invoiceninja/app/Http/Controllers/DocumentController.php

<?php namespace App\Http\Controllers;

use Datatable;
use Input;
use Redirect;
use Session;
use URL;
use Utils;
use View;
use Validator;
use Response;
use App\Models\Document;
use App\Ninja\Repositories\DocumentRepository;

class DocumentController extends BaseController
{
    protected $documentRepo;
    protected $model = 'App\Models\Document';

    public function __construct(DocumentRepository $documentRepo)
    {
        // parent::__construct();

        $this->documentRepo = $documentRepo;
    }
    
    public function get($publicId)
    {
        $document = Document::scope($publicId)
                        ->firstOrFail();
        
        if(!$this->checkViewPermission($document, $response)){
            return $response;
        }
        
        $direct_url = $document->getDirectUrl();
        if($direct_url){
            return redirect($direct_url);
        }
        
        
        $response = Response::make($document->getRaw(), 200);
        $response->header('content-type', $document->type);
        
        return $response;
    }
    
    public function getPreview($publicId)
    {
        $document = Document::scope($publicId)
                        ->firstOrFail();
        
        if(!$this->checkViewPermission($document, $response)){
            return $response;
        }
        
        if(empty($document->preview)){
            return Response::view('error', array('error'=>'Preview does not exist!'), 404);
        }
        
        $direct_url = $document->getDirectPreviewUrl();
        if($direct_url){
            return redirect($direct_url);
        }
        
        $extension = pathinfo($document->preview, PATHINFO_EXTENSION);
        $response = Response::make($document->getRawPreview(), 200);
        $response->header('content-type', Document::$extensions[$extension]);
        
        return $response;
    }
    
    public function postUpload()
    {
        if (!Utils::isPro()) {
            return;
        }
        
        if(!$this->checkCreatePermission($response)){
            return $response;
        }
                
        $document = Input::all();
        
        $response = $this->documentRepo->upload($document);
        return $response;
    }
}