snipe-it/app/Http/Controllers/Assets/AssetCheckoutController.php

<?php

namespace App\Http\Controllers\Assets;

use App\Exceptions\CheckoutNotAllowed;
use App\Helpers\Helper;
use App\Http\Controllers\Controller;
use App\Http\Requests\AssetCheckoutRequest;
use App\Http\Traits\CheckInOutTrait;
use App\Models\Asset;
use App\Models\CheckoutAcceptance;
use App\Models\User;
use Illuminate\Contracts\View\View;
use Illuminate\Database\Eloquent\ModelNotFoundException;
use Illuminate\Http\RedirectResponse;

class AssetCheckoutController extends Controller
{
    use CheckInOutTrait;

    /**
     * Returns a view that presents a form to check an asset out to a
     * user.
     *
     * @author [A. Gianotto] [<snipe@snipe.net>]
     *
     * @param  int  $assetId
     *
     * @since [v1.0]
     *
     * @return View
     */
    public function create(Asset $asset): View|RedirectResponse
    {

        $this->authorize('checkout', $asset);

        if (! $asset->model) {
            return redirect()->route('hardware.show', $asset)
                ->with('error', trans('admin/hardware/general.model_invalid_fix'));
        }

        // Invoke the validation to see if the audit will complete successfully
        $asset->setRules($asset->getRules() + $asset->customFieldValidationRules());

        if ($asset->isInvalid()) {
            return redirect()->route('hardware.edit', $asset)->withErrors($asset->getErrors());
        }

        if ($asset->availableForCheckout()) {
            return view('hardware/checkout', compact('asset'))
                ->with('statusLabel_list', Helper::deployableStatusLabelList())
                ->with('table_name', 'Assets')
                ->with('item', $asset);
        }

        return redirect()->route('hardware.index')
            ->with('error', trans('admin/hardware/message.checkout.not_available'));
    }

    /**
     * Validate and process the form data to check out an asset to a user.
     *
     * @author [A. Gianotto] [<snipe@snipe.net>]
     *
     * @since [v1.0]
     */
    public function store(AssetCheckoutRequest $request, $assetId): RedirectResponse
    {

        try {
            // Check if the asset exists
            if (! $asset = Asset::find($assetId)) {
                return redirect()->route('hardware.index')->with('error', trans('admin/hardware/message.does_not_exist'));
            } elseif (! $asset->availableForCheckout()) {
                return redirect()->route('hardware.index')->with('error', trans('admin/hardware/message.checkout.not_available'));
            }
            $this->authorize('checkout', $asset);

            if (! $asset->model) {
                return redirect()->route('hardware.show', $asset)->with('error', trans('admin/hardware/general.model_invalid_fix'));
            }

            $admin = auth()->user();

            $target = $this->determineCheckoutTarget();
            session()->put(['checkout_to_type' => $target]);

            $asset = $this->updateAssetLocation($asset, $target);

            $checkout_at = date('Y-m-d H:i:s');
            if (($request->filled('checkout_at')) && ($request->input('checkout_at') != date('Y-m-d'))) {
                $checkout_at = $request->input('checkout_at');
            }

            $expected_checkin = '';
            if ($request->filled('expected_checkin')) {
                $expected_checkin = $request->input('expected_checkin');
            }

            if ($request->filled('status_id')) {
                $asset->status_id = $request->input('status_id');
            }

            if ($request->boolean('set_not_requestable')) {
                $asset->requestable = false;
            }

            if (! empty($asset->licenseseats->all())) {
                if (request('checkout_to_type') == 'user') {
                    foreach ($asset->licenseseats as $seat) {
                        $seat->assigned_to = $target->id;
                        $seat->save();
                    }
                }
            }

            // Add any custom fields that should be included in the checkout
            $asset->customFieldsForCheckinCheckout('display_checkout');

            if (! $asset->canCheckoutTo($target)) {
                $targetType = match (class_basename($target)) {
                    'User' => trans('general.user'),
                    'Location' => trans('general.location'),
                    default => trans('general.asset'),
                };

                return redirect()->route('hardware.checkout.create', $asset)->with('error', trans('general.error_checkout_company_mismatch', [
                    'item' => trans('general.asset').' "'.$asset->display_name.'"',
                    'item_company' => $asset->company?->name ?? trans('general.unassigned'),
                    'target' => $targetType.' "'.($target->name ?? $target->username ?? $target->id).'"',
                ]));
            }

            session()->put([
                'redirect_option' => $request->input('redirect_option'),
                'checkout_to_type' => $request->input('checkout_to_type'),
                'sign_in_place' => $request->boolean('sign_in_place'),
            ]);

            if ($asset->checkOut($target, $admin, $checkout_at, $expected_checkin, $request->input('note'), $request->input('name'), null, $request->boolean('sign_in_place'))) {

                // When sign_in_place is requested and the target is a user, redirect to the
                // acceptance/signature page so the user can sign in person. The signature is
                // attributed to the target user, not the admin.
                if ($request->boolean('sign_in_place') && $target instanceof User) {
                    $acceptance = CheckoutAcceptance::where('checkoutable_type', Asset::class)
                        ->where('checkoutable_id', $asset->id)
                        ->where('assigned_to_id', $target->id)
                        ->pending()
                        ->latest()
                        ->first();

                    // If requireAcceptance() is false the listener won't have created one; create it now.
                    if (! $acceptance) {
                        $acceptance = new CheckoutAcceptance;
                        $acceptance->checkoutable()->associate($asset);
                        $acceptance->assignedTo()->associate($target);
                        $acceptance->save();
                    }

                    session([
                        'sign_in_place_acceptance_id' => $acceptance->id,
                        'sign_in_place_item_id' => $asset->id,
                        'sign_in_place_resource_type' => 'Assets',
                    ]);

                    return redirect()->route('account.accept.item', $acceptance->id)
                        ->with('success', trans('admin/hardware/message.checkout.success'));
                }

                return Helper::getRedirectOption($request, $asset->id, 'Assets')
                    ->with('success', trans('admin/hardware/message.checkout.success'));
            }

            // Redirect to the asset management page with error
            return redirect()->route('hardware.checkout.create', $asset)->with('error', trans('admin/hardware/message.checkout.error').$asset->getErrors());
        } catch (ModelNotFoundException $e) {
            return redirect()->back()->with('error', trans('admin/hardware/message.checkout.error'))->withErrors($asset->getErrors());
        } catch (CheckoutNotAllowed $e) {
            return redirect()->back()->with('error', $e->getMessage());
        }
    }
}