Session 4: Kommentare und Benutzer

php artisan make:model Comment -m

// database/migrations/xxxx_create_comments_table.php

Schema::create('comments', function (Blueprint $table) {
    $table->id();
    $table->foreignId('post_id')->constrained()->onDelete('cascade');
    $table->foreignId('user_id')->constrained()->onDelete('cascade');
    $table->text('content');
    $table->timestamps();
});

php artisan migrate

// app/Models/Comment.php

<?php

namespace App\Models;

use Illuminate\Database\Eloquent\Model;
use Illuminate\Database\Eloquent\Relations\BelongsTo;

class Comment extends Model
{
    protected $fillable = ['post_id', 'user_id', 'content'];

    public function post(): BelongsTo
    {
        return $this->belongsTo(Post::class);
    }

    public function user(): BelongsTo
    {
        return $this->belongsTo(User::class);
    }
}

// app/Models/Post.php — in der Klasse ergänzen

use Illuminate\Database\Eloquent\Relations\HasMany;

public function comments(): HasMany
{
    return $this->hasMany(Comment::class);
}

$post = Post::find(1);
$comments = $post->comments;          // Alle Kommentare
$count = $post->comments->count();     // Anzahl

$comment = Comment::find(1);
$post = $comment->post;               // Der zugehörige Post
$author = $comment->user->name;       // Name des Autors

// app/Http/Controllers/PostController.php — show-Methode anpassen

public function show(Post $post)
{
    $post->load('comments.user');

    return view('posts.show', compact('post'));
}

{{-- resources/views/posts/show.blade.php — nach dem Post-Inhalt, vor den Buttons --}}

<section class="mt-5">
    <h3>Kommentare ({{ $post->comments->count() }})</h3>

    @forelse($post->comments as $comment)
        <div class="card mb-2">
            <div class="card-body">
                <div class="d-flex justify-content-between align-items-start">
                    <div>
                        <strong>{{ $comment->user->name }}</strong>
                        <small class="text-muted ms-2">{{ $comment->created_at->diffForHumans() }}</small>
                    </div>

                    @if(auth()->id() === $comment->user_id || auth()->user()?->isAdmin())
                        <form action="/comments/{{ $comment->id }}" method="POST">
                            @csrf
                            @method('DELETE')
                            <button type="submit" class="btn btn-sm btn-outline-danger"
                                    onclick="return confirm('Kommentar löschen?')">
                                &times;
                            </button>
                        </form>
                    @endif
                </div>
                <p class="mb-0 mt-2">{{ $comment->content }}</p>
            </div>
        </div>
    @empty
        <p class="text-muted">Noch keine Kommentare. Schreibe den ersten.</p>
    @endforelse
</section>

@if(auth()->id() === $comment->user_id || auth()->user()?->isAdmin())

{{-- resources/views/posts/show.blade.php — nach der Kommentar-Liste --}}

@auth
    <div class="card mt-4">
        <div class="card-body">
            <h5>Kommentar schreiben</h5>
            <form action="/posts/{{ $post->id }}/comments" method="POST">
                @csrf
                <div class="mb-3">
                    <textarea
                        name="content"
                        class="form-control @error('content') is-invalid @enderror"
                        rows="3"
                        placeholder="Dein Kommentar..."
                    >{{ old('content') }}</textarea>
                    @error('content')
                        <div class="invalid-feedback">{{ $message }}</div>
                    @enderror
                </div>
                <button type="submit" class="btn btn-primary">Kommentar speichern</button>
            </form>
        </div>
    </div>
@else
    <div class="alert alert-info mt-4">
        <a href="/login">Melde dich an</a>, um Kommentare zu schreiben.
    </div>
@endauth

// routes/web.php — innerhalb einer auth-Middleware-Gruppe

Route::middleware('auth')->group(function () {
    Route::post('/posts/{post}/comments', [CommentController::class, 'store']);
    Route::delete('/comments/{comment}', [CommentController::class, 'destroy']);
});

php artisan make:controller CommentController

// app/Http/Controllers/CommentController.php

<?php

namespace App\Http\Controllers;

use App\Models\Comment;
use App\Models\Post;
use Illuminate\Http\Request;

class CommentController extends Controller
{
    public function store(Request $request, Post $post)
    {
        $validated = $request->validate([
            'content' => 'required|min:3',
        ]);

        $post->comments()->create([
            'user_id' => auth()->id(),
            'content' => $validated['content'],
        ]);

        return redirect("/posts/{$post->id}")
            ->with('success', 'Kommentar gespeichert.');
    }

    public function destroy(Comment $comment)
    {
        $this->authorize('delete', $comment);

        $postId = $comment->post_id;
        $comment->delete();

        return redirect("/posts/{$postId}")
            ->with('success', 'Kommentar gelöscht.');
    }
}

php artisan make:policy CommentPolicy --model=Comment

// app/Policies/CommentPolicy.php

<?php

namespace App\Policies;

use App\Models\Comment;
use App\Models\User;

class CommentPolicy
{
    public function delete(User $user, Comment $comment): bool
    {
        // Eigene Kommentare darf jeder löschen
        if ($user->id === $comment->user_id) {
            return true;
        }

        // Admins dürfen alle Kommentare löschen
        return $user->isAdmin();
    }
}

// app/Http/Controllers/PostController.php — index-Methode anpassen

public function index()
{
    $posts = Post::withCount('comments')->latest()->get();

    return view('posts.index', compact('posts'));
}

{{-- In der Posts-Übersicht, beim einzelnen Post --}}

<small class="text-muted">
    {{ $post->created_at->diffForHumans() }} · {{ $post->comments_count }} Kommentare
</small>

Browser → Route → Middleware (auth/admin) → Controller → Model (DB) → View → Browser

// Im Model definieren
public function comments(): HasMany {
    return $this->hasMany(Comment::class);
}

public function post(): BelongsTo {
    return $this->belongsTo(Post::class);
}

// Nutzen
$post->comments;                        // Alle Kommentare
$comment->user->name;                   // Name des Autors
$post->comments()->create([...]);       // Kommentar erstellen
Post::withCount('comments')->get();     // Mit Anzahl laden

auth()->check()                   // Eingeloggt?
auth()->user()                    // User-Objekt
auth()->id()                      // User-ID
auth()->user()->isAdmin()         // Admin?
$this->authorize('delete', $model); // Policy prüfen

@auth ... @endauth        // Nur für eingeloggte User
@guest ... @endguest      // Nur für Gäste

{{-- Rollencheck --}}
@if(auth()->user()?->isAdmin())
    {{-- Admin-Inhalt --}}
@endif