feat: implement media download functionality and enhance case handling in reports

app/Http/Controllers/Client/Doctor/ReportController.php

@@ -4,6 +4,7 @@ namespace App\Http\Controllers\Client\Doctor;
 
 use App\Http\Controllers\Controller;
 use App\Http\Requests\Client\ReportSubmitRequest;
+use App\Http\Resources\Client\CaseResource;
 use App\Http\Resources\Client\ReportResource;
 use App\Models\Document;
 use App\Models\Report;
@@ -32,8 +33,13 @@ class ReportController extends Controller
             ->withQueryString()
             ->onEachSide(1);
 
+        $pendingCases = $this->caseService->isDoctor(Auth::user())
+            ? CaseResource::collection($this->caseService->pendingForUser(Auth::user())->get())
+            : null;
+
         return Inertia::client('Dashboard/Reports/Index', [
             'reports' => ReportResource::collection($reports),
+            'pendingCases' => $pendingCases,
         ]);
     }
 

app/Http/Controllers/Client/MediaController.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Http\Controllers\Client;
+
+use App\Http\Controllers\Controller;
+use App\Models\Medium;
+use App\Services\Document\CaseService;
+use App\Services\FileStorageService;
+use Illuminate\Support\Facades\Auth;
+
+class MediaController extends Controller
+{
+    protected CaseService $caseService;
+    protected FileStorageService $fileStorageService;
+
+    public function __construct(CaseService $caseService, FileStorageService $fileStorageService)
+    {
+        $this->caseService = $caseService;
+        $this->fileStorageService = $fileStorageService;
+    }
+
+    public function download(Medium $medium)
+    {
+        abort_unless($this->caseService->canAccessMedium($medium, Auth::user()), 403);
+
+        return $this->fileStorageService->downloadFile($medium);
+    }
+}

app/Http/Resources/Client/CaseDetailResource.php

@@ -69,7 +69,7 @@ class CaseDetailResource extends JsonResource
         return [
             'id' => $medium->id,
             'filename' => $medium->filename,
-            'url' => $medium->url,
+            'url' => $medium->isPrivate() ? route('dashboard.media.download', $medium) : $medium->url,
             'mime_type' => $medium->mime_type,
         ];
     }

app/Services/Document/CaseService.php

@@ -9,6 +9,7 @@ use App\Enums\ReportStatusEnum;
 use App\Enums\UserEnum;
 use App\Enums\WalletTransactionReasonEnum;
 use App\Models\Document;
+use App\Models\Medium;
 use App\Models\Report;
 use App\Models\User;
 use App\Services\FileStorageService;
@@ -51,6 +52,14 @@ class CaseService
             || $document->assignments()->where('user_id', $user->id)->exists();
     }
 
+    public function canAccessMedium(Medium $medium, User $user): bool
+    {
+        $documents = $medium->documents()->get()
+            ->merge($medium->reports()->with('document')->get()->pluck('document'));
+
+        return $documents->contains(fn ($document) => $this->canAccess($document, $user));
+    }
+
     public function canReport(Document $document, User $user): bool
     {
         return $this->isDoctor($user)
@@ -162,7 +171,7 @@ class CaseService
             ->orWhereHas('assignments', fn ($assignmentQuery) => $assignmentQuery->where('user_id', $user->id));
     }
 
-    protected function isDoctor(User $user): bool
+    public function isDoctor(User $user): bool
     {
         return $user->level === UserEnum::Doctor->value;
     }