_array(Model::class, $parents)) {
+                throw new \ErrorException(\sprintf(
+                    '%s only support object of type %s',
+                    __FUNCTION__,
+                    Model::class
+                ));
+            }
+            /** @var \Illuminate\Database\Eloquent\Model $model */
+            $model      = $parameters;
+            $parameters = [Str::singular($model->getTable()) => $model];
+        }
+        // * Handle if parameter isnt and array like slug or else.
+        if (!is_array($parameters)) {
+            // * Best effort, result is not garantee.
+            $parameters = [$parameters];
+        }
+        // * Pass our group.
+        if ($group = Session::get('activeGroup', request()->group)) {
+            $parameters = array_merge($parameters, ['group' => $group]);
+        }
+        // * Call laravel route helper.
+        return route($name, $parameters, $absolute);
+    }
+
+    /**
+     * Store an image of different types
+     *
+     * @param string                                            $table
+     * @param \Illuminate\Http\UploadedFile|\SplFileInfo|string $image
+     * @return string
+     * @throws \ErrorException If file copy fails.
+     */
+    public static function storeImage(string $table, $image): string
+    {
+        /** @var \Illuminate\Http\UploadedFile $image */
+        if (\is_object($image) and get_class($image) === UploadedFile::class) {
+            $newPath = self::prepareMoveFile($table, $image->getClientOriginalName());
+            $newPath = str_replace(storage_path('app'), '', $newPath);
+            $image->storePubliclyAs(
+                pathinfo($newPath, \PATHINFO_DIRNAME),
+                pathinfo($newPath, \PATHINFO_BASENAME)
+            );
+            return 'storage' . str_replace('/public', '', $newPath);
+        }
+        /** @var \SplFileInfo  $image */
+        if (\is_object($image) and get_class($image) === \SplFileInfo::class) {
+            $newPath = self::prepareMoveFile($table, $image->getBaseName());
+            if (!File::copy($image->getRealPath(), $newPath)) {
+                throw new \ErrorException(sprintf(
+                    'Failed to copy file %s to %s',
+                    $image->getRealPath(),
+                    $newPath
+                ));
+            }
+            return \ltrim(str_replace(\storage_path('app/public'), '/storage', $newPath), '/');
+        }
+        if (\is_string($image)) {
+            return $image;
+        }
+    }
+
+    /**
+     * Prepare storage path and return
+     * the image full path
+     *
+     * @param string $table    Model table name.
+     * @param string $filename The basename for the file.
+     * @return string
+     */
+    private static function prepareMoveFile(string $table, string $filename): string
+    {
+        $pathFolder = \storage_path(sprintf('app/public/images/%s', $table));
+        if (!File::exists($pathFolder)) {
+            File::makeDirectory($pathFolder, 0755, true);
+        }
+        $filename = sprintf('%s-%s', Str::uuid(), $filename);
+        $fullPath = sprintf('%s/%s', $pathFolder, $filename);
+        if (File::exists($fullPath)) {
+            File::delete($fullPath);
+        }
+        return $fullPath;
+    }
+
+    /**
+     * PDF Attributes names
+     *
+     * @param Request $request
+     * @return array
+     */
+    public static function pdfAttributes(Request $request): array
+    {
+        $pdfAttributes = ['pdf' => trans('documents PDF')];
+        if (\is_array($request->pdfValidate)) {
+            // phpcs:ignore Generic.CodeAnalysis.UnusedFunctionParameter.FoundBeforeLastUsed
+            collect($request->pdfValidate)->map(function ($value, $index) use (&$pdfAttributes) {
+                $pdfAttributes["pdfValidate.$index"] = sprintf('document PDF n°%d', $index + 1);
+            });
+        }
+        return $pdfAttributes;
+    }
+
+    /**
+     * Pdf rules
+     *
+     * @return array
+     */
+    public static function pdfRules(): array
+    {
+        return [
+            'pdf' => 'sometimes|array',
+            'pdfValidate' => 'required_with:pdf|array',
+            // phpcs:ignore Generic.CodeAnalysis.UnusedFunctionParameter.FoundBeforeLastUsed
+            'pdfValidate.*' => function ($attribute, $value, $fail) {
+                if (!File::exists($value)) {
+                    $fail(trans(":attribute n'existe pas dans le système de fichier"));
+                }
+                if (File::mimeType($value) !== 'application/pdf') {
+                    $fail(trans(":attribute doit être un document de type 'application/pdf'"));
+                }
+            }
+        ];
+    }
+
+
+    /**
+     * Merges post pdf fields with request data
+     *
+     * @param \Illuminate\Http\Request $request
+     * @return void
+     */
+    public static function mergePdf(Request $request): void
+    {
+        $pdf = $request->pdf;
+        if (is_array($pdf)) {
+            $request->merge(['pdfValidate' => []]);
+            foreach ($pdf as $key => $pdfPath) {
+                // ! Empty pdf.
+                if ($pdfPath === 'false') {
+                    // * Empty pdf and exit
+                    $request->merge(['pdf' => []]);
+                    return;
+                }
+                $decodedPath = \urldecode($pdfPath);
+                $request->merge([
+                    "pdfValidate" => array_merge(
+                        $request->pdfValidate,
+                        [\public_path(ltrim($decodedPath, '/'))]
+                    )
+                ]);
+                $changedPdf       = $request->pdf;
+                $changedPdf[$key] = $decodedPath;
+                $request->merge([
+                    'pdf' => $changedPdf
+                ]);
+            }
+        } //end if
+    }
+
+    /**
+     * Asserts that the field is unique
+     *
+     * @param mixed  $id
+     * @param string $field
+     * @param mixed  $value
+     * @return void
+     * @throws \Illuminate\Validation\ValidationException If the field is not unique.
+     */
+    public static function assertFieldIsUnique($id, string $field, $value)
+    {
+        Validator::make([$field => $value], [
+            $field => Rule::unique('users', $field)->ignore($id),
+        ], [
+            $field . '.unique' => trans('La valeur :value pour le champ :attribute est déjà utilisé', [
+                'attribute' => $field,
+                'value' => $value
+            ])
+        ])->validate();
+    }
+
+    /**
+     * Validate recaptcha V3
+     *
+     * @param Request $request
+     * @return void
+     */
+    public static function validateRecaptchaV3(Request $request)
+    {
+        Validator::validate($request->all(), [
+            'g-recaptcha-response' => [
+                'required', 'string',
+                // phpcs:ignore Generic.CodeAnalysis.UnusedFunctionParameter.FoundAfterLastUsed, Generic.CodeAnalysis.UnusedFunctionParameter.FoundBeforeLastUsed
+                function ($attribute, $value, $fail) {
+                    try {
+                        $response = Http::asForm()->post('https://www.google.com/recaptcha/api/siteverify', [
+                            'secret' => config('recaptcha.private'),
+                            'response' => \strval($value),
+                            'remoteip' => app('clientIp')
+                        ]);
+                        if ($e = $response->toException()) {
+                            throw $e;
+                        }
+
+                        if (
+                            !$response->json('success') or
+                            !$response->json('challenge_ts') or
+                            Carbon::parse($response->json('challenge_ts'))->lessThan(\now('utc')->subMinutes(5)) or
+                            $response->json('hostname') !== \parse_url(config('app.url'), \PHP_URL_HOST) or
+                            !$response->json('score')
+                        ) {
+                            throw new \ErrorException();
+                        }
+                        if (\floatval($response->json('score')) < 0.8) {
+                            $fail('Vous n\'avez pas obtenu un score assez élevé lors de la validation du recaptcha');
+                        }
+                    } catch (\Exception $e) {
+                        $fail('Erreur lors de la validation du formulaire veuillez réssayer');
+                    } //end try
+                }
+            ]
+        ], [], ['g-recaptcha-response' => 'reCaptcha']);
+    }
+
+    /**
+     * * Register CSP report URI
+     *
+     * Put this function inside RouteServiceProvider,
+     * and call it in RouteServiceProvider::boot
+     *
+     * ! Use this in conjonction with kwaadpepper/exception-handler
+     *
+     * @return void
+     */
+    public static function cspReportRoute()
+    {
+        // * CSP REPORT URI, Please add /csp-report to VerifyCsrfToken $except middleware
+        \Illuminate\Support\Facades\Route::post('/csp-report', function () {
+            $isCspRequest = request()->header('Content-Type') === 'application/csp-report';
+            if (!$isCspRequest or !request()->json('csp-report') or !is_array(request()->json('csp-report'))) {
+                abort(401);
+            }
+            // * Flatten if needed
+            $cspReport = collect(request()->json('csp-report'))
+                ->flatMap(function ($v, $k) {
+                    return [$k => is_array($v) ? collect($v)->flatten()->implode(', ') : $v];
+                })->all();
+            // * Filter array keys
+            $cspReport = collect(array_intersect_key($cspReport, [
+                'blocked-uri' => '', 'document-uri' => '', 'original-policy' => '',
+                'referrer' => '', 'violated-directive' => ''
+            ]));
+            report(new \Illuminate\Http\Client\HttpClientException(sprintf(
+                "CSP REPORT for %s : \n %s",
+                $cspReport->get('document-uri'),
+                $cspReport->implode("\n")
+            )));
+        })->middleware('throttle:5,2')
+            ->withoutMiddleware(\App\Http\Middleware\VerifyCsrfToken::class)
+            ->name('cspReportUri');
+    }
+}

app/Models/User.php

@@ -2,15 +2,19 @@
 
 namespace App\Models;
 
-use Illuminate\Contracts\Auth\MustVerifyEmail;
+use App\Lib\ToolboxHelper;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Str;
 use Laravel\Sanctum\HasApiTokens;
 
 class User extends Authenticatable
 {
-    use HasApiTokens, HasFactory, Notifiable;
+    use HasApiTokens;
+    use HasFactory;
+    use Notifiable;
 
     /**
      * The attributes that are mass assignable.
@@ -40,5 +44,45 @@ class User extends Authenticatable
      */
     protected $casts = [
         'email_verified_at' => 'datetime',
+        'last_connection' => 'datetime',
     ];
+
+    /**
+     * Perform any actions required after the model boots.
+     *
+     * @return void
+     */
+    protected static function booted()
+    {
+        // * EVENT CLOSURES.
+        static::creating(function (self $user) {
+            static::assertEmailIsUnique($user->id, $user->email);
+            if (Hash::needsRehash($user->password)) {
+                $user->password = Hash::make($user->password);
+            }
+            $user->remember_token = Str::random(10);
+        });
+        static::updating(function (self $user) {
+            static::assertEmailIsUnique($user->id, $user->email);
+            if (Hash::needsRehash($user->password)) {
+                $user->password = Hash::make($user->password);
+            }
+            $user->remember_token = Str::random(10);
+        });
+    }
+
+    // * METHODS
+
+    /**
+     * Asserts using validation that the email is unique
+     *
+     * @param mixed $id
+     * @param mixed $email
+     * @return void
+     * @throws \Illuminate\Validation\ValidationException If user email as already used.
+     */
+    private static function assertEmailIsUnique($id, $email)
+    {
+        ToolboxHelper::assertFieldIsUnique($id, 'email', $email);
+    }
 }

app/Providers/AppServiceProvider.php

@@ -2,20 +2,13 @@
 
 namespace App\Providers;
 
+use Illuminate\Pagination\Paginator;
+use Illuminate\Support\Carbon;
+use Illuminate\Support\Facades\URL;
 use Illuminate\Support\ServiceProvider;
 
 class AppServiceProvider extends ServiceProvider
 {
-    /**
-     * Register any application services.
-     *
-     * @return void
-     */
-    public function register()
-    {
-        //
-    }
-
     /**
      * Bootstrap any application services.
      *
@@ -23,6 +16,37 @@ class AppServiceProvider extends ServiceProvider
      */
     public function boot()
     {
-        //
+        // * LOCAL HTTPS FIX
+        if (config('app.env') !== 'local') {
+            URL::forceScheme('https');
+        }
+
+        // * LOCAL FORCE eg: for Carbon
+        // * Remove numeric to prevent float seperator to breaking numeric transactions
+        \collect([\LC_TIME, \LC_MESSAGES, \LC_COLLATE, \LC_CTYPE, \LC_MONETARY])
+        ->map(function ($contant) {
+            setlocale(
+                $contant,
+                \sprintf(
+                    '%s_%s.UTF-8',
+                    config('app.locale'),
+                    \strtoupper(config('app.locale'))
+                )
+            );
+        });
+        Carbon::setLocale(config('app.locale'));
+
+        // * Force bootstrap paginator
+        Paginator::useBootstrap();
+
+        // * HA PROXY FIX
+        app()->singleton('clientIp', function () {
+            if (
+                config('app.env') === 'local'
+            ) {
+                return request()->getClientIp();
+            }
+            return request()->server('HTTP_X_FORWARDED_FOR') ?? request()->getClientIp();
+        });
     }
 }

app/Providers/AuthServiceProvider.php

@@ -3,7 +3,6 @@
 namespace App\Providers;
 
 use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
-use Illuminate\Support\Facades\Gate;
 
 class AuthServiceProvider extends ServiceProvider
 {
@@ -12,9 +11,7 @@ class AuthServiceProvider extends ServiceProvider
      *
      * @var array<class-string, class-string>
      */
-    protected $policies = [
-        // 'App\Models\Model' => 'App\Policies\ModelPolicy',
-    ];
+    protected $policies = [];
 
     /**
      * Register any authentication / authorization services.
@@ -24,7 +21,5 @@ class AuthServiceProvider extends ServiceProvider
     public function boot()
     {
         $this->registerPolicies();
-
-        //
     }
 }

app/Providers/BroadcastServiceProvider.php

@@ -1,21 +0,0 @@
-<?php
-
-namespace App\Providers;
-
-use Illuminate\Support\Facades\Broadcast;
-use Illuminate\Support\ServiceProvider;
-
-class BroadcastServiceProvider extends ServiceProvider
-{
-    /**
-     * Bootstrap any application services.
-     *
-     * @return void
-     */
-    public function boot()
-    {
-        Broadcast::routes();
-
-        require base_path('routes/channels.php');
-    }
-}

app/Providers/EventServiceProvider.php

@@ -5,7 +5,6 @@ namespace App\Providers;
 use Illuminate\Auth\Events\Registered;
 use Illuminate\Auth\Listeners\SendEmailVerificationNotification;
 use Illuminate\Foundation\Support\Providers\EventServiceProvider as ServiceProvider;
-use Illuminate\Support\Facades\Event;
 
 class EventServiceProvider extends ServiceProvider
 {
@@ -27,6 +26,5 @@ class EventServiceProvider extends ServiceProvider
      */
     public function boot()
     {
-        //
     }
 }

app/Providers/RouteServiceProvider.php

@@ -2,6 +2,7 @@
 
 namespace App\Providers;
 
+use App\Lib\ToolboxHelper;
 use Illuminate\Cache\RateLimiting\Limit;
 use Illuminate\Foundation\Support\Providers\RouteServiceProvider as ServiceProvider;
 use Illuminate\Http\Request;
@@ -19,15 +20,6 @@ class RouteServiceProvider extends ServiceProvider
      */
     public const HOME = '/home';
 
-    /**
-     * The controller namespace for the application.
-     *
-     * When present, controller route declarations will automatically be prefixed with this namespace.
-     *
-     * @var string|null
-     */
-    // protected $namespace = 'App\\Http\\Controllers';
-
     /**
      * Define your route model bindings, pattern filters, etc.
      *
@@ -37,15 +29,16 @@ class RouteServiceProvider extends ServiceProvider
     {
         $this->configureRateLimiting();
 
+        ToolboxHelper::cspReportRoute();
+
         $this->routes(function () {
-            Route::prefix('api')
-                ->middleware('api')
+            Route::middleware('web')
                 ->namespace($this->namespace)
-                ->group(base_path('routes/api.php'));
+                ->group(base_path('routes/web-bo.php'));
 
             Route::middleware('web')
                 ->namespace($this->namespace)
-                ->group(base_path('routes/web.php'));
+                ->group(base_path('routes/web-fo.php'));
         });
     }
 
@@ -56,8 +49,8 @@ class RouteServiceProvider extends ServiceProvider
      */
     protected function configureRateLimiting()
     {
-        RateLimiter::for('api', function (Request $request) {
-            return Limit::perMinute(60)->by(optional($request->user())->id ?: $request->ip());
+        RateLimiter::for('web', function (Request $request) {
+            return Limit::perMinute(150)->by(optional($request->user())->id ?: app('clientIp'));
         });
     }
 }

app/Providers/TranslationServiceProvider.php

@@ -0,0 +1,77 @@
+<?php
+
+namespace App\Providers;
+
+use Illuminate\Support\Collection;
+use Illuminate\Support\Facades\File;
+use Illuminate\Support\Facades\Cache;
+use Illuminate\Support\ServiceProvider;
+
+class TranslationServiceProvider extends ServiceProvider
+{
+    /**
+     * Bootstrap the application services.
+     *
+     * @return void
+     */
+    public function boot()
+    {
+        foreach ($this->collectLocalesStrings() as $locale) {
+            // * Suported locales
+            Cache::rememberForever(sprintf('translations.%s', $locale), function () use ($locale) {
+                $translations = [
+                    'php' => $this->phpTranslations($locale),
+                    'json' => $this->jsonTranslations($locale),
+                ];
+                return $translations;
+            });
+        }
+    }
+
+    /**
+     * Gather provided langs checking from files
+     *
+     * @return Collection
+     */
+    private function collectLocalesStrings(): Collection
+    {
+        return collect(File::allFiles(resource_path('lang/')))->flatMap(function ($file) {
+            if ($file->getRelativePath()) {
+                return [$file->getRelativePath() => ''];
+            }
+        })->keys();
+    }
+
+    /**
+     * Gather all php translations
+     *
+     * @param string $locale
+     * @return array
+     */
+    private function phpTranslations(string $locale): array
+    {
+        $path = resource_path("lang/$locale");
+
+        return collect(File::allFiles($path))->flatMap(function ($file) use ($locale) {
+            $translation = $file->getBasename('.php');
+            return [$translation => trans($translation, [], $locale)];
+        })->all();
+    }
+
+    /**
+     * Gather json translations
+     *
+     * @param string $locale
+     * @return array
+     */
+    private function jsonTranslations(string $locale): array
+    {
+        $path = resource_path("lang/$locale.json");
+
+        if (is_string($path) && is_readable($path)) {
+            return json_decode(file_get_contents($path), true) ?? [];
+        }
+
+        return [];
+    }
+}

app/Traits/HasPicture.php

@@ -0,0 +1,144 @@
+<?php
+
+namespace App\Traits;
+
+use Illuminate\Support\Facades\File;
+
+trait HasPicture
+{
+    /**
+     * Images rules
+     *
+     * @return array
+     */
+    public function pictureRule(): array
+    {
+        return [
+            'picture' => [
+                'required',
+                function (string $attribute, $value, callable $fail) {
+                    return $this->validatePicture($attribute, $value, $fail);
+                }
+            ]
+        ];
+    }
+
+    /**
+     * Images rules
+     *
+     * @return array
+     */
+    public function pictureRules(): array
+    {
+        return [
+            'pictures' => 'sometimes|array',
+            'pictureValidate' => 'required_with:pictures|array',
+            'pictureValidate.*' => [
+                'required',
+                function (string $attribute, $value, callable $fail) {
+                    return $this->validatePicture($attribute, $value, $fail);
+                }
+            ]
+        ];
+    }
+
+    /**
+     * Validate picture
+     *
+     * @param string   $attribute
+     * @param mixed    $value
+     * @param callback $fail
+     * @return void
+     * @phpcs:disable Generic.CodeAnalysis.UnusedFunctionParameter.FoundBeforeLastUsed
+     */
+    private function validatePicture(string $attribute, $value, callable $fail)
+    {
+        if (!File::exists($value)) {
+            $fail(trans(":attribute n'existe pas dans le système de fichier"));
+            return;
+        }
+        if (!\in_array(File::mimeType($value), ['image/jpeg', 'image/jpg', 'image/png'])) {
+            $fail(trans(":attribute doit être une image de type 'image/jpeg,image/jpg,image/png'"));
+        }
+        if (!($dimensions = \getimagesize($value)) or !isset($dimensions[0]) or !isset($dimensions[1])) {
+            $fail(trans(":attribute impossible de valider les dimensions"));
+        } else {
+            $minWith   = 400;
+            $maxWith   = 1800;
+            $minHeight = 300;
+            $maxHeight = 1800;
+            $width     = intval($dimensions[0]);
+            $height    = intval($dimensions[1]);
+            if (($width < $minWith) or ($width > $maxWith)) {
+                $fail(trans(":attribute la largeur doit être comprise entre $minWith et $maxWith"));
+            }
+            if (($height < $minHeight) or ($height > $maxHeight)) {
+                $fail(trans(":attribute la hauteur doit être comprise entre $minHeight et $maxHeight"));
+            }
+        }
+    }
+
+    /**
+     * Merges products pictures fields with request data
+     *
+     * @return void
+     */
+    protected function mergePicture(): void
+    {
+        $picturePath = $this->picture;
+        if (is_string($picturePath)) {
+            $this->merge(['pictureValidate' => []]);
+            // ! Empty picture.
+            if ($picturePath === 'false') {
+                // * Empty picture and exit
+                $this->merge(['pictures' => []]);
+                return;
+            }
+            $decodedPath = \urldecode($picturePath);
+            $this->merge([
+                'pictureValidate' => array_merge(
+                    $this->pictureValidate,
+                    [\public_path(ltrim($decodedPath, '/'))]
+                )
+            ]);
+            $changedPicture = $this->picture;
+            $changedPicture = ltrim($decodedPath, '/');
+            $this->merge([
+                'picture' => $changedPicture
+            ]);
+        } //end if
+    }
+
+    /**
+     * Merges products pictures fields with request data
+     *
+     * @return void
+     */
+    protected function mergePictures(): void
+    {
+        $pictures = $this->pictures;
+        if (is_array($pictures)) {
+            $this->merge(['pictureValidate' => []]);
+            foreach ($pictures as $key => $picturePath) {
+                // ! Empty picture.
+                if ($picturePath === 'false') {
+                    // * Empty picture and exit
+                    $this->merge(['pictures' => []]);
+                    return;
+                }
+                $decodedPath = \urldecode($picturePath);
+                $this->merge([
+                    'pictureValidate' => array_merge(
+                        $this->pictureValidate,
+                        [\public_path(ltrim($decodedPath, '/'))]
+                    )
+                ]);
+                $changedPicture       = $this->pictures;
+                $changedPicture[$key] = ltrim($decodedPath, '/');
+                $this->merge([
+                    'pictures' => $changedPicture
+                ]);
+            }
+        } //end if
+    }
+}

app/Traits/MiniCrudModel.php

@@ -0,0 +1,103 @@
+<?php
+
+namespace App\Traits;
+
+use App\Enums\InputType;
+use App\Lib\ToolboxHelper;
+
+trait MiniCrudModel
+{
+    /**
+     * Fill the model with an array of attributes.
+     *
+     * @param  array $attributes
+     * @return void
+     * @throws \Illuminate\Database\Eloquent\MassAssignmentException If fill prop is not allowed.
+     * @phpcs:disable Squiz.Commenting.FunctionComment.EmptyThrows
+     */
+    public function fill(array $attributes)
+    {
+        parent::fill($attributes);
+        if (isset($attributes['data'])) {
+            $this->setData($attributes['data']);
+        }
+    }
+
+    /**
+     * Set a specific prop
+     *
+     * @param array $data
+     * @return void
+     */
+    private function setData(array $data): void
+    {
+        $attrs = $this->attributes;
+        if (isset($attrs['data'])) {
+            unset($attrs['data']);
+        }
+        $data = $this->serializeData($data);
+        $this->setRawAttributes(\array_merge_recursive(
+            $attrs,
+            ['data' => $data]
+        ));
+    }
+
+    /**
+     * Get data attribute
+     * Cast json_decode to object.
+     *
+     * @return object|null
+     */
+    protected function getDataAttribute(): ?object
+    {
+        return \json_decode($this->getAttributes()['data'] ?? '[]');
+    }
+
+    /**
+     * Get data attribute
+     * Cast json_decode to object.
+     *
+     * @param array $data
+     * @return void
+     */
+    protected function setDataAttribute(array $data): void
+    {
+        $this->setData($data);
+    }
+
+    /**
+     * Serialize properties
+     *
+     * @param array $data
+     * @return string
+     * @throws \ErrorException If input type is no handled.
+     * @throws \Illuminate\Validation\ValidationException If url is a bo url.
+     * @phpcs:disable Squiz.Commenting.FunctionCommentThrowTag.WrongNumber
+     * @phpcs:disable Generic.Metrics.CyclomaticComplexity.TooHigh
+     */
+    private function serializeData(array $data): string
+    {
+        foreach ($data as $o => $input) {
+            switch ($input['inputType']->value ?? $input['inputType']['value']) {
+                case InputType::image()->value:
+                    $data[$o]['value'] = ToolboxHelper::storeImage($this->getTable(), $input['value']);
+                    break;
+                case InputType::boolean()->value:
+                case InputType::text()->value:
+                case InputType::number()->value:
+                case InputType::string()->value:
+                case InputType::videoVimeo()->value:
+                    break;
+                case InputType::url()->value:
+                    ToolboxHelper::assertNoInternalBoUrls('content', $input['value']);
+                    break;
+                default:
+                    throw new \ErrorException(sprintf(
+                        'Unknown input Type %s',
+                        $input['inputType']->label ?? $input['inputType']['label']
+                    ));
+            }
+        }//end foreach
+        return json_encode($data);
+    }
+}

app/Traits/UpdateModelStatus.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Traits;
+
+use Illuminate\Database\Eloquent\Model;
+
+/**
+ * This trait works with Route::bind in App service provider
+ * to resolve the model and the DB row
+ * It does not work with binder Service
+ */
+trait UpdateModelStatus
+{
+    /**
+     * Change model published
+     *
+     * @param Model $model
+     * @return \Illuminate\Http\RedirectResponse
+     */
+    public function changePublished(Model $model)
+    {
+        $model->status = !$model->status;
+        $model->saveOrFail();
+        return redirect()->back();
+    }
+}

composer.json

@@ -6,11 +6,17 @@
     "license": "MIT",
     "require": {
         "php": "^7.3|^8.0",
+        "diglactic/laravel-breadcrumbs": "^7.2",
         "fruitcake/laravel-cors": "^2.0",
         "guzzlehttp/guzzle": "^7.0.1",
+        "kwaadpepper/exception-handler": "^0.0.8",
         "laravel/framework": "^8.75",
         "laravel/sanctum": "^2.11",
-        "laravel/tinker": "^2.5"
+        "laravel/tinker": "^2.5",
+        "laravel/ui": "^3.4",
+        "mews/purifier": "^3.3",
+        "slevomat/coding-standard": "^7.2",
+        "spatie/laravel-mix-preload": "^1.3"
     },
     "require-dev": {
         "facade/ignition": "^2.5",
@@ -55,7 +61,10 @@
     "config": {
         "optimize-autoloader": true,
         "preferred-install": "dist",
-        "sort-packages": true
+        "sort-packages": true,
+        "allow-plugins": {
+            "dealerdirect/phpcodesniffer-composer-installer": true
+        }
     },
     "minimum-stability": "dev",
     "prefer-stable": true

composer.lock

@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "c61ff82cbf0142a401a48a8161e1595a",
+    "content-hash": "d1d7f10ebf8699ef02c0888a44a347da",
     "packages": [
         {
             "name": "asm89/stack-cors",
@@ -122,6 +122,152 @@
             ],
             "time": "2021-08-15T20:50:18+00:00"
         },
+        {
+            "name": "dealerdirect/phpcodesniffer-composer-installer",
+            "version": "v0.7.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/Dealerdirect/phpcodesniffer-composer-installer.git",
+                "reference": "1c968e542d8843d7cd71de3c5c9c3ff3ad71a1db"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/Dealerdirect/phpcodesniffer-composer-installer/zipball/1c968e542d8843d7cd71de3c5c9c3ff3ad71a1db",
+                "reference": "1c968e542d8843d7cd71de3c5c9c3ff3ad71a1db",
+                "shasum": ""
+            },
+            "require": {
+                "composer-plugin-api": "^1.0 || ^2.0",
+                "php": ">=5.3",
+                "squizlabs/php_codesniffer": "^2.0 || ^3.1.0 || ^4.0"
+            },
+            "require-dev": {
+                "composer/composer": "*",
+                "php-parallel-lint/php-parallel-lint": "^1.3.1",
+                "phpcompatibility/php-compatibility": "^9.0"
+            },
+            "type": "composer-plugin",
+            "extra": {
+                "class": "Dealerdirect\\Composer\\Plugin\\Installers\\PHPCodeSniffer\\Plugin"
+            },
+            "autoload": {
+                "psr-4": {
+                    "Dealerdirect\\Composer\\Plugin\\Installers\\PHPCodeSniffer\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Franck Nijhof",
+                    "email": "franck.nijhof@dealerdirect.com",
+                    "homepage": "http://www.frenck.nl",
+                    "role": "Developer / IT Manager"
+                },
+                {
+                    "name": "Contributors",
+                    "homepage": "https://github.com/Dealerdirect/phpcodesniffer-composer-installer/graphs/contributors"
+                }
+            ],
+            "description": "PHP_CodeSniffer Standards Composer Installer Plugin",
+            "homepage": "http://www.dealerdirect.com",
+            "keywords": [
+                "PHPCodeSniffer",
+                "PHP_CodeSniffer",
+                "code quality",
+                "codesniffer",
+                "composer",
+                "installer",
+                "phpcbf",
+                "phpcs",
+                "plugin",
+                "qa",
+                "quality",
+                "standard",
+                "standards",
+                "style guide",
+                "stylecheck",
+                "tests"
+            ],
+            "support": {
+                "issues": "https://github.com/dealerdirect/phpcodesniffer-composer-installer/issues",
+                "source": "https://github.com/dealerdirect/phpcodesniffer-composer-installer"
+            },
+            "time": "2022-02-04T12:51:07+00:00"
+        },
+        {
+            "name": "diglactic/laravel-breadcrumbs",
+            "version": "v7.2.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/diglactic/laravel-breadcrumbs.git",
+                "reference": "309ec597d047b763d1df3c5113a3932cc771500f"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/diglactic/laravel-breadcrumbs/zipball/309ec597d047b763d1df3c5113a3932cc771500f",
+                "reference": "309ec597d047b763d1df3c5113a3932cc771500f",
+                "shasum": ""
+            },
+            "require": {
+                "facade/ignition-contracts": "^1.0",
+                "laravel/framework": "^6.0 || ^7.0 || ^8.0 || ^9.0",
+                "php": "^7.2 || ^8.0"
+            },
+            "conflict": {
+                "davejamesmiller/laravel-breadcrumbs": "*"
+            },
+            "require-dev": {
+                "orchestra/testbench": "^4.10 || ^5.9 || ^6.4 || ^7.0",
+                "php-coveralls/php-coveralls": "^2.4",
+                "phpunit/phpunit": "^8.5 || ^9.4",
+                "spatie/phpunit-snapshot-assertions": "^2.2 || ^4.2"
+            },
+            "type": "library",
+            "extra": {
+                "laravel": {
+                    "providers": [
+                        "Diglactic\\Breadcrumbs\\ServiceProvider"
+                    ],
+                    "aliases": {
+                        "Breadcrumbs": "Diglactic\\Breadcrumbs\\Breadcrumbs"
+                    }
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Diglactic\\Breadcrumbs\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Sheng Slogar",
+                    "email": "sheng@diglactic.com",
+                    "role": "Maintainer"
+                },
+                {
+                    "name": "Dave James Miller",
+                    "email": "dave@davejamesmiller.com",
+                    "role": "Original Creator"
+                }
+            ],
+            "description": "A simple Laravel-style way to create breadcrumbs.",
+            "homepage": "https://github.com/diglactic/laravel-breadcrumbs",
+            "keywords": [
+                "laravel"
+            ],
+            "support": {
+                "issues": "https://github.com/diglactic/laravel-breadcrumbs/issues",
+                "source": "https://github.com/diglactic/laravel-breadcrumbs/tree/v7.2.0"
+            },
+            "time": "2022-05-03T05:40:37+00:00"
+        },
         {
             "name": "doctrine/inflector",
             "version": "2.0.4",
@@ -418,6 +564,113 @@
             ],
             "time": "2020-12-29T14:50:06+00:00"
         },
+        {
+            "name": "ezyang/htmlpurifier",
+            "version": "v4.13.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/ezyang/htmlpurifier.git",
+                "reference": "08e27c97e4c6ed02f37c5b2b20488046c8d90d75"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/ezyang/htmlpurifier/zipball/08e27c97e4c6ed02f37c5b2b20488046c8d90d75",
+                "reference": "08e27c97e4c6ed02f37c5b2b20488046c8d90d75",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.2"
+            },
+            "require-dev": {
+                "simpletest/simpletest": "dev-master#72de02a7b80c6bb8864ef9bf66d41d2f58f826bd"
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "library/HTMLPurifier.composer.php"
+                ],
+                "psr-0": {
+                    "HTMLPurifier": "library/"
+                },
+                "exclude-from-classmap": [
+                    "/library/HTMLPurifier/Language/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "LGPL-2.1-or-later"
+            ],
+            "authors": [
+                {
+                    "name": "Edward Z. Yang",
+                    "email": "admin@htmlpurifier.org",
+                    "homepage": "http://ezyang.com"
+                }
+            ],
+            "description": "Standards compliant HTML filter written in PHP",
+            "homepage": "http://htmlpurifier.org/",
+            "keywords": [
+                "html"
+            ],
+            "support": {
+                "issues": "https://github.com/ezyang/htmlpurifier/issues",
+                "source": "https://github.com/ezyang/htmlpurifier/tree/master"
+            },
+            "time": "2020-06-29T00:56:53+00:00"
+        },
+        {
+            "name": "facade/ignition-contracts",
+            "version": "1.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/facade/ignition-contracts.git",
+                "reference": "3c921a1cdba35b68a7f0ccffc6dffc1995b18267"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/facade/ignition-contracts/zipball/3c921a1cdba35b68a7f0ccffc6dffc1995b18267",
+                "reference": "3c921a1cdba35b68a7f0ccffc6dffc1995b18267",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.3|^8.0"
+            },
+            "require-dev": {
+                "friendsofphp/php-cs-fixer": "^v2.15.8",
+                "phpunit/phpunit": "^9.3.11",
+                "vimeo/psalm": "^3.17.1"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Facade\\IgnitionContracts\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Freek Van der Herten",
+                    "email": "freek@spatie.be",
+                    "homepage": "https://flareapp.io",
+                    "role": "Developer"
+                }
+            ],
+            "description": "Solution contracts for Ignition",
+            "homepage": "https://github.com/facade/ignition-contracts",
+            "keywords": [
+                "contracts",
+                "flare",
+                "ignition"
+            ],
+            "support": {
+                "issues": "https://github.com/facade/ignition-contracts/issues",
+                "source": "https://github.com/facade/ignition-contracts/tree/1.0.2"
+            },
+            "time": "2020-10-16T08:27:54+00:00"
+        },
         {
             "name": "fruitcake/laravel-cors",
             "version": "v2.2.0",
@@ -882,6 +1135,67 @@
             ],
             "time": "2022-03-20T21:55:58+00:00"
         },
+        {
+            "name": "kwaadpepper/exception-handler",
+            "version": "0.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/Kwaadpepper/exception-handler.git",
+                "reference": "e8ba0e31ca2bf5971e459c623f0f5322a4c7a630"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/Kwaadpepper/exception-handler/zipball/e8ba0e31ca2bf5971e459c623f0f5322a4c7a630",
+                "reference": "e8ba0e31ca2bf5971e459c623f0f5322a4c7a630",
+                "shasum": ""
+            },
+            "require": {
+                "illuminate/support": "~7|~8|~9",
+                "laravel/framework": "~7|~8|~9"
+            },
+            "require-dev": {
+                "orchestra/testbench": "^6.13",
+                "phpunit/phpunit": "~9.0",
+                "squizlabs/php_codesniffer": "^3.5"
+            },
+            "type": "library",
+            "extra": {
+                "laravel": {
+                    "providers": [
+                        "Kwaadpepper\\ExceptionHandler\\ExceptionHandlerServiceProvider"
+                    ]
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Kwaadpepper\\ExceptionHandler\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Jérémy Munsch",
+                    "email": "github@jeremydev.ovh",
+                    "homepage": "https://jeremydev.ovh"
+                }
+            ],
+            "description": "Send emails when exceptions occurs",
+            "homepage": "https://github.com/kwaadpepper/exception-handler",
+            "keywords": [
+                "email",
+                "exception",
+                "laravel",
+                "policies"
+            ],
+            "support": {
+                "issues": "https://github.com/Kwaadpepper/exception-handler/issues",
+                "source": "https://github.com/Kwaadpepper/exception-handler/tree/0.0.8"
+            },
+            "time": "2022-02-03T15:23:22+00:00"
+        },
         {
             "name": "laravel/framework",
             "version": "v8.83.13",
@@ -1247,6 +1561,67 @@
             },
             "time": "2022-03-23T12:38:24+00:00"
         },
+        {
+            "name": "laravel/ui",
+            "version": "v3.4.6",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/laravel/ui.git",
+                "reference": "65ec5c03f7fee2c8ecae785795b829a15be48c2c"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/laravel/ui/zipball/65ec5c03f7fee2c8ecae785795b829a15be48c2c",
+                "reference": "65ec5c03f7fee2c8ecae785795b829a15be48c2c",
+                "shasum": ""
+            },
+            "require": {
+                "illuminate/console": "^8.42|^9.0",
+                "illuminate/filesystem": "^8.42|^9.0",
+                "illuminate/support": "^8.82|^9.0",
+                "illuminate/validation": "^8.42|^9.0",
+                "php": "^7.3|^8.0"
+            },
+            "require-dev": {
+                "orchestra/testbench": "^6.23|^7.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.x-dev"
+                },
+                "laravel": {
+                    "providers": [
+                        "Laravel\\Ui\\UiServiceProvider"
+                    ]
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Laravel\\Ui\\": "src/",
+                    "Illuminate\\Foundation\\Auth\\": "auth-backend/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Taylor Otwell",
+                    "email": "taylor@laravel.com"
+                }
+            ],
+            "description": "Laravel UI utilities and presets.",
+            "keywords": [
+                "laravel",
+                "ui"
+            ],
+            "support": {
+                "source": "https://github.com/laravel/ui/tree/v3.4.6"
+            },
+            "time": "2022-05-20T13:38:08+00:00"
+        },
         {
             "name": "league/commonmark",
             "version": "1.6.7",
@@ -1490,6 +1865,87 @@
             ],
             "time": "2022-04-17T13:12:02+00:00"
         },
+        {
+            "name": "mews/purifier",
+            "version": "3.3.7",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/mewebstudio/Purifier.git",
+                "reference": "9844bc82886e4291b3116afbd9ab5f532856662a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/mewebstudio/Purifier/zipball/9844bc82886e4291b3116afbd9ab5f532856662a",
+                "reference": "9844bc82886e4291b3116afbd9ab5f532856662a",
+                "shasum": ""
+            },
+            "require": {
+                "ezyang/htmlpurifier": "4.13.*",
+                "illuminate/config": "^5.8|^6.0|^7.0|^8.0|^9.0",
+                "illuminate/filesystem": "^5.8|^6.0|^7.0|^8.0|^9.0",
+                "illuminate/support": "^5.8|^6.0|^7.0|^8.0|^9.0",
+                "php": "^7.2|^8.0"
+            },
+            "require-dev": {
+                "graham-campbell/testbench": "^3.2|^5.5.1",
+                "mockery/mockery": "^1.3.3",
+                "phpunit/phpunit": "^8.0|^9.0"
+            },
+            "suggest": {
+                "laravel/framework": "To test the Laravel bindings",
+                "laravel/lumen-framework": "To test the Lumen bindings"
+            },
+            "type": "package",
+            "extra": {
+                "laravel": {
+                    "providers": [
+                        "Mews\\Purifier\\PurifierServiceProvider"
+                    ],
+                    "aliases": {
+                        "Purifier": "Mews\\Purifier\\Facades\\Purifier"
+                    }
+                }
+            },
+            "autoload": {
+                "files": [
+                    "src/helpers.php"
+                ],
+                "psr-4": {
+                    "Mews\\Purifier\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Muharrem ERİN",
+                    "email": "me@mewebstudio.com",
+                    "homepage": "https://github.com/mewebstudio",
+                    "role": "Developer"
+                }
+            ],
+            "description": "Laravel 5/6/7 HtmlPurifier Package",
+            "homepage": "https://github.com/mewebstudio/purifier",
+            "keywords": [
+                "Purifier",
+                "htmlpurifier",
+                "laravel5 HtmlPurifier",
+                "laravel5 Purifier",
+                "laravel5 Security",
+                "laravel6 HtmlPurifier",
+                "laravel6 Purifier",
+                "laravel6 Security",
+                "security",
+                "xss"
+            ],
+            "support": {
+                "issues": "https://github.com/mewebstudio/Purifier/issues",
+                "source": "https://github.com/mewebstudio/Purifier/tree/3.3.7"
+            },
+            "time": "2022-02-12T15:54:11+00:00"
+        },
         {
             "name": "monolog/monolog",
             "version": "2.6.0",
@@ -1883,6 +2339,50 @@
             ],
             "time": "2021-12-04T23:24:31+00:00"
         },
+        {
+            "name": "phpstan/phpdoc-parser",
+            "version": "1.5.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phpstan/phpdoc-parser.git",
+                "reference": "981cc368a216c988e862a75e526b6076987d1b50"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phpstan/phpdoc-parser/zipball/981cc368a216c988e862a75e526b6076987d1b50",
+                "reference": "981cc368a216c988e862a75e526b6076987d1b50",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "require-dev": {
+                "php-parallel-lint/php-parallel-lint": "^1.2",
+                "phpstan/extension-installer": "^1.0",
+                "phpstan/phpstan": "^1.5",
+                "phpstan/phpstan-strict-rules": "^1.0",
+                "phpunit/phpunit": "^9.5",
+                "symfony/process": "^5.2"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "PHPStan\\PhpDocParser\\": [
+                        "src/"
+                    ]
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "description": "PHPDoc parser with support for nullable, intersection and generic types",
+            "support": {
+                "issues": "https://github.com/phpstan/phpdoc-parser/issues",
+                "source": "https://github.com/phpstan/phpdoc-parser/tree/1.5.1"
+            },
+            "time": "2022-05-05T11:32:40+00:00"
+        },
         {
             "name": "psr/container",
             "version": "1.1.1",
@@ -2539,6 +3039,191 @@
             ],
             "time": "2021-09-25T23:10:38+00:00"
         },
+        {
+            "name": "slevomat/coding-standard",
+            "version": "7.2.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/slevomat/coding-standard.git",
+                "reference": "aff06ae7a84e4534bf6f821dc982a93a5d477c90"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/slevomat/coding-standard/zipball/aff06ae7a84e4534bf6f821dc982a93a5d477c90",
+                "reference": "aff06ae7a84e4534bf6f821dc982a93a5d477c90",
+                "shasum": ""
+            },
+            "require": {
+                "dealerdirect/phpcodesniffer-composer-installer": "^0.6.2 || ^0.7",
+                "php": "^7.2 || ^8.0",
+                "phpstan/phpdoc-parser": "^1.5.1",
+                "squizlabs/php_codesniffer": "^3.6.2"
+            },
+            "require-dev": {
+                "phing/phing": "2.17.3",
+                "php-parallel-lint/php-parallel-lint": "1.3.2",
+                "phpstan/phpstan": "1.4.10|1.7.1",
+                "phpstan/phpstan-deprecation-rules": "1.0.0",
+                "phpstan/phpstan-phpunit": "1.0.0|1.1.1",
+                "phpstan/phpstan-strict-rules": "1.2.3",
+                "phpunit/phpunit": "7.5.20|8.5.21|9.5.20"
+            },
+            "type": "phpcodesniffer-standard",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "7.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "SlevomatCodingStandard\\": "SlevomatCodingStandard"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "description": "Slevomat Coding Standard for PHP_CodeSniffer complements Consistence Coding Standard by providing sniffs with additional checks.",
+            "support": {
+                "issues": "https://github.com/slevomat/coding-standard/issues",
+                "source": "https://github.com/slevomat/coding-standard/tree/7.2.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/kukulich",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/slevomat/coding-standard",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2022-05-25T10:58:12+00:00"
+        },
+        {
+            "name": "spatie/laravel-mix-preload",
+            "version": "1.3.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/spatie/laravel-mix-preload.git",
+                "reference": "cfd4549939e7b7e0df9361b36eaa3ef11e8bc16f"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/spatie/laravel-mix-preload/zipball/cfd4549939e7b7e0df9361b36eaa3ef11e8bc16f",
+                "reference": "cfd4549939e7b7e0df9361b36eaa3ef11e8bc16f",
+                "shasum": ""
+            },
+            "require": {
+                "illuminate/support": "^6.0|^7.0|^8.0|^9.0",
+                "php": "^7.3|^8.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.5.7"
+            },
+            "type": "library",
+            "extra": {
+                "laravel": {
+                    "providers": [
+                        "Spatie\\MixPreload\\MixPreloadServiceProvider"
+                    ]
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Spatie\\MixPreload\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian De Deyne",
+                    "email": "sebastian@spatie.be",
+                    "homepage": "https://spatie.be",
+                    "role": "Developer"
+                }
+            ],
+            "description": "Add preload and prefetch links based your Mix manifest",
+            "homepage": "https://github.com/spatie/laravel-mix-preload",
+            "keywords": [
+                "laravel-mix-preload",
+                "spatie"
+            ],
+            "support": {
+                "issues": "https://github.com/spatie/laravel-mix-preload/issues",
+                "source": "https://github.com/spatie/laravel-mix-preload/tree/1.3.0"
+            },
+            "funding": [
+                {
+                    "url": "https://spatie.be/open-source/support-us",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://www.patreon.com/spatie",
+                    "type": "patreon"
+                }
+            ],
+            "time": "2022-02-01T14:36:12+00:00"
+        },
+        {
+            "name": "squizlabs/php_codesniffer",
+            "version": "3.6.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/squizlabs/PHP_CodeSniffer.git",
+                "reference": "5e4e71592f69da17871dba6e80dd51bce74a351a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/squizlabs/PHP_CodeSniffer/zipball/5e4e71592f69da17871dba6e80dd51bce74a351a",
+                "reference": "5e4e71592f69da17871dba6e80dd51bce74a351a",
+                "shasum": ""
+            },
+            "require": {
+                "ext-simplexml": "*",
+                "ext-tokenizer": "*",
+                "ext-xmlwriter": "*",
+                "php": ">=5.4.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^4.0 || ^5.0 || ^6.0 || ^7.0"
+            },
+            "bin": [
+                "bin/phpcs",
+                "bin/phpcbf"
+            ],
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.x-dev"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Greg Sherwood",
+                    "role": "lead"
+                }
+            ],
+            "description": "PHP_CodeSniffer tokenizes PHP, JavaScript and CSS files and detects violations of a defined set of coding standards.",
+            "homepage": "https://github.com/squizlabs/PHP_CodeSniffer",
+            "keywords": [
+                "phpcs",
+                "standards"
+            ],
+            "support": {
+                "issues": "https://github.com/squizlabs/PHP_CodeSniffer/issues",
+                "source": "https://github.com/squizlabs/PHP_CodeSniffer",
+                "wiki": "https://github.com/squizlabs/PHP_CodeSniffer/wiki"
+            },
+            "time": "2021-12-12T21:44:58+00:00"
+        },
         {
             "name": "swiftmailer/swiftmailer",
             "version": "v6.3.0",
@@ -5295,59 +5980,6 @@
             },
             "time": "2022-02-23T18:31:24+00:00"
         },
-        {
-            "name": "facade/ignition-contracts",
-            "version": "1.0.2",
-            "source": {
-                "type": "git",
-                "url": "https://github.com/facade/ignition-contracts.git",
-                "reference": "3c921a1cdba35b68a7f0ccffc6dffc1995b18267"
-            },
-            "dist": {
-                "type": "zip",
-                "url": "https://api.github.com/repos/facade/ignition-contracts/zipball/3c921a1cdba35b68a7f0ccffc6dffc1995b18267",
-                "reference": "3c921a1cdba35b68a7f0ccffc6dffc1995b18267",
-                "shasum": ""
-            },
-            "require": {
-                "php": "^7.3|^8.0"
-            },
-            "require-dev": {
-                "friendsofphp/php-cs-fixer": "^v2.15.8",
-                "phpunit/phpunit": "^9.3.11",
-                "vimeo/psalm": "^3.17.1"
-            },
-            "type": "library",
-            "autoload": {
-                "psr-4": {
-                    "Facade\\IgnitionContracts\\": "src"
-                }
-            },
-            "notification-url": "https://packagist.org/downloads/",
-            "license": [
-                "MIT"
-            ],
-            "authors": [
-                {
-                    "name": "Freek Van der Herten",
-                    "email": "freek@spatie.be",
-                    "homepage": "https://flareapp.io",
-                    "role": "Developer"
-                }
-            ],
-            "description": "Solution contracts for Ignition",
-            "homepage": "https://github.com/facade/ignition-contracts",
-            "keywords": [
-                "contracts",
-                "flare",
-                "ignition"
-            ],
-            "support": {
-                "issues": "https://github.com/facade/ignition-contracts/issues",
-                "source": "https://github.com/facade/ignition-contracts/tree/1.0.2"
-            },
-            "time": "2020-10-16T08:27:54+00:00"
-        },
         {
             "name": "fakerphp/faker",
             "version": "v1.19.0",
@@ -7598,5 +8230,5 @@
         "php": "^7.3|^8.0"
     },
     "platform-dev": [],
-    "plugin-api-version": "2.3.0"
+    "plugin-api-version": "2.2.0"
 }

config/app.php

@@ -3,53 +3,53 @@
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Application Name
-    |--------------------------------------------------------------------------
-    |
-    | This value is the name of your application. This value is used when the
-    | framework needs to place the application's name in a notification or
-    | any other location as required by the application or its packages.
-    |
+        |--------------------------------------------------------------------------
+        | Application Name
+        |--------------------------------------------------------------------------
+        |
+        | This value is the name of your application. This value is used when the
+        | framework needs to place the application's name in a notification or
+        | any other location as required by the application or its packages.
+        |
     */
 
     'name' => env('APP_NAME', 'Laravel'),
 
     /*
-    |--------------------------------------------------------------------------
-    | Application Environment
-    |--------------------------------------------------------------------------
-    |
-    | This value determines the "environment" your application is currently
-    | running in. This may determine how you prefer to configure various
-    | services the application utilizes. Set this in your ".env" file.
-    |
+        |--------------------------------------------------------------------------
+        | Application Environment
+        |--------------------------------------------------------------------------
+        |
+        | This value determines the "environment" your application is currently
+        | running in. This may determine how you prefer to configure various
+        | services the application utilizes. Set this in your ".env" file.
+        |
     */
 
     'env' => env('APP_ENV', 'production'),
 
     /*
-    |--------------------------------------------------------------------------
-    | Application Debug Mode
-    |--------------------------------------------------------------------------
-    |
-    | When your application is in debug mode, detailed error messages with
-    | stack traces will be shown on every error that occurs within your
-    | application. If disabled, a simple generic error page is shown.
-    |
+        |--------------------------------------------------------------------------
+        | Application Debug Mode
+        |--------------------------------------------------------------------------
+        |
+        | When your application is in debug mode, detailed error messages with
+        | stack traces will be shown on every error that occurs within your
+        | application. If disabled, a simple generic error page is shown.
+        |
     */
 
-    'debug' => (bool) env('APP_DEBUG', false),
+    'debug' => (bool)env('APP_DEBUG', false),
 
     /*
-    |--------------------------------------------------------------------------
-    | Application URL
-    |--------------------------------------------------------------------------
-    |
-    | This URL is used by the console to properly generate URLs when using
-    | the Artisan command line tool. You should set this to the root of
-    | your application so that it is used when running Artisan tasks.
-    |
+        |--------------------------------------------------------------------------
+        | Application URL
+        |--------------------------------------------------------------------------
+        |
+        | This URL is used by the console to properly generate URLs when using
+        | the Artisan command line tool. You should set this to the root of
+        | your application so that it is used when running Artisan tasks.
+        |
     */
 
     'url' => env('APP_URL', 'http://localhost'),
@@ -57,66 +57,66 @@ return [
     'asset_url' => env('ASSET_URL', null),
 
     /*
-    |--------------------------------------------------------------------------
-    | Application Timezone
-    |--------------------------------------------------------------------------
-    |
-    | Here you may specify the default timezone for your application, which
-    | will be used by the PHP date and date-time functions. We have gone
-    | ahead and set this to a sensible default for you out of the box.
-    |
+        |--------------------------------------------------------------------------
+        | Application Timezone
+        |--------------------------------------------------------------------------
+        |
+        | Here you may specify the default timezone for your application, which
+        | will be used by the PHP date and date-time functions. We have gone
+        | ahead and set this to a sensible default for you out of the box.
+        |
     */
 
-    'timezone' => 'UTC',
+    'timezone' => 'Europe/Paris',
 
     /*
-    |--------------------------------------------------------------------------
-    | Application Locale Configuration
-    |--------------------------------------------------------------------------
-    |
-    | The application locale determines the default locale that will be used
-    | by the translation service provider. You are free to set this value
-    | to any of the locales which will be supported by the application.
-    |
+        |--------------------------------------------------------------------------
+        | Application Locale Configuration
+        |--------------------------------------------------------------------------
+        |
+        | The application locale determines the default locale that will be used
+        | by the translation service provider. You are free to set this value
+        | to any of the locales which will be supported by the application.
+        |
     */
 
-    'locale' => 'en',
+    'locale' => 'fr',
 
     /*
-    |--------------------------------------------------------------------------
-    | Application Fallback Locale
-    |--------------------------------------------------------------------------
-    |
-    | The fallback locale determines the locale to use when the current one
-    | is not available. You may change the value to correspond to any of
-    | the language folders that are provided through your application.
-    |
+        |--------------------------------------------------------------------------
+        | Application Fallback Locale
+        |--------------------------------------------------------------------------
+        |
+        | The fallback locale determines the locale to use when the current one
+        | is not available. You may change the value to correspond to any of
+        | the language folders that are provided through your application.
+        |
     */
 
     'fallback_locale' => 'en',
 
     /*
-    |--------------------------------------------------------------------------
-    | Faker Locale
-    |--------------------------------------------------------------------------
-    |
-    | This locale will be used by the Faker PHP library when generating fake
-    | data for your database seeds. For example, this will be used to get
-    | localized telephone numbers, street address information and more.
-    |
+        |--------------------------------------------------------------------------
+        | Faker Locale
+        |--------------------------------------------------------------------------
+        |
+        | This locale will be used by the Faker PHP library when generating fake
+        | data for your database seeds. For example, this will be used to get
+        | localized telephone numbers, street address information and more.
+        |
     */
 
-    'faker_locale' => 'en_US',
+    'faker_locale' => 'fr_FR',
 
     /*
-    |--------------------------------------------------------------------------
-    | Encryption Key
-    |--------------------------------------------------------------------------
-    |
-    | This key is used by the Illuminate encrypter service and should be set
-    | to a random, 32 character string, otherwise these encrypted strings
-    | will not be safe. Please do this before deploying an application!
-    |
+        |--------------------------------------------------------------------------
+        | Encryption Key
+        |--------------------------------------------------------------------------
+        |
+        | This key is used by the Illuminate encrypter service and should be set
+        | to a random, 32 character string, otherwise these encrypted strings
+        | will not be safe. Please do this before deploying an application!
+        |
     */
 
     'key' => env('APP_KEY'),
@@ -124,14 +124,14 @@ return [
     'cipher' => 'AES-256-CBC',
 
     /*
-    |--------------------------------------------------------------------------
-    | Autoloaded Service Providers
-    |--------------------------------------------------------------------------
-    |
-    | The service providers listed here will be automatically loaded on the
-    | request to your application. Feel free to add your own services to
-    | this array to grant expanded functionality to your applications.
-    |
+        |--------------------------------------------------------------------------
+        | Autoloaded Service Providers
+        |--------------------------------------------------------------------------
+        |
+        | The service providers listed here will be automatically loaded on the
+        | request to your application. Feel free to add your own services to
+        | this array to grant expanded functionality to your applications.
+        |
     */
 
     'providers' => [
@@ -139,6 +139,7 @@ return [
         /*
          * Laravel Framework Service Providers...
          */
+
         Illuminate\Auth\AuthServiceProvider::class,
         Illuminate\Broadcasting\BroadcastServiceProvider::class,
         Illuminate\Bus\BusServiceProvider::class,
@@ -169,23 +170,24 @@ return [
         /*
          * Application Service Providers...
          */
+
         App\Providers\AppServiceProvider::class,
         App\Providers\AuthServiceProvider::class,
-        // App\Providers\BroadcastServiceProvider::class,
         App\Providers\EventServiceProvider::class,
         App\Providers\RouteServiceProvider::class,
+        App\Providers\TranslationServiceProvider::class,
 
     ],
 
     /*
-    |--------------------------------------------------------------------------
-    | Class Aliases
-    |--------------------------------------------------------------------------
-    |
-    | This array of class aliases will be registered when this application
-    | is started. However, feel free to register as many as you wish as
-    | the aliases are "lazy" loaded so they don't hinder performance.
-    |
+        |--------------------------------------------------------------------------
+        | Class Aliases
+        |--------------------------------------------------------------------------
+        |
+        | This array of class aliases will be registered when this application
+        | is started. However, feel free to register as many as you wish as
+        | the aliases are "lazy" loaded so they don't hinder performance.
+        |
     */
 
     'aliases' => [
@@ -218,7 +220,6 @@ return [
         'Queue' => Illuminate\Support\Facades\Queue::class,
         'RateLimiter' => Illuminate\Support\Facades\RateLimiter::class,
         'Redirect' => Illuminate\Support\Facades\Redirect::class,
-        // 'Redis' => Illuminate\Support\Facades\Redis::class,
         'Request' => Illuminate\Support\Facades\Request::class,
         'Response' => Illuminate\Support\Facades\Response::class,
         'Route' => Illuminate\Support\Facades\Route::class,

config/auth.php

@@ -3,60 +3,60 @@
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Authentication Defaults
-    |--------------------------------------------------------------------------
-    |
-    | This option controls the default authentication "guard" and password
-    | reset options for your application. You may change these defaults
-    | as required, but they're a perfect start for most applications.
-    |
+        |--------------------------------------------------------------------------
+        | Authentication Defaults
+        |--------------------------------------------------------------------------
+        |
+        | This option controls the default authentication "guard" and password
+        | reset options for your application. You may change these defaults
+        | as required, but they're a perfect start for most applications.
+        |
     */
 
     'defaults' => [
-        'guard' => 'web',
+        'guard' => 'backend',
         'passwords' => 'users',
     ],
 
     /*
-    |--------------------------------------------------------------------------
-    | Authentication Guards
-    |--------------------------------------------------------------------------
-    |
-    | Next, you may define every authentication guard for your application.
-    | Of course, a great default configuration has been defined for you
-    | here which uses session storage and the Eloquent user provider.
-    |
-    | All authentication drivers have a user provider. This defines how the
-    | users are actually retrieved out of your database or other storage
-    | mechanisms used by this application to persist your user's data.
-    |
-    | Supported: "session"
-    |
+        |--------------------------------------------------------------------------
+        | Authentication Guards
+        |--------------------------------------------------------------------------
+        |
+        | Next, you may define every authentication guard for your application.
+        | Of course, a great default configuration has been defined for you
+        | here which uses session storage and the Eloquent user provider.
+        |
+        | All authentication drivers have a user provider. This defines how the
+        | users are actually retrieved out of your database or other storage
+        | mechanisms used by this application to persist your user's data.
+        |
+        | Supported: "session"
+        |
     */
 
     'guards' => [
-        'web' => [
+        'backend' => [
             'driver' => 'session',
             'provider' => 'users',
         ],
     ],
 
     /*
-    |--------------------------------------------------------------------------
-    | User Providers
-    |--------------------------------------------------------------------------
-    |
-    | All authentication drivers have a user provider. This defines how the
-    | users are actually retrieved out of your database or other storage
-    | mechanisms used by this application to persist your user's data.
-    |
-    | If you have multiple user tables or models you may configure multiple
-    | sources which represent each model / table. These sources may then
-    | be assigned to any extra authentication guards you have defined.
-    |
-    | Supported: "database", "eloquent"
-    |
+        |--------------------------------------------------------------------------
+        | User Providers
+        |--------------------------------------------------------------------------
+        |
+        | All authentication drivers have a user provider. This defines how the
+        | users are actually retrieved out of your database or other storage
+        | mechanisms used by this application to persist your user's data.
+        |
+        | If you have multiple user tables or models you may configure multiple
+        | sources which represent each model / table. These sources may then
+        | be assigned to any extra authentication guards you have defined.
+        |
+        | Supported: "database", "eloquent"
+        |
     */
 
     'providers' => [
@@ -64,26 +64,21 @@ return [
             'driver' => 'eloquent',
             'model' => App\Models\User::class,
         ],
-
-        // 'users' => [
-        //     'driver' => 'database',
-        //     'table' => 'users',
-        // ],
     ],
 
     /*
-    |--------------------------------------------------------------------------
-    | Resetting Passwords
-    |--------------------------------------------------------------------------
-    |
-    | You may specify multiple password reset configurations if you have more
-    | than one user table or model in the application and you want to have
-    | separate password reset settings based on the specific user types.
-    |
-    | The expire time is the number of minutes that each reset token will be
-    | considered valid. This security feature keeps tokens short-lived so
-    | they have less time to be guessed. You may change this as needed.
-    |
+        |--------------------------------------------------------------------------
+        | Resetting Passwords
+        |--------------------------------------------------------------------------
+        |
+        | You may specify multiple password reset configurations if you have more
+        | than one user table or model in the application and you want to have
+        | separate password reset settings based on the specific user types.
+        |
+        | The expire time is the number of minutes that each reset token will be
+        | considered valid. This security feature keeps tokens short-lived so
+        | they have less time to be guessed. You may change this as needed.
+        |
     */
 
     'passwords' => [
@@ -96,14 +91,14 @@ return [
     ],
 
     /*
-    |--------------------------------------------------------------------------
-    | Password Confirmation Timeout
-    |--------------------------------------------------------------------------
-    |
-    | Here you may define the amount of seconds before a password confirmation
-    | times out and the user is prompted to re-enter their password via the
-    | confirmation screen. By default, the timeout lasts for three hours.
-    |
+        |--------------------------------------------------------------------------
+        | Password Confirmation Timeout
+        |--------------------------------------------------------------------------
+        |
+        | Here you may define the amount of seconds before a password confirmation
+        | times out and the user is prompted to re-enter their password via the
+        | confirmation screen. By default, the timeout lasts for three hours.
+        |
     */
 
     'password_timeout' => 10800,

config/broadcasting.php

@@ -3,29 +3,29 @@
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Default Broadcaster
-    |--------------------------------------------------------------------------
-    |
-    | This option controls the default broadcaster that will be used by the
-    | framework when an event needs to be broadcast. You may set this to
-    | any of the connections defined in the "connections" array below.
-    |
-    | Supported: "pusher", "ably", "redis", "log", "null"
-    |
+        |--------------------------------------------------------------------------
+        | Default Broadcaster
+        |--------------------------------------------------------------------------
+        |
+        | This option controls the default broadcaster that will be used by the
+        | framework when an event needs to be broadcast. You may set this to
+        | any of the connections defined in the "connections" array below.
+        |
+        | Supported: "pusher", "ably", "redis", "log", "null"
+        |
     */
 
     'default' => env('BROADCAST_DRIVER', 'null'),
 
     /*
-    |--------------------------------------------------------------------------
-    | Broadcast Connections
-    |--------------------------------------------------------------------------
-    |
-    | Here you may define all of the broadcast connections that will be used
-    | to broadcast events to other systems or over websockets. Samples of
-    | each available type of connection are provided inside this array.
-    |
+        |--------------------------------------------------------------------------
+        | Broadcast Connections
+        |--------------------------------------------------------------------------
+        |
+        | Here you may define all of the broadcast connections that will be used
+        | to broadcast events to other systems or over websockets. Samples of
+        | each available type of connection are provided inside this array.
+        |
     */
 
     'connections' => [

config/cache.php

@@ -5,30 +5,30 @@ use Illuminate\Support\Str;
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Default Cache Store
-    |--------------------------------------------------------------------------
-    |
-    | This option controls the default cache connection that gets used while
-    | using this caching library. This connection is used when another is
-    | not explicitly specified when executing a given caching function.
-    |
+        |--------------------------------------------------------------------------
+        | Default Cache Store
+        |--------------------------------------------------------------------------
+        |
+        | This option controls the default cache connection that gets used while
+        | using this caching library. This connection is used when another is
+        | not explicitly specified when executing a given caching function.
+        |
     */
 
     'default' => env('CACHE_DRIVER', 'file'),
 
     /*
-    |--------------------------------------------------------------------------
-    | Cache Stores
-    |--------------------------------------------------------------------------
-    |
-    | Here you may define all of the cache "stores" for your application as
-    | well as their drivers. You may even define multiple stores for the
-    | same cache driver to group types of items stored in your caches.
-    |
-    | Supported drivers: "apc", "array", "database", "file",
-    |         "memcached", "redis", "dynamodb", "octane", "null"
-    |
+        |--------------------------------------------------------------------------
+        | Cache Stores
+        |--------------------------------------------------------------------------
+        |
+        | Here you may define all of the cache "stores" for your application as
+        | well as their drivers. You may even define multiple stores for the
+        | same cache driver to group types of items stored in your caches.
+        |
+        | Supported drivers: "apc", "array", "database", "file",
+        |         "memcached", "redis", "dynamodb", "octane", "null"
+        |
     */
 
     'stores' => [
@@ -61,9 +61,7 @@ return [
                 env('MEMCACHED_USERNAME'),
                 env('MEMCACHED_PASSWORD'),
             ],
-            'options' => [
-                // Memcached::OPT_CONNECT_TIMEOUT => 2000,
-            ],
+            'options' => [],
             'servers' => [
                 [
                     'host' => env('MEMCACHED_HOST', '127.0.0.1'),
@@ -95,16 +93,16 @@ return [
     ],
 
     /*
-    |--------------------------------------------------------------------------
-    | Cache Key Prefix
-    |--------------------------------------------------------------------------
-    |
-    | When utilizing a RAM based store such as APC or Memcached, there might
-    | be other applications utilizing the same cache. So, we'll specify a
-    | value to get prefixed to all our keys so we can avoid collisions.
-    |
+        |--------------------------------------------------------------------------
+        | Cache Key Prefix
+        |--------------------------------------------------------------------------
+        |
+        | When utilizing a RAM based store such as APC or Memcached, there might
+        | be other applications utilizing the same cache. So, we'll specify a
+        | value to get prefixed to all our keys so we can avoid collisions.
+        |
     */
 
-    'prefix' => env('CACHE_PREFIX', Str::slug(env('APP_NAME', 'laravel'), '_').'_cache'),
+    'prefix' => env('CACHE_PREFIX', Str::slug(env('APP_NAME', 'laravel'), '_') . '_cache'),
 
 ];

config/cors.php

@@ -3,16 +3,16 @@
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Cross-Origin Resource Sharing (CORS) Configuration
-    |--------------------------------------------------------------------------
-    |
-    | Here you may configure your settings for cross-origin resource sharing
-    | or "CORS". This determines what cross-origin operations may execute
-    | in web browsers. You are free to adjust these settings as needed.
-    |
-    | To learn more: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS
-    |
+        |--------------------------------------------------------------------------
+        | Cross-Origin Resource Sharing (CORS) Configuration
+        |--------------------------------------------------------------------------
+        |
+        | Here you may configure your settings for cross-origin resource sharing
+        | or "CORS". This determines what cross-origin operations may execute
+        | in web browsers. You are free to adjust these settings as needed.
+        |
+        | To learn more: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS
+        |
     */
 
     'paths' => ['api/*', 'sanctum/csrf-cookie'],

config/database.php

@@ -5,32 +5,32 @@ use Illuminate\Support\Str;
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Default Database Connection Name
-    |--------------------------------------------------------------------------
-    |
-    | Here you may specify which of the database connections below you wish
-    | to use as your default connection for all database work. Of course
-    | you may use many connections at once using the Database library.
-    |
+        |--------------------------------------------------------------------------
+        | Default Database Connection Name
+        |--------------------------------------------------------------------------
+        |
+        | Here you may specify which of the database connections below you wish
+        | to use as your default connection for all database work. Of course
+        | you may use many connections at once using the Database library.
+        |
     */
 
     'default' => env('DB_CONNECTION', 'mysql'),
 
     /*
-    |--------------------------------------------------------------------------
-    | Database Connections
-    |--------------------------------------------------------------------------
-    |
-    | Here are each of the database connections setup for your application.
-    | Of course, examples of configuring each database platform that is
-    | supported by Laravel is shown below to make development simple.
-    |
-    |
-    | All database work in Laravel is done through the PHP PDO facilities
-    | so make sure you have the driver for your particular database of
-    | choice installed on your machine before you begin development.
-    |
+        |--------------------------------------------------------------------------
+        | Database Connections
+        |--------------------------------------------------------------------------
+        |
+        | Here are each of the database connections setup for your application.
+        | Of course, examples of configuring each database platform that is
+        | supported by Laravel is shown below to make development simple.
+        |
+        |
+        | All database work in Laravel is done through the PHP PDO facilities
+        | so make sure you have the driver for your particular database of
+        | choice installed on your machine before you begin development.
+        |
     */
 
     'connections' => [
@@ -94,27 +94,27 @@ return [
     ],
 
     /*
-    |--------------------------------------------------------------------------
-    | Migration Repository Table
-    |--------------------------------------------------------------------------
-    |
-    | This table keeps track of all the migrations that have already run for
-    | your application. Using this information, we can determine which of
-    | the migrations on disk haven't actually been run in the database.
-    |
+        |--------------------------------------------------------------------------
+        | Migration Repository Table
+        |--------------------------------------------------------------------------
+        |
+        | This table keeps track of all the migrations that have already run for
+        | your application. Using this information, we can determine which of
+        | the migrations on disk haven't actually been run in the database.
+        |
     */
 
     'migrations' => 'migrations',
 
     /*
-    |--------------------------------------------------------------------------
-    | Redis Databases
-    |--------------------------------------------------------------------------
-    |
-    | Redis is an open source, fast, and advanced key-value store that also
-    | provides a richer body of commands than a typical key-value system
-    | such as APC or Memcached. Laravel makes it easy to dig right in.
-    |
+        |--------------------------------------------------------------------------
+        | Redis Databases
+        |--------------------------------------------------------------------------
+        |
+        | Redis is an open source, fast, and advanced key-value store that also
+        | provides a richer body of commands than a typical key-value system
+        | such as APC or Memcached. Laravel makes it easy to dig right in.
+        |
     */
 
     'redis' => [
@@ -123,7 +123,7 @@ return [
 
         'options' => [
             'cluster' => env('REDIS_CLUSTER', 'redis'),
-            'prefix' => env('REDIS_PREFIX', Str::slug(env('APP_NAME', 'laravel'), '_').'_database_'),
+            'prefix' => env('REDIS_PREFIX', Str::slug(env('APP_NAME', 'laravel'), '_') . '_database_'),
         ],
 
         'default' => [

config/exception-handler.php

@@ -0,0 +1,15 @@
+<?php
+
+return [
+    /**
+     * Send mail when app debug is turn off
+     * so you can be warned if an unhandled exception occurs
+     */
+    'enableMaiLog' => !config('app.debug'),
+
+    /**
+     * Put a developper secured mailbox in here
+     * so you can receive email if things go mad
+     */
+    'contactsList' => explode(',', env('MAIL_ERRORS'))
+];

config/filesystems.php

@@ -3,29 +3,29 @@
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Default Filesystem Disk
-    |--------------------------------------------------------------------------
-    |
-    | Here you may specify the default filesystem disk that should be used
-    | by the framework. The "local" disk, as well as a variety of cloud
-    | based disks are available to your application. Just store away!
-    |
+        |--------------------------------------------------------------------------
+        | Default Filesystem Disk
+        |--------------------------------------------------------------------------
+        |
+        | Here you may specify the default filesystem disk that should be used
+        | by the framework. The "local" disk, as well as a variety of cloud
+        | based disks are available to your application. Just store away!
+        |
     */
 
     'default' => env('FILESYSTEM_DRIVER', 'local'),
 
     /*
-    |--------------------------------------------------------------------------
-    | Filesystem Disks
-    |--------------------------------------------------------------------------
-    |
-    | Here you may configure as many filesystem "disks" as you wish, and you
-    | may even configure multiple disks of the same driver. Defaults have
-    | been setup for each driver as an example of the required options.
-    |
-    | Supported Drivers: "local", "ftp", "sftp", "s3"
-    |
+        |--------------------------------------------------------------------------
+        | Filesystem Disks
+        |--------------------------------------------------------------------------
+        |
+        | Here you may configure as many filesystem "disks" as you wish, and you
+        | may even configure multiple disks of the same driver. Defaults have
+        | been setup for each driver as an example of the required options.
+        |
+        | Supported Drivers: "local", "ftp", "sftp", "s3"
+        |
     */
 
     'disks' => [
@@ -38,7 +38,7 @@ return [
         'public' => [
             'driver' => 'local',
             'root' => storage_path('app/public'),
-            'url' => env('APP_URL').'/storage',
+            'url' => env('APP_URL') . '/storage',
             'visibility' => 'public',
         ],
 
@@ -56,14 +56,14 @@ return [
     ],
 
     /*
-    |--------------------------------------------------------------------------
-    | Symbolic Links
-    |--------------------------------------------------------------------------
-    |
-    | Here you may configure the symbolic links that will be created when the
-    | `storage:link` Artisan command is executed. The array keys should be
-    | the locations of the links and the values should be their targets.
-    |
+        |--------------------------------------------------------------------------
+        | Symbolic Links
+        |--------------------------------------------------------------------------
+        |
+        | Here you may configure the symbolic links that will be created when the
+        | `storage:link` Artisan command is executed. The array keys should be
+        | the locations of the links and the values should be their targets.
+        |
     */
 
     'links' => [

config/hashing.php

@@ -3,29 +3,29 @@
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Default Hash Driver
-    |--------------------------------------------------------------------------
-    |
-    | This option controls the default hash driver that will be used to hash
-    | passwords for your application. By default, the bcrypt algorithm is
-    | used; however, you remain free to modify this option if you wish.
-    |
-    | Supported: "bcrypt", "argon", "argon2id"
-    |
+        |--------------------------------------------------------------------------
+        | Default Hash Driver
+        |--------------------------------------------------------------------------
+        |
+        | This option controls the default hash driver that will be used to hash
+        | passwords for your application. By default, the bcrypt algorithm is
+        | used; however, you remain free to modify this option if you wish.
+        |
+        | Supported: "bcrypt", "argon", "argon2id"
+        |
     */
 
     'driver' => 'bcrypt',
 
     /*
-    |--------------------------------------------------------------------------
-    | Bcrypt Options
-    |--------------------------------------------------------------------------
-    |
-    | Here you may specify the configuration options that should be used when
-    | passwords are hashed using the Bcrypt algorithm. This will allow you
-    | to control the amount of time it takes to hash the given password.
-    |
+        |--------------------------------------------------------------------------
+        | Bcrypt Options
+        |--------------------------------------------------------------------------
+        |
+        | Here you may specify the configuration options that should be used when
+        | passwords are hashed using the Bcrypt algorithm. This will allow you
+        | to control the amount of time it takes to hash the given password.
+        |
     */
 
     'bcrypt' => [
@@ -33,14 +33,14 @@ return [
     ],
 
     /*
-    |--------------------------------------------------------------------------
-    | Argon Options
-    |--------------------------------------------------------------------------
-    |
-    | Here you may specify the configuration options that should be used when
-    | passwords are hashed using the Argon algorithm. These will allow you
-    | to control the amount of time it takes to hash the given password.
-    |
+        |--------------------------------------------------------------------------
+        | Argon Options
+        |--------------------------------------------------------------------------
+        |
+        | Here you may specify the configuration options that should be used when
+        | passwords are hashed using the Argon algorithm. These will allow you
+        | to control the amount of time it takes to hash the given password.
+        |
     */
 
     'argon' => [

config/logging.php

@@ -7,44 +7,44 @@ use Monolog\Handler\SyslogUdpHandler;
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Default Log Channel
-    |--------------------------------------------------------------------------
-    |
-    | This option defines the default log channel that gets used when writing
-    | messages to the logs. The name specified in this option should match
-    | one of the channels defined in the "channels" configuration array.
-    |
+        |--------------------------------------------------------------------------
+        | Default Log Channel
+        |--------------------------------------------------------------------------
+        |
+        | This option defines the default log channel that gets used when writing
+        | messages to the logs. The name specified in this option should match
+        | one of the channels defined in the "channels" configuration array.
+        |
     */
 
     'default' => env('LOG_CHANNEL', 'stack'),
 
     /*
-    |--------------------------------------------------------------------------
-    | Deprecations Log Channel
-    |--------------------------------------------------------------------------
-    |
-    | This option controls the log channel that should be used to log warnings
-    | regarding deprecated PHP and library features. This allows you to get
-    | your application ready for upcoming major versions of dependencies.
-    |
+        |--------------------------------------------------------------------------
+        | Deprecations Log Channel
+        |--------------------------------------------------------------------------
+        |
+        | This option controls the log channel that should be used to log warnings
+        | regarding deprecated PHP and library features. This allows you to get
+        | your application ready for upcoming major versions of dependencies.
+        |
     */
 
     'deprecations' => env('LOG_DEPRECATIONS_CHANNEL', 'null'),
 
     /*
-    |--------------------------------------------------------------------------
-    | Log Channels
-    |--------------------------------------------------------------------------
-    |
-    | Here you may configure the log channels for your application. Out of
-    | the box, Laravel uses the Monolog PHP logging library. This gives
-    | you a variety of powerful log handlers / formatters to utilize.
-    |
-    | Available Drivers: "single", "daily", "slack", "syslog",
-    |                    "errorlog", "monolog",
-    |                    "custom", "stack"
-    |
+        |--------------------------------------------------------------------------
+        | Log Channels
+        |--------------------------------------------------------------------------
+        |
+        | Here you may configure the log channels for your application. Out of
+        | the box, Laravel uses the Monolog PHP logging library. This gives
+        | you a variety of powerful log handlers / formatters to utilize.
+        |
+        | Available Drivers: "single", "daily", "slack", "syslog",
+        |                    "errorlog", "monolog",
+        |                    "custom", "stack"
+        |
     */
 
     'channels' => [

config/mail.php

@@ -3,34 +3,34 @@
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Default Mailer
-    |--------------------------------------------------------------------------
-    |
-    | This option controls the default mailer that is used to send any email
-    | messages sent by your application. Alternative mailers may be setup
-    | and used as needed; however, this mailer will be used by default.
-    |
+        |--------------------------------------------------------------------------
+        | Default Mailer
+        |--------------------------------------------------------------------------
+        |
+        | This option controls the default mailer that is used to send any email
+        | messages sent by your application. Alternative mailers may be setup
+        | and used as needed; however, this mailer will be used by default.
+        |
     */
 
     'default' => env('MAIL_MAILER', 'smtp'),
 
     /*
-    |--------------------------------------------------------------------------
-    | Mailer Configurations
-    |--------------------------------------------------------------------------
-    |
-    | Here you may configure all of the mailers used by your application plus
-    | their respective settings. Several examples have been configured for
-    | you and you are free to add your own as your application requires.
-    |
-    | Laravel supports a variety of mail "transport" drivers to be used while
-    | sending an e-mail. You will specify which one you are using for your
-    | mailers below. You are free to add additional mailers as required.
-    |
-    | Supported: "smtp", "sendmail", "mailgun", "ses",
-    |            "postmark", "log", "array", "failover"
-    |
+        |--------------------------------------------------------------------------
+        | Mailer Configurations
+        |--------------------------------------------------------------------------
+        |
+        | Here you may configure all of the mailers used by your application plus
+        | their respective settings. Several examples have been configured for
+        | you and you are free to add your own as your application requires.
+        |
+        | Laravel supports a variety of mail "transport" drivers to be used while
+        | sending an e-mail. You will specify which one you are using for your
+        | mailers below. You are free to add additional mailers as required.
+        |
+        | Supported: "smtp", "sendmail", "mailgun", "ses",
+        |            "postmark", "log", "array", "failover"
+        |
     */
 
     'mailers' => [
@@ -81,14 +81,14 @@ return [
     ],
 
     /*
-    |--------------------------------------------------------------------------
-    | Global "From" Address
-    |--------------------------------------------------------------------------
-    |
-    | You may wish for all e-mails sent by your application to be sent from
-    | the same address. Here, you may specify a name and address that is
-    | used globally for all e-mails that are sent by your application.
-    |
+        |--------------------------------------------------------------------------
+        | Global "From" Address
+        |--------------------------------------------------------------------------
+        |
+        | You may wish for all e-mails sent by your application to be sent from
+        | the same address. Here, you may specify a name and address that is
+        | used globally for all e-mails that are sent by your application.
+        |
     */
 
     'from' => [
@@ -97,14 +97,14 @@ return [
     ],
 
     /*
-    |--------------------------------------------------------------------------
-    | Markdown Mail Settings
-    |--------------------------------------------------------------------------
-    |
-    | If you are using Markdown based email rendering, you may configure your
-    | theme and component paths here, allowing you to customize the design
-    | of the emails. Or, you may simply stick with the Laravel defaults!
-    |
+        |--------------------------------------------------------------------------
+        | Markdown Mail Settings
+        |--------------------------------------------------------------------------
+        |
+        | If you are using Markdown based email rendering, you may configure your
+        | theme and component paths here, allowing you to customize the design
+        | of the emails. Or, you may simply stick with the Laravel defaults!
+        |
     */
 
     'markdown' => [

config/purifier.php

@@ -0,0 +1,119 @@
+<?php
+
+/**
+ * Ok, glad you are here
+ * first we get a config instance, and set the settings
+ * $config = HTMLPurifier_Config::createDefault();
+ * $config->set('Core.Encoding', $this->config->get('purifier.encoding'));
+ * $config->set('Cache.SerializerPath', $this->config->get('purifier.cachePath'));
+ * if ( ! $this->config->get('purifier.finalize')) {
+ *     $config->autoFinalize = false;
+ * }
+ * $config->load [$this->getConfig());
+ *
+ * You must NOT delete the default settings
+ * anything in settings should be compacted with params that needed to instance HTMLPurifier_Config.
+ *
+ * @link http://htmlpurifier.org/live/configdoc/plain.html
+ */
+
+// phpcs:disable Generic.Files.LineLength.TooLong
+return [
+    'encoding'      => 'UTF-8',
+    'finalize'      => true,
+    'cachePath'     => storage_path('app/purifier'),
+    'cacheFileMode' => 0755,
+    'settings'      => [
+        'default' => [
+            'HTML.SafeIframe'          => true,
+            // * For iframes
+            'URI.SafeIframeRegexp'     => "%^(http://|https://|//)(vimeo.com)%",
+            'HTML.Doctype'             => 'HTML 4.01 Transitional',
+            'HTML.Allowed'             => 'h1[style],h2[style],h3[style],h4[style],h5[style],h6[style],figure[class|style],oembed[url],div[style],b,strong,i,em,u,a[href|title|target|rel],ul[style],ol[style],dl[style],li,p[style],br,span[style|class],img[width|height|alt|src|style|class|title],iframe[src|width|height|class|frameborder|style],table[style|align|border|cellspacing|cellpadding|width],thead,tbody,th[colspan|align|valign|style],tr[align|valign|style],td[style|colspan|rowspan|scope|align|valign],hr,dl,dt',
+            'CSS.AllowedProperties'    => 'font,font-size,font-weight,font-style,font-family,text-decoration,padding-left,color,background-color,text-align,list-style-type,float,width,height,vertical-align,border-color',
+            'AutoFormat.AutoParagraph' => false,
+            'AutoFormat.RemoveEmpty'   => false,
+            'AutoFormat.RemoveEmpty.RemoveNbsp' => false,
+        ],
+        "youtube" => [
+            "HTML.SafeIframe"      => 'true',
+            "URI.SafeIframeRegexp" => "%^(http://|https://|//)(www.youtube.com/embed/|player.vimeo.com/video/|vimeo.com/)%",
+        ],
+        'custom_definition' => [
+            'id'  => 'html5-definitions',
+            'rev' => 1,
+            'debug' => true,
+            'elements' => [
+                // * http://developers.whatwg.org/sections.html
+                ['section', 'Block', 'Flow', 'Common'],
+                ['nav',     'Block', 'Flow', 'Common'],
+                ['article', 'Block', 'Flow', 'Common'],
+                ['aside',   'Block', 'Flow', 'Common'],
+                ['header',  'Block', 'Flow', 'Common'],
+                ['footer',  'Block', 'Flow', 'Common'],
+
+                // * Content model actually excludes several tags, not modelled here
+                ['address', 'Block', 'Flow', 'Common'],
+                ['hgroup', 'Block', 'Required: h1 | h2 | h3 | h4 | h5 | h6', 'Common'],
+
+                // * http://developers.whatwg.org/grouping-content.html
+                ['figure', 'Block', 'Optional: (figcaption, Flow) | (Flow, figcaption) | Flow', 'Common'],
+                ['figcaption', 'Inline', 'Flow', 'Common'],
+                ['oembed', 'Inline', 'Flow', 'Common'],
+
+                // * http://developers.whatwg.org/the-video-element.html#the-video-element
+                ['video', 'Block', 'Optional: (source, Flow) | (Flow, source) | Flow', 'Common', [
+                    'src' => 'URI',
+                    'type' => 'Text',
+                    'width' => 'Length',
+                    'height' => 'Length',
+                    'poster' => 'URI',
+                    'preload' => 'Enum#auto,metadata,none',
+                    'controls' => 'Bool',
+                ]],
+                ['source', 'Block', 'Flow', 'Common', [
+                    'src' => 'URI',
+                    'type' => 'Text',
+                ]],
+
+                // * http://developers.whatwg.org/text-level-semantics.html
+                ['s',    'Inline', 'Inline', 'Common'],
+                ['var',  'Inline', 'Inline', 'Common'],
+                ['sub',  'Inline', 'Inline', 'Common'],
+                ['sup',  'Inline', 'Inline', 'Common'],
+                ['mark', 'Inline', 'Inline', 'Common'],
+                ['wbr',  'Inline', 'Empty', 'Core'],
+
+                // * http://developers.whatwg.org/edits.html
+                ['ins', 'Block', 'Flow', 'Common', ['cite' => 'URI', 'datetime' => 'CDATA']],
+                ['del', 'Block', 'Flow', 'Common', ['cite' => 'URI', 'datetime' => 'CDATA']],
+            ],
+            'attributes' => [
+                ['iframe', 'allowfullscreen', 'Bool'],
+                ['table', 'height', 'Text'],
+                ['td', 'border', 'Text'],
+                ['th', 'border', 'Text'],
+                ['tr', 'width', 'Text'],
+                ['tr', 'height', 'Text'],
+                ['tr', 'border', 'Text'],
+                ['figure', 'class', 'Text'],
+                ['figure', 'style', 'Text'],
+                ['oembed', 'url', 'Text'],
+                ['span', 'style', 'Text'],
+                ['img', 'style', 'Text'],
+            ],
+        ],
+        'custom_attributes' => [
+            ['a', 'target', 'Enum#_blank,_self,_target,_top'],
+            ['ol', 'style', 'Text'],
+            ['figure', 'style', 'Text'],
+            ['img', 'style', 'Text'],
+            ['span', 'style', 'Text'],
+            ['oembed', 'url', 'Text'],
+        ],
+        'custom_elements' => [
+            ['u', 'Inline', 'Inline', 'Common'],
+            ['oembed', 'Inline', 'Inline', 'Common'],
+        ],
+    ],
+];

config/queue.php

@@ -3,29 +3,29 @@
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Default Queue Connection Name
-    |--------------------------------------------------------------------------
-    |
-    | Laravel's queue API supports an assortment of back-ends via a single
-    | API, giving you convenient access to each back-end using the same
-    | syntax for every one. Here you may define a default connection.
-    |
+        |--------------------------------------------------------------------------
+        | Default Queue Connection Name
+        |--------------------------------------------------------------------------
+        |
+        | Laravel's queue API supports an assortment of back-ends via a single
+        | API, giving you convenient access to each back-end using the same
+        | syntax for every one. Here you may define a default connection.
+        |
     */
 
     'default' => env('QUEUE_CONNECTION', 'sync'),
 
     /*
-    |--------------------------------------------------------------------------
-    | Queue Connections
-    |--------------------------------------------------------------------------
-    |
-    | Here you may configure the connection information for each server that
-    | is used by your application. A default configuration has been added
-    | for each back-end shipped with Laravel. You are free to add more.
-    |
-    | Drivers: "sync", "database", "beanstalkd", "sqs", "redis", "null"
-    |
+        |--------------------------------------------------------------------------
+        | Queue Connections
+        |--------------------------------------------------------------------------
+        |
+        | Here you may configure the connection information for each server that
+        | is used by your application. A default configuration has been added
+        | for each back-end shipped with Laravel. You are free to add more.
+        |
+        | Drivers: "sync", "database", "beanstalkd", "sqs", "redis", "null"
+        |
     */
 
     'connections' => [
@@ -74,14 +74,14 @@ return [
     ],
 
     /*
-    |--------------------------------------------------------------------------
-    | Failed Queue Jobs
-    |--------------------------------------------------------------------------
-    |
-    | These options configure the behavior of failed queue job logging so you
-    | can control which database and table are used to store the jobs that
-    | have failed. You may change them to any database / table you wish.
-    |
+        |--------------------------------------------------------------------------
+        | Failed Queue Jobs
+        |--------------------------------------------------------------------------
+        |
+        | These options configure the behavior of failed queue job logging so you
+        | can control which database and table are used to store the jobs that
+        | have failed. You may change them to any database / table you wish.
+        |
     */
 
     'failed' => [

config/recaptcha.php

@@ -0,0 +1,6 @@
+<?php
+
+return [
+    'public' => env('RECAPTCHA_3_PUB_KEY'),
+    'private' => env('RECAPTCHA_3_PRIV_KEY')
+];

config/sanctum.php

@@ -3,58 +3,58 @@
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Stateful Domains
-    |--------------------------------------------------------------------------
-    |
-    | Requests from the following domains / hosts will receive stateful API
-    | authentication cookies. Typically, these should include your local
-    | and production domains which access your API via a frontend SPA.
-    |
+        |--------------------------------------------------------------------------
+        | Stateful Domains
+        |--------------------------------------------------------------------------
+        |
+        | Requests from the following domains / hosts will receive stateful API
+        | authentication cookies. Typically, these should include your local
+        | and production domains which access your API via a frontend SPA.
+        |
     */
 
     'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', sprintf(
         '%s%s',
         'localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1',
-        env('APP_URL') ? ','.parse_url(env('APP_URL'), PHP_URL_HOST) : ''
+        env('APP_URL') ? ',' . parse_url(env('APP_URL'), PHP_URL_HOST) : ''
     ))),
 
     /*
-    |--------------------------------------------------------------------------
-    | Sanctum Guards
-    |--------------------------------------------------------------------------
-    |
-    | This array contains the authentication guards that will be checked when
-    | Sanctum is trying to authenticate a request. If none of these guards
-    | are able to authenticate the request, Sanctum will use the bearer
-    | token that's present on an incoming request for authentication.
-    |
+        |--------------------------------------------------------------------------
+        | Sanctum Guards
+        |--------------------------------------------------------------------------
+        |
+        | This array contains the authentication guards that will be checked when
+        | Sanctum is trying to authenticate a request. If none of these guards
+        | are able to authenticate the request, Sanctum will use the bearer
+        | token that's present on an incoming request for authentication.
+        |
     */
 
     'guard' => ['web'],
 
     /*
-    |--------------------------------------------------------------------------
-    | Expiration Minutes
-    |--------------------------------------------------------------------------
-    |
-    | This value controls the number of minutes until an issued token will be
-    | considered expired. If this value is null, personal access tokens do
-    | not expire. This won't tweak the lifetime of first-party sessions.
-    |
+        |--------------------------------------------------------------------------
+        | Expiration Minutes
+        |--------------------------------------------------------------------------
+        |
+        | This value controls the number of minutes until an issued token will be
+        | considered expired. If this value is null, personal access tokens do
+        | not expire. This won't tweak the lifetime of first-party sessions.
+        |
     */
 
     'expiration' => null,
 
     /*
-    |--------------------------------------------------------------------------
-    | Sanctum Middleware
-    |--------------------------------------------------------------------------
-    |
-    | When authenticating your first-party SPA with Sanctum you may need to
-    | customize some of the middleware Sanctum uses while processing the
-    | request. You may change the middleware listed below as required.
-    |
+        |--------------------------------------------------------------------------
+        | Sanctum Middleware
+        |--------------------------------------------------------------------------
+        |
+        | When authenticating your first-party SPA with Sanctum you may need to
+        | customize some of the middleware Sanctum uses while processing the
+        | request. You may change the middleware listed below as required.
+        |
     */
 
     'middleware' => [

config/services.php

@@ -3,15 +3,15 @@
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Third Party Services
-    |--------------------------------------------------------------------------
-    |
-    | This file is for storing the credentials for third party services such
-    | as Mailgun, Postmark, AWS and more. This file provides the de facto
-    | location for this type of information, allowing packages to have
-    | a conventional file to locate the various service credentials.
-    |
+        |--------------------------------------------------------------------------
+        | Third Party Services
+        |--------------------------------------------------------------------------
+        |
+        | This file is for storing the credentials for third party services such
+        | as Mailgun, Postmark, AWS and more. This file provides the de facto
+        | location for this type of information, allowing packages to have
+        | a conventional file to locate the various service credentials.
+        |
     */
 
     'mailgun' => [

config/session.php

@@ -5,30 +5,30 @@ use Illuminate\Support\Str;
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | Default Session Driver
-    |--------------------------------------------------------------------------
-    |
-    | This option controls the default session "driver" that will be used on
-    | requests. By default, we will use the lightweight native driver but
-    | you may specify any of the other wonderful drivers provided here.
-    |
-    | Supported: "file", "cookie", "database", "apc",
-    |            "memcached", "redis", "dynamodb", "array"
-    |
+        |--------------------------------------------------------------------------
+        | Default Session Driver
+        |--------------------------------------------------------------------------
+        |
+        | This option controls the default session "driver" that will be used on
+        | requests. By default, we will use the lightweight native driver but
+        | you may specify any of the other wonderful drivers provided here.
+        |
+        | Supported: "file", "cookie", "database", "apc",
+        |            "memcached", "redis", "dynamodb", "array"
+        |
     */
 
     'driver' => env('SESSION_DRIVER', 'file'),
 
     /*
-    |--------------------------------------------------------------------------
-    | Session Lifetime
-    |--------------------------------------------------------------------------
-    |
-    | Here you may specify the number of minutes that you wish the session
-    | to be allowed to remain idle before it expires. If you want them
-    | to immediately expire on the browser closing, set that option.
-    |
+        |--------------------------------------------------------------------------
+        | Session Lifetime
+        |--------------------------------------------------------------------------
+        |
+        | Here you may specify the number of minutes that you wish the session
+        | to be allowed to remain idle before it expires. If you want them
+        | to immediately expire on the browser closing, set that option.
+        |
     */
 
     'lifetime' => env('SESSION_LIFETIME', 120),
@@ -36,164 +36,164 @@ return [
     'expire_on_close' => false,
 
     /*
-    |--------------------------------------------------------------------------
-    | Session Encryption
-    |--------------------------------------------------------------------------
-    |
-    | This option allows you to easily specify that all of your session data
-    | should be encrypted before it is stored. All encryption will be run
-    | automatically by Laravel and you can use the Session like normal.
-    |
+        |--------------------------------------------------------------------------
+        | Session Encryption
+        |--------------------------------------------------------------------------
+        |
+        | This option allows you to easily specify that all of your session data
+        | should be encrypted before it is stored. All encryption will be run
+        | automatically by Laravel and you can use the Session like normal.
+        |
     */
 
     'encrypt' => false,
 
     /*
-    |--------------------------------------------------------------------------
-    | Session File Location
-    |--------------------------------------------------------------------------
-    |
-    | When using the native session driver, we need a location where session
-    | files may be stored. A default has been set for you but a different
-    | location may be specified. This is only needed for file sessions.
-    |
+        |--------------------------------------------------------------------------
+        | Session File Location
+        |--------------------------------------------------------------------------
+        |
+        | When using the native session driver, we need a location where session
+        | files may be stored. A default has been set for you but a different
+        | location may be specified. This is only needed for file sessions.
+        |
     */
 
     'files' => storage_path('framework/sessions'),
 
     /*
-    |--------------------------------------------------------------------------
-    | Session Database Connection
-    |--------------------------------------------------------------------------
-    |
-    | When using the "database" or "redis" session drivers, you may specify a
-    | connection that should be used to manage these sessions. This should
-    | correspond to a connection in your database configuration options.
-    |
+        |--------------------------------------------------------------------------
+        | Session Database Connection
+        |--------------------------------------------------------------------------
+        |
+        | When using the "database" or "redis" session drivers, you may specify a
+        | connection that should be used to manage these sessions. This should
+        | correspond to a connection in your database configuration options.
+        |
     */
 
     'connection' => env('SESSION_CONNECTION', null),
 
     /*
-    |--------------------------------------------------------------------------
-    | Session Database Table
-    |--------------------------------------------------------------------------
-    |
-    | When using the "database" session driver, you may specify the table we
-    | should use to manage the sessions. Of course, a sensible default is
-    | provided for you; however, you are free to change this as needed.
-    |
+        |--------------------------------------------------------------------------
+        | Session Database Table
+        |--------------------------------------------------------------------------
+        |
+        | When using the "database" session driver, you may specify the table we
+        | should use to manage the sessions. Of course, a sensible default is
+        | provided for you; however, you are free to change this as needed.
+        |
     */
 
     'table' => 'sessions',
 
     /*
-    |--------------------------------------------------------------------------
-    | Session Cache Store
-    |--------------------------------------------------------------------------
-    |
-    | While using one of the framework's cache driven session backends you may
-    | list a cache store that should be used for these sessions. This value
-    | must match with one of the application's configured cache "stores".
-    |
-    | Affects: "apc", "dynamodb", "memcached", "redis"
-    |
+        |--------------------------------------------------------------------------
+        | Session Cache Store
+        |--------------------------------------------------------------------------
+        |
+        | While using one of the framework's cache driven session backends you may
+        | list a cache store that should be used for these sessions. This value
+        | must match with one of the application's configured cache "stores".
+        |
+        | Affects: "apc", "dynamodb", "memcached", "redis"
+        |
     */
 
     'store' => env('SESSION_STORE', null),
 
     /*
-    |--------------------------------------------------------------------------
-    | Session Sweeping Lottery
-    |--------------------------------------------------------------------------
-    |
-    | Some session drivers must manually sweep their storage location to get
-    | rid of old sessions from storage. Here are the chances that it will
-    | happen on a given request. By default, the odds are 2 out of 100.
-    |
+        |--------------------------------------------------------------------------
+        | Session Sweeping Lottery
+        |--------------------------------------------------------------------------
+        |
+        | Some session drivers must manually sweep their storage location to get
+        | rid of old sessions from storage. Here are the chances that it will
+        | happen on a given request. By default, the odds are 2 out of 100.
+        |
     */
 
     'lottery' => [2, 100],
 
     /*
-    |--------------------------------------------------------------------------
-    | Session Cookie Name
-    |--------------------------------------------------------------------------
-    |
-    | Here you may change the name of the cookie used to identify a session
-    | instance by ID. The name specified here will get used every time a
-    | new session cookie is created by the framework for every driver.
-    |
+        |--------------------------------------------------------------------------
+        | Session Cookie Name
+        |--------------------------------------------------------------------------
+        |
+        | Here you may change the name of the cookie used to identify a session
+        | instance by ID. The name specified here will get used every time a
+        | new session cookie is created by the framework for every driver.
+        |
     */
 
     'cookie' => env(
         'SESSION_COOKIE',
-        Str::slug(env('APP_NAME', 'laravel'), '_').'_session'
+        Str::slug(env('APP_NAME', 'laravel'), '_') . '_session'
     ),
 
     /*
-    |--------------------------------------------------------------------------
-    | Session Cookie Path
-    |--------------------------------------------------------------------------
-    |
-    | The session cookie path determines the path for which the cookie will
-    | be regarded as available. Typically, this will be the root path of
-    | your application but you are free to change this when necessary.
-    |
+        |--------------------------------------------------------------------------
+        | Session Cookie Path
+        |--------------------------------------------------------------------------
+        |
+        | The session cookie path determines the path for which the cookie will
+        | be regarded as available. Typically, this will be the root path of
+        | your application but you are free to change this when necessary.
+        |
     */
 
     'path' => '/',
 
     /*
-    |--------------------------------------------------------------------------
-    | Session Cookie Domain
-    |--------------------------------------------------------------------------
-    |
-    | Here you may change the domain of the cookie used to identify a session
-    | in your application. This will determine which domains the cookie is
-    | available to in your application. A sensible default has been set.
-    |
+        |--------------------------------------------------------------------------
+        | Session Cookie Domain
+        |--------------------------------------------------------------------------
+        |
+        | Here you may change the domain of the cookie used to identify a session
+        | in your application. This will determine which domains the cookie is
+        | available to in your application. A sensible default has been set.
+        |
     */
 
     'domain' => env('SESSION_DOMAIN', null),
 
     /*
-    |--------------------------------------------------------------------------
-    | HTTPS Only Cookies
-    |--------------------------------------------------------------------------
-    |
-    | By setting this option to true, session cookies will only be sent back
-    | to the server if the browser has a HTTPS connection. This will keep
-    | the cookie from being sent to you when it can't be done securely.
-    |
+        |--------------------------------------------------------------------------
+        | HTTPS Only Cookies
+        |--------------------------------------------------------------------------
+        |
+        | By setting this option to true, session cookies will only be sent back
+        | to the server if the browser has a HTTPS connection. This will keep
+        | the cookie from being sent to you when it can't be done securely.
+        |
     */
 
     'secure' => env('SESSION_SECURE_COOKIE'),
 
     /*
-    |--------------------------------------------------------------------------
-    | HTTP Access Only
-    |--------------------------------------------------------------------------
-    |
-    | Setting this value to true will prevent JavaScript from accessing the
-    | value of the cookie and the cookie will only be accessible through
-    | the HTTP protocol. You are free to modify this option if needed.
-    |
+        |--------------------------------------------------------------------------
+        | HTTP Access Only
+        |--------------------------------------------------------------------------
+        |
+        | Setting this value to true will prevent JavaScript from accessing the
+        | value of the cookie and the cookie will only be accessible through
+        | the HTTP protocol. You are free to modify this option if needed.
+        |
     */
 
     'http_only' => true,
 
     /*
-    |--------------------------------------------------------------------------
-    | Same-Site Cookies
-    |--------------------------------------------------------------------------
-    |
-    | This option determines how your cookies behave when cross-site requests
-    | take place, and can be used to mitigate CSRF attacks. By default, we
-    | will set this value to "lax" since this is a secure default value.
-    |
-    | Supported: "lax", "strict", "none", null
-    |
+        |--------------------------------------------------------------------------
+        | Same-Site Cookies
+        |--------------------------------------------------------------------------
+        |
+        | This option determines how your cookies behave when cross-site requests
+        | take place, and can be used to mitigate CSRF attacks. By default, we
+        | will set this value to "lax" since this is a secure default value.
+        |
+        | Supported: "lax", "strict", "none", null
+        |
     */
 
     'same_site' => 'lax',

config/view.php

@@ -3,14 +3,14 @@
 return [
 
     /*
-    |--------------------------------------------------------------------------
-    | View Storage Paths
-    |--------------------------------------------------------------------------
-    |
-    | Most templating systems load templates from disk. Here you may specify
-    | an array of paths that should be checked for your views. Of course
-    | the usual Laravel view path has already been registered for you.
-    |
+        |--------------------------------------------------------------------------
+        | View Storage Paths
+        |--------------------------------------------------------------------------
+        |
+        | Most templating systems load templates from disk. Here you may specify
+        | an array of paths that should be checked for your views. Of course
+        | the usual Laravel view path has already been registered for you.
+        |
     */
 
     'paths' => [
@@ -18,14 +18,14 @@ return [
     ],
 
     /*
-    |--------------------------------------------------------------------------
-    | Compiled View Path
-    |--------------------------------------------------------------------------
-    |
-    | This option determines where all the compiled Blade templates will be
-    | stored for your application. Typically, this is within the storage
-    | directory. However, as usual, you are free to change this value.
-    |
+        |--------------------------------------------------------------------------
+        | Compiled View Path
+        |--------------------------------------------------------------------------
+        |
+        | This option determines where all the compiled Blade templates will be
+        | stored for your application. Typically, this is within the storage
+        | directory. However, as usual, you are free to change this value.
+        |
     */
 
     'compiled' => env(

database/factories/UserFactory.php

@@ -18,7 +18,8 @@ class UserFactory extends Factory
             'name' => $this->faker->name(),
             'email' => $this->faker->unique()->safeEmail(),
             'email_verified_at' => now(),
-            'password' => '$2y$10$92IXUNpkjO0rOQ5byMi.Ye4oKoEa3Ro9llC/.og/at2.uheWG/igi', // password
+            // * password
+            'password' => '$2y$10$92IXUNpkjO0rOQ5byMi.Ye4oKoEa3Ro9llC/.og/at2.uheWG/igi',
             'remember_token' => Str::random(10),
         ];
     }
@@ -30,6 +31,7 @@ class UserFactory extends Factory
      */
     public function unverified()
     {
+        // phpcs:ignore Generic.CodeAnalysis.UnusedFunctionParameter.FoundInExtendedClass
         return $this->state(function (array $attributes) {
             return [
                 'email_verified_at' => null,

database/migrations/2014_10_12_000000_create_users_table.php

@@ -20,6 +20,7 @@ class CreateUsersTable extends Migration
             $table->timestamp('email_verified_at')->nullable();
             $table->string('password');
             $table->rememberToken();
+            $table->date('last_connection')->nullable();
             $table->timestamps();
         });
     }

database/migrations/2019_12_14_000001_create_personal_access_tokens_table.php

@@ -1,36 +0,0 @@
-<?php
-
-use Illuminate\Database\Migrations\Migration;
-use Illuminate\Database\Schema\Blueprint;
-use Illuminate\Support\Facades\Schema;
-
-class CreatePersonalAccessTokensTable extends Migration
-{
-    /**
-     * Run the migrations.
-     *
-     * @return void
-     */
-    public function up()
-    {
-        Schema::create('personal_access_tokens', function (Blueprint $table) {
-            $table->id();
-            $table->morphs('tokenable');
-            $table->string('name');
-            $table->string('token', 64)->unique();
-            $table->text('abilities')->nullable();
-            $table->timestamp('last_used_at')->nullable();
-            $table->timestamps();
-        });
-    }
-
-    /**
-     * Reverse the migrations.
-     *
-     * @return void
-     */
-    public function down()
-    {
-        Schema::dropIfExists('personal_access_tokens');
-    }
-}

jsconfig.json

@@ -0,0 +1,5 @@
+  {
+    "include": [
+      "./resources/js/**/*"
+    ]
+  }

package.json

@@ -10,9 +10,23 @@
         "production": "mix --production"
     },
     "devDependencies": {
+        "@fortawesome/fontawesome-free": "^6.1.1",
+        "@popperjs/core": "^2.11.5",
         "axios": "^0.21",
+        "bootstrap": "^5.1.3",
+        "clean-webpack-plugin": "^4.0.0",
         "laravel-mix": "^6.0.6",
+        "laravel-mix-clean": "^0.1.0",
+        "laravel-mix-polyfill": "^3.0.1",
         "lodash": "^4.17.19",
-        "postcss": "^8.1.14"
+        "resolve-url-loader": "^5.0.0",
+        "sass": "^1.52.1",
+        "sass-loader": "^12.6.0",
+        "sweetalert2": "^11.4.17",
+        "vue": "^3.2.36",
+        "vue-loader": "^16.8.3"
+    },
+    "dependencies": {
+        "autoprefixer": "10.4.5"
     }
 }

phpcs.xml

@@ -0,0 +1,129 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<ruleset name="LDC Laravel"
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vendor/squizlabs/php_codesniffer/phpcs.xsd">
+    <description>Created with the PHP Coding Standard Generator. http://edorian.github.com/php-coding-standard-generator/</description>
+    <arg name="colors" />
+    <arg name="extensions" value="php" />
+    <file>app/</file>
+    <file>config/</file>
+    <file>database/factories</file>
+    <file>routes/</file>
+    <file>tests/</file>
+    <rule ref="PSR1" />
+    <rule ref="PSR12" />
+
+    <rule ref="Generic.Classes.DuplicateClassName"/>
+    <rule ref="Generic.CodeAnalysis.EmptyStatement"/>
+    <rule ref="Generic.CodeAnalysis.ForLoopShouldBeWhileLoop"/>
+    <rule ref="Generic.CodeAnalysis.ForLoopWithTestFunctionCall"/>
+    <rule ref="Generic.CodeAnalysis.JumbledIncrementer"/>
+    <rule ref="Generic.CodeAnalysis.UnconditionalIfStatement"/>
+    <rule ref="Generic.CodeAnalysis.UnnecessaryFinalModifier"/>
+    <rule ref="Generic.CodeAnalysis.UnusedFunctionParameter"/>
+    <rule ref="Generic.CodeAnalysis.UselessOverridingMethod"/>
+    <rule ref="Generic.Commenting.Todo"/>
+    <rule ref="Generic.Commenting.Fixme"/>
+    <rule ref="Generic.ControlStructures.InlineControlStructure"/>
+    <rule ref="Generic.Files.ByteOrderMark"/>
+    <rule ref="Generic.Files.LineEndings"/>
+    <rule ref="Generic.Files.LineLength"/>
+    <rule ref="Generic.Formatting.DisallowMultipleStatements"/>
+    <rule ref="Generic.Formatting.MultipleStatementAlignment"/>
+    <rule ref="Generic.Formatting.NoSpaceAfterCast"/>
+    <rule ref="Generic.Functions.CallTimePassByReference"/>
+    <rule ref="Generic.Functions.FunctionCallArgumentSpacing"/>
+    <rule ref="Generic.Metrics.CyclomaticComplexity"/>
+    <rule ref="Generic.Metrics.NestingLevel"/>
+    <rule ref="Generic.NamingConventions.ConstructorName"/>
+    <rule ref="Generic.NamingConventions.UpperCaseConstantName"/>
+    <rule ref="Generic.NamingConventions.CamelCapsFunctionName"/>
+    <rule ref="Generic.PHP.DeprecatedFunctions"/>
+    <rule ref="Generic.PHP.DisallowShortOpenTag"/>
+    <rule ref="Generic.PHP.ForbiddenFunctions"/>
+    <rule ref="Generic.PHP.NoSilencedErrors"/>
+    <rule ref="Generic.Strings.UnnecessaryStringConcat"/>
+    <rule ref="Generic.WhiteSpace.DisallowTabIndent"/>
+    <rule ref="Generic.WhiteSpace.ScopeIndent"/>
+    <rule ref="MySource.PHP.EvalObjectFactory"/>
+    <rule ref="MySource.PHP.GetRequestData"/>
+    <rule ref="MySource.PHP.AjaxNullComparison"/>
+    <rule ref="PEAR.Classes.ClassDeclaration"/>
+    <rule ref="PEAR.Commenting.InlineComment"/>
+    <rule ref="PSR1.Classes.ClassDeclaration"/>
+    <rule ref="PSR1.Files.SideEffects"/>
+    <rule ref="PSR2.Classes.ClassDeclaration"/>
+    <rule ref="PSR2.Classes.PropertyDeclaration"/>
+    <rule ref="PSR2.ControlStructures.ElseIfDeclaration"/>
+    <rule ref="PSR2.ControlStructures.SwitchDeclaration"/>
+    <rule ref="PSR2.Files.EndFileNewline"/>
+    <rule ref="PSR2.Methods.MethodDeclaration"/>
+    <rule ref="PSR2.Namespaces.NamespaceDeclaration"/>
+    <rule ref="PSR2.Namespaces.UseDeclaration"/>
+    <rule ref="Squiz.PHP.CommentedOutCode"/>
+    <rule ref="Squiz.PHP.DisallowMultipleAssignments">
+        <exclude name="Squiz.PHP.DisallowMultipleAssignments.FoundInControlStructure" />
+    </rule>
+    <rule ref="Squiz.PHP.DisallowSizeFunctionsInLoops"/>
+
+    <rule ref="Squiz.PHP.DiscouragedFunctions">
+        <properties>
+            <property name="error" value="true"/>
+        </properties>
+    </rule>
+    <rule ref="Squiz.PHP.Eval"/>
+    <rule ref="Squiz.PHP.GlobalKeyword"/>
+    <rule ref="Squiz.PHP.Heredoc"/>
+    <rule ref="Squiz.PHP.InnerFunctions"/>
+    <rule ref="Squiz.PHP.LowercasePHPFunctions"/>
+    <rule ref="Squiz.PHP.NonExecutableCode"/>
+    <rule ref="Squiz.Scope.MemberVarScope"/>
+    <rule ref="Squiz.Scope.MethodScope"/>
+    <rule ref="Squiz.Scope.StaticThisUsage"/>
+    <rule ref="Squiz.WhiteSpace.LanguageConstructSpacing"/>
+    <rule ref="Squiz.WhiteSpace.LogicalOperatorSpacing"/>
+    <rule ref="Squiz.WhiteSpace.MemberVarSpacing">
+        <properties>
+            <property name="spacingBeforeFirst " value="false"/>
+        </properties>
+    </rule>
+    <rule ref="Squiz.WhiteSpace.OperatorSpacing">
+        <properties>
+            <property name="ignoreNewlines" value="true"/>
+        </properties>
+    </rule>
+    <rule ref="Squiz.WhiteSpace.ObjectOperatorSpacing">
+        <properties>
+            <property name="ignoreNewlines" value="true"/>
+        </properties>
+    </rule>
+    <rule ref="Squiz.WhiteSpace.ScopeKeywordSpacing"/>
+    <rule ref="Squiz.WhiteSpace.SemicolonSpacing"/>
+    <rule ref="Squiz.Commenting.BlockComment">
+        <exclude name="Squiz.Commenting.BlockComment.WrongStart" />
+    </rule>
+    <rule ref="Squiz.Commenting.ClassComment">
+        <exclude name="Squiz.Commenting.ClassComment.Missing" />
+        <exclude name="Squiz.Commenting.ClassComment.TagNotAllowed" />
+    </rule>
+    <rule ref="Squiz.Commenting.DocCommentAlignment"/>
+    <rule ref="Squiz.Commenting.EmptyCatchComment"/>
+    <rule ref="Squiz.Commenting.FunctionComment">
+        <exclude name="Squiz.Commenting.FunctionComment.MissingParamComment" />
+    </rule>
+    <rule ref="Squiz.Commenting.FunctionCommentThrowTag"/>
+    <rule ref="Squiz.Commenting.InlineComment">
+        <exclude name="Squiz.Commenting.InlineComment.DocBlock" />
+    </rule>
+    <rule ref="Squiz.Commenting.LongConditionClosingComment">
+        <exclude name="Squiz.Commenting.LongConditionClosingComment.SpacingBefore" />
+    </rule>
+    <rule ref="Squiz.Commenting.PostStatementComment"/>
+    <rule ref="Squiz.Commenting.VariableComment"/>
+    <rule ref="SlevomatCodingStandard.Namespaces.UnusedUses.UnusedUse" />
+
+    <!-- For Laravel migrations -->
+    <rule ref="PSR1.Classes.ClassDeclaration.MissingNamespace">
+        <exclude-pattern>*/database/migrations/*</exclude-pattern>
+    </rule>
+
+</ruleset>

public/browserconfig.xml

@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+<browserconfig>
+    <msapplication>
+        <tile>
+            <square150x150logo src="/assets/images/mstile-150x150.png"/>
+            <TileColor>#091c58</TileColor>
+        </tile>
+    </msapplication>
+</browserconfig>

public/site.webmanifest

@@ -0,0 +1,14 @@
+{
+    "name": "",
+    "short_name": "",
+    "icons": [
+        {
+            "src": "/assets/images/android-chrome-144x144.png",
+            "sizes": "144x144",
+            "type": "image/png"
+        }
+    ],
+    "theme_color": "#091c58",
+    "background_color": "#091c58",
+    "display": "standalone"
+}

resources/assets/images/safari-pinned-tab.svg

@@ -0,0 +1,39 @@
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 20010904//EN"
+ "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">
+<svg version="1.0" xmlns="http://www.w3.org/2000/svg"
+ width="180.000000pt" height="180.000000pt" viewBox="0 0 180.000000 180.000000"
+ preserveAspectRatio="xMidYMid meet">
+<metadata>
+Created by potrace 1.14, written by Peter Selinger 2001-2017
+</metadata>
+<g transform="translate(0.000000,180.000000) scale(0.100000,-0.100000)"
+fill="#000000" stroke="none">
+<path d="M1585 1356 l30 -25 -40 -41 c-55 -58 -135 -91 -135 -56 0 8 9 33 20
+57 10 24 15 48 11 52 -5 5 -300 7 -657 5 -594 -4 -656 -6 -731 -23 l-83 -19 0
+-123 c0 -68 4 -123 9 -123 23 0 33 -64 29 -195 -2 -112 -6 -139 -19 -149 -14
+-9 -17 -34 -18 -135 l-2 -124 173 8 c95 4 247 11 338 15 161 8 875 4 935 -5
+17 -2 103 -7 193 -11 l162 -7 0 143 c0 79 -3 140 -7 137 -3 -4 -12 -2 -20 4
+-17 15 -19 314 -2 325 6 3 9 15 6 25 -3 11 1 26 9 33 10 10 14 39 14 94 l0 79
+-52 16 c-29 9 -69 19 -88 23 -19 3 -46 15 -59 25 -13 11 -29 19 -35 19 -6 0 3
+-11 19 -24z m-1306 -105 c9 -6 11 -20 6 -50 -4 -22 -7 -149 -7 -281 -1 -254 2
+-270 46 -270 23 0 55 29 75 67 6 12 11 68 11 125 0 178 36 276 122 338 71 52
+141 35 209 -50 71 -88 79 -350 16 -464 -50 -90 -147 -129 -215 -87 -50 32 -59
+62 -33 106 13 22 16 35 9 33 -7 -2 -27 -32 -44 -67 -17 -35 -39 -70 -49 -77
+-14 -10 -57 -14 -163 -14 l-145 0 7 48 c11 77 9 564 -2 594 -12 30 -3 43 38
+51 44 8 105 7 119 -2z m717 -52 c14 -12 16 -42 13 -252 l-4 -239 28 -24 c33
+-28 37 -29 63 -10 18 14 19 29 19 273 l0 258 51 3 c39 2 54 -1 68 -17 16 -17
+16 -28 7 -115 -14 -125 -14 -328 0 -360 6 -13 27 -32 45 -42 19 -10 34 -24 34
+-30 0 -6 -21 -28 -47 -48 -55 -43 -76 -42 -137 6 -34 27 -40 29 -48 14 -13
+-23 -62 -46 -99 -46 -22 0 -41 10 -65 34 l-34 34 0 218 c-1 144 -5 240 -14
+282 -12 56 -12 63 3 72 21 14 96 6 117 -11z m599 -33 c36 -28 105 -153 105
+-191 0 -39 -37 -72 -117 -105 -87 -36 -123 -63 -123 -94 0 -27 27 -68 63 -96
+l28 -22 56 42 c65 50 87 55 91 22 8 -57 -62 -140 -136 -163 -65 -19 -105 -5
+-176 61 -35 33 -69 60 -75 60 -8 0 -7 6 3 16 9 8 16 23 16 32 8 332 9 343 62
+406 58 71 136 83 203 32z"/>
+<path d="M573 1093 c-14 -22 -19 -58 -24 -192 -3 -91 -2 -176 2 -188 13 -35
+53 -57 79 -43 34 18 40 52 40 214 0 159 -9 209 -40 226 -28 15 -38 12 -57 -17z"/>
+<path d="M1480 1087 c-38 -62 -36 -138 5 -153 21 -8 61 20 80 56 14 26 14 33
+0 68 -9 22 -27 44 -41 51 -22 10 -26 8 -44 -22z"/>
+</g>
+</svg>

resources/js/app.js

@@ -1 +0,0 @@
-require('./bootstrap');

resources/js/back.js

@@ -0,0 +1,47 @@
+require('./common');
+require('./vue');
+
+window.addEventListener('DOMContentLoaded', () => {
+    let elements = document.getElementsByClassName('confirmDeleteJS')
+    for (let element of elements) {
+        element.addEventListener('submit', function (e) {
+            e.preventDefault()
+            confirmJS(
+                'Confirmez',
+                'Voulez-vous vraiment supprimer cet élément ?',
+                this,
+                function (response) { this.submit() },
+                { 'icon': 'error' }
+            )
+            return false
+        })
+    }
+    elements = document.getElementsByClassName('confirmDoneJS')
+    for (let element of elements) {
+        element.addEventListener('submit', function (e) {
+            e.preventDefault()
+            confirmJS(
+                'Confirmez',
+                'Voulez-vous vraiment marquer cet élément comme traité ?',
+                this,
+                function (response) { this.submit() },
+                { 'icon': 'info' }
+            )
+            return false
+        })
+    }
+    elements = document.getElementsByClassName('confirmSubmitJS')
+    for (let element of elements) {
+        element.addEventListener('submit', function (e) {
+            e.preventDefault()
+            confirmJS(
+                'Confirmez',
+                'Voulez-vous enregistrer cet élément tel-quel ?',
+                this,
+                function (response) { this.submit() },
+                { 'icon': 'warning' }
+            )
+            return false
+        })
+    }
+})

resources/js/back/LaravelFileManager.js

@@ -0,0 +1,91 @@
+import Swal from 'sweetalert2';
+import Plugin from './../vendor/ckeditor/node_modules/@ckeditor/ckeditor5-core/src/plugin';
+import imageIcon from './../vendor/ckeditor/node_modules/@ckeditor/ckeditor5-core/theme/icons/image.svg';
+import ButtonView from './../vendor/ckeditor/node_modules/@ckeditor/ckeditor5-ui/src/button/buttonview';
+
+export default class LaravelFileManager extends Plugin {
+    init() {
+        const editor = this.editor;
+
+        editor.ui.componentFactory.add('laravelFileManager', locale => {
+            const view = new ButtonView(locale);
+
+            const _onMessage = (event) => {
+                if (window.location.origin.toLowerCase().indexOf(event.origin.toLowerCase()) == 0) {
+                    if (event.data.sender == 'calliopeWysiwyg') {
+                        let imageURL = (new URL(event.data.message).pathname)
+                            .replace(new RegExp("^[\/]+"), "").replace(/^/, '/');
+
+                        if (!['jpg', 'png', 'jpeg', 'gif', 'mp4'].includes(imageURL.split('.').pop())) {
+                            if (Swal) {
+                                Swal.fire({
+                                    title: 'Impossible d\'ajouter le fichier',
+                                    text: 'Seule les images (jpg, jpeg, png, gif) et les vidéos (mp4) sont supportées.',
+                                    icon: 'error',
+                                });
+                            } else {
+                                alert('Impossible d\'ajouter le fichier: Seule les images (jpg, jpeg, png, gif) sont supportées.');
+                            }
+                            return;
+                        }
+
+                        if (imageURL.split('.').pop() === 'mp4') {
+                            editor.model.change(writer => {
+                                const oembed = writer.createElement('oembed', { url: imageURL })
+                                const figure = writer.createElement('figure', { class: 'media' }, [oembed])
+
+                                const p = writer.createElement('p', null, 'fofofo')
+
+                                // < video controls allowfullscreen style = "max-width: 90%; margin: 0 auto; display: block;" > ' +
+                                //     `<source src="${path}" type="video/mp4">` +
+                                //     `<p>Votre navigateur ne prend pas en charge les vidéos HTML5. Voici <a href="${path}">un lien pour télécharger la vidéo</a>.</p>` +
+                                //     '</>
+
+                                // Insert the oembed video in the current selection location.
+                                // editor.model.insertContent(p, editor.model.document.selection);
+                                // console.log('insert')
+                                // const insertPosition = editor.model.document.selection.getFirstPosition();
+                                // writer.insertText('foo', insertPosition);
+                                // editor.model.insertContent(p, insertPosition);
+                                // editor.model.insertContent(figure, insertPosition);
+                                // console.log(imageURL)
+                                editor.execute('mediaEmbed', imageURL);
+                            });
+                        } else {
+                            editor.model.change(writer => {
+                                const imageElement = writer.createElement('imageBlock', {
+                                    src: imageURL
+                                });
+
+                                // Insert the image in the current selection location.
+                                editor.model.insertContent(imageElement, editor.model.document.selection);
+                            });
+                        }
+                    }
+                }
+            };
+
+            view.set({
+                label: 'Insert image',
+                icon: imageIcon,
+                tooltip: true
+            });
+
+            view.on('execute', () => {
+                if (window.removeEventListener) {
+                    window.removeEventListener('message', _onMessage, false)
+                } else {
+                    window.detachEvent('onmessage', _onMessage)
+                }
+                window.open('/file-manager/fm-button?wysiwyg=1', 'fm', 'width=1400,height=800');
+                if (window.addEventListener) {
+                    window.addEventListener('message', _onMessage, false);
+                } else {
+                    window.attachEvent('onmessage', _onMessage)
+                }
+            });
+
+            return view;
+        });
+    }
+}

resources/js/bootstrap.js

@@ -1,5 +1,9 @@
 window._ = require('lodash');
 
+try {
+    require('bootstrap');
+} catch (e) {}
+
 /**
  * We'll load the axios HTTP library which allows us to easily issue requests
  * to our Laravel back-end. This library automatically handles sending the

resources/js/common.js

@@ -0,0 +1,29 @@
+/**
+ * We'll load the axios HTTP library which allows us to easily issue requests
+ * to our Laravel back-end. This library automatically handles sending the
+ * CSRF token as a header based on the value of the "XSRF" token cookie.
+ */
+
+window.axios = require('axios')
+
+window.axios.defaults.headers.common['X-Requested-With'] = 'XMLHttpRequest'
+
+let bootstrap = require('bootstrap')
+
+// enable bs tooltips
+var tooltipTriggerList = [].slice.call(document.querySelectorAll('[data-bs-toggle="tooltip"]'))
+tooltipTriggerList.map(function (tooltipTriggerEl) {
+    return new bootstrap.Tooltip(tooltipTriggerEl)
+})
+
+// SweetAlert
+import Swal from 'sweetalert2'
+
+// bootstrap styling
+window.Swal = Swal.mixin({
+    customClass: {
+        confirmButton: 'btn btn-lg btn-success  ms-3 me-3',
+        cancelButton: 'btn btn-lg btn-danger ms-3 me-3'
+    },
+    buttonsStyling: false
+})

resources/js/components/bo/ckEditorBoComponent.vue

@@ -0,0 +1,196 @@
+<template>
+    <div>
+        <div class="wordCounter">
+                <span class="words"><u>{{ __('Mots') }}</u>&nbsp;:&nbsp;<b>{{ words }}</b></span>
+                <span class="chars"><u>{{ __('Caractères') }}</u>&nbsp;:&nbsp;<b>{{ chars }}</b></span>
+        </div>
+        <div ref="ckeditor"></div>
+        <input :id="internalId" class="form-control" type="hidden" :name="name" :value="internalText" :required="internalRequired">
+    </div>
+</template>
+
+<script>
+    import '../../vendor/ckeditor/build/ckeditor'
+    // import { CKUploadAdaptater } from '../../back/CkUploadAdaptater'
+
+    export default {
+        mounted() {
+            let data = JSON.parse(this.$parent.$options.json)
+            this.id = data.id
+            this.name = data.name
+            this.internalText = data.text
+            this.internalId = data.id ? data.id : ''
+            this.internalRequired = Boolean(data.required)
+            this.makeSuperBuild()
+        },
+        data() {
+            return {
+                name: null,
+                internalText: '',
+                internalId: '',
+                internalRequired: false,
+                editor: null,
+                words: 0,
+                chars: 0,
+                emitTimer : null
+            }
+        },
+        watch: {
+            dbtext() {
+                if(this.internalText != this.dbtext) {
+                    this.internalText = this.dbtext
+                    if(this.editor) {
+                        this.editor.setData(this.internalText)
+                    }
+                }
+            }
+        },
+        methods: {
+            makeSuperBuild() {
+                let self = this
+                ClassicEditor
+                    .create(self.$refs.ckeditor, {
+                        // extraPlugins: [(editor) => {
+                        //     editor.plugins.get( 'FileRepository' ).createUploadAdapter = ( loader ) => {
+                        //         // Configure the URL to the upload script in your back-end here!
+                        //         return new CKUploadAdaptater(loader);
+                        //     }
+                        // }],
+                        wordCount: {
+                            onUpdate: stats => {
+                                this.chars = stats.characters
+                                this.words = stats.words
+                            }
+                        },
+                        mediaEmbed: {
+                            previewsInData: false,
+                            removeProviders: [
+                                'instagram', 'twitter', 'googleMaps', 'flickr', 'facebook',
+                                'dailymotion', 'spotify', 'youtube'
+                            ],
+                            // see https://github.com/ckeditor/ckeditor5/blob/master/packages/ckeditor5-media-embed/src/mediaembedediting.js
+                            providers: [{
+                                // display local videos in oembed tags
+                                name: 'localVideo',
+                                url: /^(\/(?:content|storage)\/.*)/,
+                                html: match => {
+                                    let path = match[ 1 ];
+
+                                    return (
+                                        '<video controls allowfullscreen style="max-width: 90%; margin: 0 auto; display: block;">' +
+                                            `<source src="${ path }" type="video/mp4">` +
+                                            `<p>Votre navigateur ne prend pas en charge les vidéos HTML5. Voici <a href="${ path }">un lien pour télécharger la vidéo</a>.</p>` +
+                                        '</video>'
+                                    );
+                                }
+                            }]
+                        },
+                        toolbar: {
+                            items: [
+                                'heading', '|',
+                                'bold','italic','underline','link','bulletedList','numberedList','|',
+                                'outdent','indent','alignment','|',
+                                'undo', 'redo', '|',
+                                'laravelFileManager', 'blockQuote','|',
+                                'insertTable', 'tableColumn', 'tableRow', 'mergeTableCells' ,'|',
+                                // 'videoStyle:alignLeft', 'videoStyle:alignCenter', 'videoStyle:alignRight', 'videoResize',
+                                // '|',
+                                // 'videoResize:50',
+                                // 'videoResize:75',
+                                // 'videoResize:original',
+                                'fontColor','fontFamily','fontSize','horizontalLine','|',
+                                'removeFormat','|',
+                                'undo','redo', '|',
+                                'sourceEditing'
+                            ]
+                        },
+                        table: {
+                            contentToolbar: [
+                                'tableColumn', 'tableRow', 'mergeTableCells',
+                                'tableProperties', 'tableCellProperties',
+                                'toggleTableCaption'
+                            ],
+
+                            // Configuration of the TableProperties plugin.
+                            tableProperties: {
+                                // ...
+                            },
+
+                            // Configuration of the TableCellProperties plugin.
+                            tableCellProperties: {
+                                // ...
+                            }
+                        },
+                        language: 'fr',
+                        image: {
+                            toolbar: [
+                                'imageTextAlternative',
+                                'imageStyle:inline',
+                                'imageStyle:block',
+                                'imageStyle:side',
+                                'linkImage'
+                            ]
+                        },
+                        // video: {
+                        //     resizeUnit: 'px',
+                        //     // Configure the available video resize options.
+                        //     resizeOptions: [
+                        //         {
+                        //             name: 'videoResize:original',
+                        //             value: null,
+                        //             label: 'Original',
+                        //             icon: 'original'
+                        //         },
+                        //         {
+                        //             name: 'videoResize:50',
+                        //             value: 50,
+                        //             label: '50',
+                        //             icon: 'medium'
+                        //         },
+                        //         {
+                        //             name: 'videoResize:75',
+                        //             value: '75',
+                        //             label: '75',
+                        //             icon: 'large'
+                        //         }
+                        //     ]
+                        // }
+                    })
+                    .then( editor => {
+                        editor.setData(this.internalText)
+                        self.editor = editor
+                        editor.model.document.on('change:data', () => {
+                            // * Keep track of internal editor
+                            let data = editor.getData()
+                            self.$set(self, 'internalText', data)
+                            self.$emit('input', data)
+                        })
+                    })
+                    .catch( error => {
+                        console.error( 'Oops, something went wrong!' );
+                        console.error( 'Please, report the following error on https://github.com/ckeditor/ckeditor5/issues with the build id and the error stack trace:' );
+                        console.warn( 'Build id: x0tjc6omqq4d-iydt761tuj51' );
+                        console.error( error );
+                    });
+            }
+        }
+    }
+</script>
+
+<style lang="scss">
+.wordCounter {
+    color: initial;
+    border: 1px solid rgb(196, 196, 196);
+    border-bottom: 0;
+    background-color: #fafafa;
+    position: relative;
+    .words {
+        position: relative;
+        left: 2rem;
+    }
+    .chars {
+        position: absolute;
+        left: 9rem;
+    }
+}
+</style>

resources/js/front.js

@@ -0,0 +1,5 @@
+// LIBS
+import './common'
+import './vue'
+
+// Local

resources/js/modules/asset.js

@@ -0,0 +1,8 @@
+export default {
+    methods: {
+        asset(path) {
+            return window.__SYSTEM._asset + path;
+        }
+    },
+}
+

resources/js/modules/confirm.js

@@ -0,0 +1,37 @@
+export default {
+    methods: {
+        confirm(title, text = '', self, after, options = {}) {
+            if (!self) {
+                throw Error('self is needed to set "this" on callback');
+            }
+            if (!after) {
+                throw Error('callback is needed when using confirm');
+            }
+            let icon = options.icon ?? 'warning'
+            let confirm = options.confirm ?? 'Oui'
+            let cancel = options.confirm ?? 'Annuler'
+            Swal.fire({
+                title: title,
+                text: text,
+                icon: icon,
+                showCancelButton: true,
+                confirmButtonText: confirm,
+                cancelButtonText: cancel,
+                reverseButtons: true
+            }).then((result) => {
+                if (result.isConfirmed) {
+                    if (after) {
+                        after.apply(self, [result])
+                    }
+                } else if (
+                    /* Read more about handling dismissals below */
+                    result.dismiss === Swal.DismissReason.cancel
+                ) {
+                    Swal.fire('L\'opération n\'as pas été effectuée')
+                }
+            })
+            return false;
+        }
+    },
+}
+

resources/js/modules/route.js

@@ -0,0 +1,43 @@
+export default {
+    methods: {
+        route(routeName, parameters = []) {
+            let route = Object.keys(window.__SYSTEM._routes).indexOf(routeName) !== -1 ?
+                window.__SYSTEM._routes[routeName] : null;
+            if (!route) {
+                return route;
+            }
+            // copy parameters
+            let iParameters = Object.assign({}, parameters);
+            let origin = window.location.origin;
+            let pathname = route.replace(origin, '');
+            let search = window.location.search
+            let hash = window.location.hash;
+
+            // replace in path name
+            for (let paramName in iParameters) {
+                let paramValue = parameters[paramName];
+                if (pathname.indexOf(paramName) !== -1) {
+                    pathname = pathname.replace(paramName, paramValue);
+                }
+                delete parameters[paramName];
+            }
+
+            for (let paramName in parameters) {
+                let paramValue = parameters[paramName];
+                if (search.indexOf(paramName + "=") >= 0) {
+                    prefix = search.substring(0, search.indexOf(paramName + "="));
+                    suffix = search.substring(search.indexOf(paramName + "="));
+                    suffix = suffix.substring(suffix.indexOf("=") + 1);
+                    suffix = (suffix.indexOf("&") >= 0) ? suffix.substring(suffix.indexOf("&")) : '';
+                    search = prefix + paramName + "=" + paramValue + suffix;
+                } else if (search.indexOf("?") < 0) {
+                    search += "?" + paramName + "=" + paramValue
+                } else {
+                    search += "&" + paramName + "=" + paramValue
+                }
+            }
+            return origin + pathname + search + hash;
+        }
+    },
+}
+

resources/js/modules/trans.js

@@ -0,0 +1,40 @@
+export default {
+    data() {
+        return {
+            locale: window.__SYSTEM._locale
+        };
+    },
+    methods: {
+        /**
+         * Translate the given key.
+         */
+        __(key, replace) {
+            let translation, translationNotFound = true, vars;
+
+            try {
+                translation = key.split('.').reduce((t, i) => t[i] || null, window.__SYSTEM._translations.php)
+                if (translation) {
+                    translationNotFound = false;
+                }
+            } catch (e) {
+                translation = key;
+            }
+
+            if (translationNotFound) {
+                translation = window.__SYSTEM._translations['json'][key] ? window.__SYSTEM._translations['json'][key] : key;
+            }
+            vars = translation.match(/:[0-9A-Za-z_]+/g);
+            if (vars) {
+                for (let match of vars) {
+                    try {
+                        translation = translation.replace(new RegExp(match, 'g'), replace[match.substr(1)]);
+                    } catch (e) {
+                        console.error('String replace failed ', e);
+                    }
+                }
+            }
+            return translation
+        }
+    },
+}
+

resources/js/vendor/ckeditor/.gitignore

@@ -0,0 +1 @@
+node_modules

resources/js/vendor/ckeditor/LICENSE.md

@@ -0,0 +1,49 @@
+Software License Agreement
+==========================
+
+Copyright (c) 2014-2021, CKSource - Frederico Knabben. All rights reserved.
+
+Online builder code samples are licensed under the terms of the MIT License (see Appendix A):
+
+	http://en.wikipedia.org/wiki/MIT_License
+
+CKEditor 5 collaboration features are only available under a commercial license. [Contact us](https://ckeditor.com/contact/) for more details.
+
+Free 30-days trials of CKEditor 5 collaboration features are available:
+ * https://ckeditor.com/collaboration/ - Real-time collaboration (with all features).
+ * https://ckeditor.com/collaboration/comments/ - Inline comments feature (without real-time collaborative editing).
+ * https://ckeditor.com/collaboration/track-changes/ - Track changes feature (without real-time collaborative editing).
+
+Trademarks
+----------
+
+CKEditor is a trademark of CKSource - Frederico Knabben. All other brand
+and product names are trademarks, registered trademarks or service
+marks of their respective holders.
+
+---
+
+Appendix A: The MIT License
+---------------------------
+
+The MIT License (MIT)
+
+Copyright (c) 2014-2021, CKSource - Frederico Knabben
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

resources/js/vendor/ckeditor/README.md

@@ -0,0 +1,68 @@
+# CKEditor 5 editor generated with the online builder
+
+This repository presents a CKEditor 5 editor build generated by the [Online builder tool](https://ckeditor.com/ckeditor-5/online-builder)
+
+## Quick start
+
+1. Open the `sample/index.html` page in the browser.
+
+If you picked the real-time collaboration plugins:
+
+2. Fill the dialog with correct token, websocket and upload URL endpoints. If you do not have these yet or do not know their meaning, [contact us](https://ckeditor.com/contact/).
+
+3. Copy the URL and share it or paste in another tab to enjoy real-time collaborative editing.
+
+If you picked the non-real-time collaboration plugins:
+
+2. Fill the prompt with the license key. If you do not have the license key yet [contact us](https://ckeditor.com/contact/).
+
+## Configuring build
+
+Changes like changing toolbar items, changing order of icons or customizing plugin configurations should be relatively easy to make. Open the `sample/index.html` file and edit the script that initialized the CKEditor 5. Save the file and refresh the browser. That's all.
+
+*Note:* If you have any problems with browser caching use the `Ctrl + R` or `Cmd + R` shortcut depending on your system.
+
+However if you want to remove or add a plugin to the build you need to follow the next step of this guide.
+
+Note that it is also possible to go back to the [Online builder tool](https://ckeditor.com/ckeditor-5/online-builder) and pick other set of plugins. But we encourage you to try the harder way and to learn the principles of Node.js and CKEditor 5 ecosystems that will allow you to do more cool things in the future!
+
+### Installation
+
+In order to rebuild the application you need to install all dependencies first. To do it, open the terminal in the project directory and type:
+
+```
+npm install
+```
+
+Make sure that you have the `node` and `npm` installed first. If not, then follow the instructions on the [Node.js documentation page](https://nodejs.org/en/).
+
+### Adding or removing plugins
+
+Now you can install additional plugin in the build. Just follow the [Adding a plugin to an editor tutorial](https://ckeditor.com/docs/ckeditor5/latest/builds/guides/integration/installing-plugins.html#adding-a-plugin-to-an-editor)
+
+### Rebuilding editor
+
+If you have already done the [Installation](#installation) and [Adding or removing plugins](#adding-or-removing-plugins) steps, you're ready to rebuild the editor by running the following command:
+
+```
+npm run build
+```
+
+This will build the CKEditor 5 to the `build` directory. You can open your browser and you should be able to see the changes you've made in the code. If not, then try to refresh also the browser cache by typing `Ctrl + R` or `Cmd + R` depending on your system.
+
+## What's next?
+
+Follow the guides available on https://ckeditor.com/docs/ckeditor5/latest/framework/index.html and enjoy the document editing.
+
+## FAQ
+| Where is the place to report bugs and feature requests?
+
+You can create an issue on https://github.com/ckeditor/ckeditor5/issues including the build id - `unyb7c61pdjq-xt0bz4ltrghq`. Make sure that the question / problem is unique, please look for a possibly asked questions in the search box. Duplicates will be closed.
+
+| Where can I learn more about the CKEditor 5 framework?
+
+Here: https://ckeditor.com/docs/ckeditor5/latest/framework/
+
+| Is it possible to use online builder with common frameworks like React, Vue or Angular?
+
+Not yet, but it these integrations will be available at some point in the future.

resources/js/vendor/ckeditor/build/translations/af.js

@@ -0,0 +1 @@
+!function(e){const n=e.af=e.af||{};n.dictionary=Object.assign(n.dictionary||{},{"%0 of %1":"%0 van %1","Align center":"Belyn in die middel","Align left":"Belyn links","Align right":"Belyn regs","Block quote":"Verwysingsaanhaling",Bold:"Vet",Cancel:"Kanselleer",Italic:"Kursief",Justify:"Belyn beide kante","Remove color":"Verwyder kleur","Remove Format":"Verwyder formatering","Restore default":"Herstel verstek",Save:"Stoor","Show more items":"Wys meer items","Text alignment":"Teksbelyning","Text alignment toolbar":"Teksbelyning nutsbank",Underline:"Onderstreep"}),n.getPluralForm=function(e){return 1!=e}}(window.CKEDITOR_TRANSLATIONS||(window.CKEDITOR_TRANSLATIONS={}));

resources/js/vendor/ckeditor/build/translations/ast.js

@@ -0,0 +1 @@
+!function(e){const t=e.ast=e.ast||{};t.dictionary=Object.assign(t.dictionary||{},{"%0 of %1":"",Aquamarine:"",Black:"",Blue:"",Bold:"Negrina","Break text":"","Bulleted List":"Llista con viñetes","Bulleted list styles toolbar":"",Cancel:"Encaboxar","Centered image":"","Change image text alternative":"",Circle:"",Decimal:"","Decimal with leading zero":"","Dim grey":"",Disc:"",Downloadable:"","Dropdown toolbar":"","Edit block":"","Edit link":"","Editor toolbar":"","Full size image":"Imaxen a tamañu completu",Green:"",Grey:"","Image resize list":"","Image toolbar":"","image widget":"complementu d'imaxen","In line":"","Insert image":"",Italic:"Cursiva","Left aligned image":"","Light blue":"","Light green":"","Light grey":"",Link:"Enllazar","Link image":"","Link URL":"URL del enllaz","List properties":"","Lower-latin":"","Lower–roman":"",Next:"","Numbered List":"Llista numberada","Numbered list styles toolbar":"","Open in a new tab":"","Open link in new tab":"",Orange:"",Original:"",Previous:"",Purple:"",Red:"",Redo:"Refacer","Remove color":"","Resize image":"","Resize image to %0":"","Resize image to the original size":"","Restore default":"","Reversed order":"","Rich Text Editor":"Editor de testu arriquecíu","Rich Text Editor, %0":"Editor de testu arriquecíu, %0","Right aligned image":"",Save:"Guardar","Show more items":"","Side image":"Imaxen llateral",Square:"","Start at":"","Start index must be greater than 0.":"","Text alternative":"","This link has no URL":"","Toggle the circle list style":"","Toggle the decimal list style":"","Toggle the decimal with leading zero list style":"","Toggle the disc list style":"","Toggle the lower–latin list style":"","Toggle the lower–roman list style":"","Toggle the square list style":"","Toggle the upper–latin list style":"","Toggle the upper–roman list style":"",Turquoise:"",Underline:"",Undo:"Desfacer",Unlink:"Desenllazar","Upload failed":"","Upper-latin":"","Upper-roman":"",White:"","Wrap text":"",Yellow:""}),t.getPluralForm=function(e){return 1!=e}}(window.CKEDITOR_TRANSLATIONS||(window.CKEDITOR_TRANSLATIONS={}));

resources/js/vendor/ckeditor/build/translations/bs.js

@@ -0,0 +1 @@
+!function(a){const i=a.bs=a.bs||{};i.dictionary=Object.assign(i.dictionary||{},{"%0 of %1":"%0 od %1","Align center":"Centrirati","Align left":"Lijevo poravnanje","Align right":"Desno poravnanje",Big:"","Block quote":"Citat",Bold:"Podebljano","Break text":"",Cancel:"Poništi","Centered image":"Centrirana slika","Change image text alternative":"Promijeni ALT atribut za sliku","Choose heading":"Odaberi naslov",Default:"Zadani","Document colors":"","Font Color":"Boja","Font Family":"Font","Font Size":"Veličina fonta","Full size image":"",Heading:"Naslov","Heading 1":"Naslov 1","Heading 2":"Naslov 2","Heading 3":"Naslov 3","Heading 4":"Naslov 4","Heading 5":"Naslov 5","Heading 6":"Naslov 6","Horizontal line":"Horizontalna linija",Huge:"","Image resize list":"Lista veličina slike","Image toolbar":"","image widget":"","In line":"","Insert image":"Umetni sliku",Italic:"Zakrivljeno",Justify:"","Left aligned image":"Lijevo poravnata slika",Original:"Original",Paragraph:"Paragraf","Remove color":"Ukloni boju","Resize image":"Promijeni veličinu slike","Resize image to %0":"","Resize image to the original size":"Postavi originalnu veličinu slike","Restore default":"Vrati na zadano","Right aligned image":"Desno poravnata slika",Save:"Sačuvaj","Show more items":"Prikaži više stavki","Side image":"",Small:"","Text alignment":"Poravnanje teksta","Text alignment toolbar":"Traka za poravnanje teksta","Text alternative":"ALT atribut",Tiny:"",Underline:"Podcrtano","Upload failed":"Učitavanje slike nije uspjelo","Wrap text":"Prelomi tekst"}),i.getPluralForm=function(a){return a%10==1&&a%100!=11?0:a%10>=2&&a%10<=4&&(a%100<10||a%100>=20)?1:2}}(window.CKEDITOR_TRANSLATIONS||(window.CKEDITOR_TRANSLATIONS={}));

resources/js/vendor/ckeditor/build/translations/ca.js

@@ -0,0 +1 @@
+!function(a){const e=a.ca=a.ca||{};e.dictionary=Object.assign(e.dictionary||{},{"%0 of %1":"","Align center":"Alineació centre","Align left":"Alineació esquerra","Align right":"Alineació dreta",Big:"Gran","Block quote":"Cita de bloc",Bold:"Negreta",Cancel:"Cancel·lar","Choose heading":"Escull capçalera",Default:"Predeterminada","Document colors":"","Font Color":"","Font Family":"Font","Font Size":"Mida de la font",Heading:"Capçalera","Heading 1":"Capçalera 1","Heading 2":"Capçalera 2","Heading 3":"Capçalera 3","Heading 4":"","Heading 5":"","Heading 6":"",Huge:"Molt gran",Italic:"Cursiva",Justify:"Justificar",Paragraph:"Pàrraf","Remove color":"","Restore default":"",Save:"Desar","Show more items":"",Small:"Peita","Text alignment":"Alineació text","Text alignment toolbar":"",Tiny:"Molt petita",Underline:"Subrallat"}),e.getPluralForm=function(a){return 1!=a}}(window.CKEDITOR_TRANSLATIONS||(window.CKEDITOR_TRANSLATIONS={}));