| Server IP : 167.235.224.122 / Your IP : 216.73.216.110 Web Server : Apache/2.4.58 (Ubuntu) System : Linux newplayground 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul 1 21:33:11 UTC 2026 aarch64 User : deploy ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /var/www/html/emaji/app/Http/Controllers/ |
Upload File : |
<?php
namespace App\Http\Controllers;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use App\Models\OrganizationCredential;
class OrganizationCredentialController extends Controller
{
/**
* Show the organization's credentials (wallet).
*/
public function index()
{
$user = Auth::user();
if (!$user->activeOrganizationId()) {
return redirect()->route('employer.jobs')
->with('error', 'You are not associated with an organization.');
}
$organization = $user->activeOrganization();
$credentials = $organization->credentials()->orderBy('created_at', 'desc')->get();
return view('organization.credentials.index', compact('organization', 'credentials'));
}
/**
* Show the form for uploading a new credential.
*/
public function create()
{
$user = Auth::user();
if (!$user->activeOrganizationId()) {
return redirect()->route('employer.jobs')
->with('error', 'You are not associated with an organization.');
}
$organization = $user->activeOrganization();
return view('organization.credentials.create', compact('organization'));
}
/**
* Store a newly uploaded credential.
*/
public function store(Request $request)
{
$user = Auth::user();
if (!$user->activeOrganizationId()) {
return redirect()->route('employer.jobs')
->with('error', 'You are not associated with an organization.');
}
$validated = $request->validate([
'credential_json' => ['required', 'string'],
]);
// Parse the JSON
$credentialData = json_decode($validated['credential_json'], true);
if (json_last_error() !== JSON_ERROR_NONE) {
return back()
->withInput()
->withErrors(['credential_json' => 'Invalid JSON format. Please check your credential file.']);
}
// Validate it's an OpenBadges3 credential
if (!$this->isValidOpenBadges3($credentialData)) {
return back()
->withInput()
->withErrors(['credential_json' => 'This does not appear to be a valid OpenBadges 3.0 credential.']);
}
// Extract data from the credential
$extractedData = $this->extractCredentialData($credentialData);
// Create the credential record
$credential = OrganizationCredential::create([
'organization_id' => $user->activeOrganizationId(),
'raw_vc' => $credentialData,
'decoded_json' => $credentialData,
'credential_identifier' => $extractedData['credential_identifier'],
'achievement_id' => $extractedData['achievement_id'],
'name' => $extractedData['name'],
'issuer_identifier' => $extractedData['issuer_identifier'],
'issuer_name' => $extractedData['issuer_name'],
'issued_on' => $extractedData['issued_on'],
'expires_on' => $extractedData['expires_on'],
'image_id' => $extractedData['image_id'],
'is_active' => true,
]);
// Extract and store maturity level
$maturityLevel = $credential->extractMaturityLevel();
if ($maturityLevel !== null) {
$credential->update(['extracted_maturity_level' => $maturityLevel]);
}
return redirect()->route('organization.credentials.index')
->with('success', 'Credential uploaded successfully!' .
($maturityLevel !== null ? " Maturity level {$maturityLevel} detected." : ''));
}
/**
* Delete a credential.
*/
public function destroy(OrganizationCredential $credential)
{
$user = Auth::user();
if (!$user->activeOrganizationId() || $credential->organization_id !== $user->activeOrganizationId()) {
return redirect()->route('employer.jobs')
->with('error', 'Unauthorized action.');
}
$credential->delete();
return redirect()->route('organization.credentials.index')
->with('success', 'Credential deleted successfully.');
}
/**
* Validate if the credential is OpenBadges 3.0 format.
*/
private function isValidOpenBadges3(array $credential): bool
{
// Check for required OB3 fields
if (!isset($credential['@context']) || !isset($credential['type'])) {
return false;
}
// Check context includes OpenBadges v3
$context = is_array($credential['@context']) ? $credential['@context'] : [$credential['@context']];
$hasOB3Context = false;
foreach ($context as $ctx) {
if (is_string($ctx) && (
str_contains($ctx, 'openbadges') ||
str_contains($ctx, 'ob/v3p0') ||
str_contains($ctx, '1edtech.org')
)) {
$hasOB3Context = true;
break;
}
}
if (!$hasOB3Context) {
return false;
}
// Check for VerifiableCredential or OpenBadgeCredential type
$types = is_array($credential['type']) ? $credential['type'] : [$credential['type']];
$validTypes = ['VerifiableCredential', 'OpenBadgeCredential', 'AchievementCredential'];
foreach ($types as $type) {
if (in_array($type, $validTypes)) {
return true;
}
}
return false;
}
/**
* Extract relevant data from the credential.
*/
private function extractCredentialData(array $credential): array
{
$data = [
'credential_identifier' => $credential['id'] ?? null,
'achievement_id' => null,
'name' => null,
'issuer_identifier' => null,
'issuer_name' => null,
'issued_on' => null,
'expires_on' => null,
'image_id' => null,
];
// Extract achievement data
if (isset($credential['credentialSubject']['achievement'])) {
$achievement = $credential['credentialSubject']['achievement'];
$data['achievement_id'] = $achievement['id'] ?? null;
$data['name'] = $achievement['name'] ?? null;
if (isset($achievement['image'])) {
$image = $achievement['image'];
$data['image_id'] = is_string($image) ? $image : ($image['id'] ?? null);
}
}
// Extract issuer data
if (isset($credential['issuer'])) {
$issuer = $credential['issuer'];
if (is_string($issuer)) {
$data['issuer_identifier'] = $issuer;
} else {
$data['issuer_identifier'] = $issuer['id'] ?? null;
$data['issuer_name'] = $issuer['name'] ?? null;
}
}
// Extract dates
if (isset($credential['issuanceDate'])) {
$data['issued_on'] = date('Y-m-d', strtotime($credential['issuanceDate']));
}
if (isset($credential['expirationDate'])) {
$data['expires_on'] = date('Y-m-d', strtotime($credential['expirationDate']));
}
return $data;
}
}