src/Controller/Ai/AcademicSearchHistoryController.php line 35

Open in your IDE?
  1. <?php
  3. namespace App\Controller\Ai;
  5. use App\Repository\AcademicSearchHistoryRepository;
  6. use App\Service\Ai\PluginAuthResolver;
  7. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  8. use Symfony\Component\HttpFoundation\JsonResponse;
  9. use Symfony\Component\HttpFoundation\Request;
  10. use Symfony\Component\Routing\Annotation\Route;
  12. /**
  13.  * Historique de recherche académique pour l'utilisateur courant.
  14.  *
  15.  * Endpoints (Phase 19+) :
  16.  *  - GET    /api/ai/academic/history?source=arxiv          → 10 dernières
  17.  *  - DELETE /api/ai/academic/history/{id}                  → supprime un item
  18.  *  - DELETE /api/ai/academic/history?source=arxiv          → vide une source
  19.  *  - DELETE /api/ai/academic/history                       → vide tout
  20.  *
  21.  * Auth : cookie session OU JWT Bearer (cf. PluginAuthResolver).
  22.  */
  23. #[Route('/api/ai/academic')]
  24. class AcademicSearchHistoryController extends AbstractController
  25. {
  26.     /** Sources autorisées (anti-injection). */
  27.     private const ALLOWED_SOURCES = ['arxiv', 'openalex', 'crossref', 'pubmed', 'hal', 'semantic-scholar'];
  29.     public function __construct(
  30.         private readonly AcademicSearchHistoryRepository $repo,
  31.         private readonly PluginAuthResolver $authResolver,
  32.     ) {}
  34.     #[Route('/history', name: 'ai_academic_history_list', methods: ['GET'], options: ['expose' => true])]
  35.     public function list(Request $request): JsonResponse
  36.     {
  37.         $user = $this->authResolver->resolve($request);
  38.         if (!$user) return new JsonResponse(['error' => 'unauthorized'], 401);
  40.         $source = (string) $request->query->get('source', '');
  41.         if (!in_array($source, self::ALLOWED_SOURCES, true)) {
  42.             return new JsonResponse(['error' => 'invalid_source', 'allowed' => self::ALLOWED_SOURCES], 400);
  43.         }
  44.         $limit = min(50, max(1, (int) $request->query->get('limit', 10)));
  46.         $entries = $this->repo->findRecent($user, $source, $limit);
  48.         return new JsonResponse([
  49.             'source' => $source,
  50.             'history' => array_map(fn($e) => [
  51.                 'id' => $e->getId(),
  52.                 'query' => $e->getQuery(),
  53.                 'hitCount' => $e->getHitCount(),
  54.                 'lastUsedAt' => $e->getLastUsedAt()->format(\DateTimeInterface::ATOM),
  55.                 'createdAt' => $e->getCreatedAt()->format(\DateTimeInterface::ATOM),
  56.             ], $entries),
  57.         ]);
  58.     }
  60.     #[Route('/history/{id}', name: 'ai_academic_history_delete', methods: ['DELETE'], requirements: ['id' => '\d+'], options: ['expose' => true])]
  61.     public function delete(int $id, Request $request): JsonResponse
  62.     {
  63.         $user = $this->authResolver->resolve($request);
  64.         if (!$user) return new JsonResponse(['error' => 'unauthorized'], 401);
  66.         $ok = $this->repo->deleteForUser($id, $user);
  67.         if (!$ok) return new JsonResponse(['error' => 'not_found'], 404);
  68.         return new JsonResponse(['deleted' => true]);
  69.     }
  71.     #[Route('/history', name: 'ai_academic_history_clear', methods: ['DELETE'], options: ['expose' => true])]
  72.     public function clear(Request $request): JsonResponse
  73.     {
  74.         $user = $this->authResolver->resolve($request);
  75.         if (!$user) return new JsonResponse(['error' => 'unauthorized'], 401);
  77.         $source = $request->query->get('source');
  78.         if ($source !== null && !in_array($source, self::ALLOWED_SOURCES, true)) {
  79.             return new JsonResponse(['error' => 'invalid_source'], 400);
  80.         }
  81.         $count = $this->repo->clearForUser($user, $source);
  82.         return new JsonResponse(['deleted' => $count]);
  83.     }
  84. }