added support for adding/removing movies from a movie list

app/Http/Controllers/AuthController.php

@@ -38,7 +38,6 @@ class AuthController extends Controller
         Auth::guard('web')->logout();
 
         $request->session()->invalidate();
-        $request->session()->regenerateToken();
 
         return response()->json(['message' => 'Logged out.']);
     }

app/Http/Controllers/Controller.php

@@ -2,7 +2,9 @@
 
 namespace App\Http\Controllers;
 
+use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
+
 abstract class Controller
 {
-    //
+    use AuthorizesRequests;
 }

app/Http/Controllers/MovieController.php

@@ -56,11 +56,10 @@ class MovieController extends Controller
      * @throws MovieNotFoundException
      * @throws MovieDatabaseException
      */
-    public function search(Request $request)
+    public function search(MovieDbInterface $movieDb, Request $request, string $query)
     {
-        $searchTerm = $request->input('term');
-        $movie = $this->movieDb->search($searchTerm);
+        $movies = $movieDb->search($query, $request->input('options', []));
 
-        return response()->json(['results' => $movie]);
+        return response()->json(['results' => $movies]);
     }
 }

app/Http/Controllers/MovieListController.php

@@ -3,6 +3,9 @@
 namespace App\Http\Controllers;
 
 use App\Http\Requests\CreateMovieListRequest;
+use App\Http\Requests\UpdateMovieListRequest;
+use App\Interfaces\MovieDbInterface;
+use App\Models\Movie;
 use App\Models\MovieList;
 use Illuminate\Database\Eloquent\ModelNotFoundException;
 use Illuminate\Http\Request;
@@ -23,6 +26,8 @@ class MovieListController extends Controller
      */
     public function store(CreateMovieListRequest $request)
     {
+        $this->authorize('create', MovieList::class);
+
         $validated = $request->validated();
         $movieList = MovieList::create([
             ...$validated,
@@ -38,6 +43,7 @@ class MovieListController extends Controller
      */
     public function show(MovieList $movieList)
     {
+        $this->authorize('view', $movieList);
         try {
             return $movieList->load('movies');
         } catch (ModelNotFoundException $e) {
@@ -48,7 +54,7 @@ class MovieListController extends Controller
     /**
      * Update the specified resource in storage.
      */
-    public function update(Request $request, MovieList $movieList)
+    public function update(UpdateMovieListRequest $request, MovieList $movieList)
     {
         $validated = $request->validated();
         $movieList->update($validated);
@@ -61,6 +67,29 @@ class MovieListController extends Controller
      */
     public function destroy(MovieList $movieList)
     {
+        $this->authorize('delete', $movieList);
         $movieList->delete();
     }
+
+    public function addMovie(MovieDbInterface $movieDb, Request $request, MovieList $movieList)
+    {
+        $this->authorize('update', $movieList);
+        $movieResult = $movieDb->find($request->input('movie')['imdbId'], ['type' => 'imdb']);
+        $movie = Movie::where('imdb_id', $movieResult->imdbId)->first();
+
+        $movieList->movies()->attach($movie);
+        $movieList->load('movies');
+
+        return response()->json($movieList);
+    }
+
+    public function removeMovie(MovieDbInterface $movieDb, Request $request, MovieList $movieList, Movie $movie)
+    {
+        $this->authorize('update', $movieList);
+
+        $movieList->movies()->detach($movie);
+        $movieList->load('movies');
+
+        return response()->json($movieList);
+    }
 }

app/Http/Requests/UpdateMovieListRequest.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class UpdateMovieListRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return $this->user()->can('update', $this->route('movieList'));
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'name' => 'required|string|max:255',
+            'is_public' => 'boolean',
+            'movies' => 'array',
+            'slug' => 'string',
+        ];
+    }
+}