CRUD Kontrolcüleri Yazmayı Bırakın – DEV Community

class UserController extends Controller
{
    public function index(Request $request)
    {
        $query = User::query();

        // Email ile filtreleme
        if ($request->has('email')) {
            $query->where('email', 'like', '%' . $request->email . '%');
        }

        // Oluşturma tarihi ile filtreleme
        if ($request->has('created_after')) {
            $query->where('created_at', '>=', $request->created_after);
        }

        // Durum ile filtreleme
        if ($request->has('status')) {
            $query->where('status', $request->status);
        }

        // Sıralama
        $sortBy = $request->get('sort_by', 'created_at');
        $sortOrder = $request->get('sort_order', 'desc');
        $query->orderBy($sortBy, $sortOrder);

        // Sayfalandırma
        return $query->paginate($request->get('per_page', 15));
    }
}

// config/query-gate.php

use BehindSolution\LaravelQueryGate\Support\QueryGate;

return [
    'models' => [
        App\Models\User::class => QueryGate::make()
            ->middleware(['auth:sanctum'])
            ->filters([
                'email' => 'email',
                'created_at' => 'date',
                'status' => 'in:active,inactive,pending',
            ])
            ->allowedFilters([
                'email' => ['like'],
                'created_at' => ['gte', 'lte'],
                'status' => ['eq'],
            ])
            ->cache(60),
    ],
];

GET /query?model=App\Models\User
    &filter[email][like]=%@gmail.com
    &filter[created_at][gte]=2024-01-01
    &filter[status][eq]=active
    &sort=created_at:desc
    &per_page=50

->filters([
            'price' => 'numeric',
            'title' => 'string',
            'published_at' => 'date',
        ])
->allowedFilters([
            'price' => ['eq', 'lt', 'lte', 'gt', 'gte', 'between'],
            'title' => ['like'],
            'published_at' => ['eq', 'between'],
        ])

->filters([
            'posts.title' => 'string',
            'posts.comments.author.name' => 'string',
        ])
->allowedFilters([
            'posts.title' => ['like'],
            'posts.comments.author.name' => ['eq'],
        ])

->middleware(['auth:sanctum', 'throttle:60,1'])
->filters(['email' => 'email']) // Yalnızca bu alanlar filtrelenebilir
->allowedFilters(['email' => ['eq']]) // Yalnızca bu operatörler izinli
->select(['id', 'name', 'email']) // Yalnızca bu alanlar döndürülür
->query(fn($q, $request) => 
    $q->where('tenant_id', $request->user()->tenant_id)
)

->policy() // Mevcut politikanızı kullanır
// veya
->authorize(fn($request, $model) => 
    $request->user()->isAdmin() || 
    $model->user_id === $request->user()->id
)

->cache(60, )

->filters([=> ])
->rawFilters([
    => fn(, , , ) =>
        ->whereRaw(
            ,
            [$value}]
        ),
])

->actions(fn() => $actions
    ->create(fn() => $action
        ->validations([
            => ,
            => ,
        ])
        ->policy()
    )
    ->update(fn() => $action
        ->validations([
            => ,
            => ,
        ])
    )
    ->delete(fn() => $action
        ->authorize(fn(, ) => 
            ->user()->isAdmin()
        )
    )
)

POST   /query?model=App\Models\User          # Oluştur
PATCH  /query/{id}?model=App\Models\User     # Güncelle
DELETE /query/{id}?model=App\Models\User     # Sil

->paginationMode()  // Sonsuz kaydırma için
->paginationMode() // Standart sayfa tabanlı (varsayılan)
->paginationMode()    // Her şeyi döndür

->select([, , , ])

App\Models\Project::class => QueryGate::make()
    ->middleware([, ])
    ->query(fn(, ) => 
        ->where(, ->user()->tenant_id)
    )
    ->filters([
        => ,
        => ,
        => ,
    ])
    ->allowedFilters([
        => [, ],
        => [],
        => [],
    ])
    ->cache(300)
    ->actions(fn() => $actions
        ->create(fn() => $action
            ->validations([
                => ,
                => ,
            ])
            ->handle(function(, , ) {
                ->fill();
                ->tenant_id = ->user()->tenant_id;
                ->save();
                return ;
            })
        )
        ->update()
        ->delete()
    ),

App\Models\Product::class => QueryGate::make()
    ->query(fn() => ->selectRaw()
        ->leftJoin(, , , )
        ->groupBy()
    )
    ->filters([
        => ,
        => ,
        => ,
        => ,
    ])
    ->allowedFilters([
        => [, ],
        => [, , ],
        => [],
        => [],
    ])
    ->select([, , , , ])
    ->cache(600),

App\Models\Order::class => QueryGate::make()
    ->middleware([, ])
    ->query(fn() => ->selectRaw()
        ->groupBy()
    )
    ->filters([
        => ,
        => ,
    ])
    ->allowedFilters([
        => [, , ],
        => [, ],
    ])
    ->paginationMode()
    ->cache(1800, ),

composer require behindsolution/laravel-query-gate

php artisan vendor:publish --tag=query-gate-config

// ✅ İyi
->filters([=> ])
->allowedFilters([=> []])
->middleware([, ])

// ❌ Kötü
->filters([=> ])
->allowedFilters([=> [, , , ]]) // Çok izin verildi
// Middleware yok!

   ->query(fn() => ->with([, ]))