Building a Complete Laravel Project

# CHAPTER 17

Building a Complete Laravel Project #

1. Introduction #

2. Learning Objectives #

• Architect a multi-table relational database schema using Migrations.

• Implement User Authentication using Laravel Breeze.

• Build a resourceful CRUD Controller to manage tasks.

• Restrict data access so users can only view their own tasks.

3. Project Overview: The Task Manager #

• Users must be able to register and log in.

• Logged-in users can Create, Read, Update, and Delete (CRUD) tasks.

• A task has a title, a description, and a status (completed or pending).

• Crucial Security Rule: User A cannot view, edit, or delete User B's tasks.

4. Step 1: Authentication and Database Setup #

1. 1. Create the project: composer create-project laravel/laravel taskmanager

1. 2. Configure your .env with your database credentials.

1. 3. Install Auth: composer require laravel/breeze --dev, then php artisan breeze:install blade, then npm install && npm run build.

5. Step 2: The Migration and Model #

php artisan make:model Task -mc

The Migration (database/migrations/...createtaskstable.php):

public function up() {
    Schema::create('tasks', function (Blueprint $table) {
        $table->id();
        $table->foreignId('user_id')->constrained()->onDelete('cascade'); // Links to users table
        $table->string('title');
        $table->text('description')->nullable();
        $table->boolean('is_completed')->default(false);
        $table->timestamps();
    });
}

Run php artisan migrate.

The Model (app/Models/Task.php):

class Task extends Model {
    protected $fillable = ['user_id', 'title', 'description', 'is_completed'];

    // Define the relationship: A Task belongs to a User
    public function user() {
        return $this->belongsTo(User::class);
    }
}

6. Step 3: The Routes #

routes/web.php:

use App\Http\Controllers\TaskController;

// Protect the entire CRUD system
Route::middleware('auth')->group(function () {
    Route::resource('tasks', TaskController::class);
});

7. Step 4: The Controller Logic #

app/Http/Controllers/TaskController.php:

<?php
namespace App\Http\Controllers;
use App\Models\Task;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;

class TaskController extends Controller
{
    // READ: Show ONLY the logged-in user's tasks
    public function index() {
        $tasks = Task::where(&#039;user_id', Auth::id())->get();
        return view(&#039;tasks.index', compact('tasks'));
    }

    // CREATE: Show Form
    public function create() {
        return view(&#039;tasks.create');
    }

    // CREATE: Save Data
    public function store(Request $request) {
        $request->validate([
            &#039;title' => 'required|max:255',
        ]);

        Task::create([
            &#039;user_id' => Auth::id(), // Force the task to belong to the current user!
            &#039;title' => $request->title,
            &#039;description' => $request->description,
        ]);

        return redirect()->route(&#039;tasks.index')->with('success', 'Task Created!');
    }

    // DELETE: Destroy Data
    public function destroy(Task $task) {
        // SECURITY: Ensure the user actually owns the task before deleting!
        if ($task->user_id !== Auth::id()) {
            abort(403); // Forbidden
        }
        
        $task->delete();
        return redirect()->route(&#039;tasks.index')->with('success', 'Task Deleted!');
    }
}

8. Step 5: The Blade Views #

<x-app-layout>
    <x-slot name="header">
        <h2 class="font-semibold text-xl text-gray-800 leading-tight">My Tasks</h2>
    </x-slot>

    <div class="py-12">
        <div class="max-w-7xl mx-auto sm:px-6 lg:px-8">
            <a href="{{ route(&#039;tasks.create') }}" class="bg-blue-500 text-white p-2 rounded">New Task</a>

            @foreach ($tasks as $task)
                <div class="bg-white overflow-hidden shadow-sm sm:rounded-lg mt-4 p-6">
                    <h3 class="font-bold">{{ $task->title }}</h3>
                    <p>{{ $task->description }}</p>
                    
                    <form method="POST" action="{{ route(&#039;tasks.destroy', $task->id) }}">
                        @csrf
                        @method(&#039;DELETE')
                        <button type="submit" class="text-red-500 mt-2">Delete</button>
                    </form>
                </div>
            @endforeach
        </div>
    </div>
</x-app-layout>

9. Reviewing the Architecture #

10. Summary #

1. 1. Migrations built the relational database.

1. 2. Models established the relationships.

1. 3. Auth Middleware protected the routes.

1. 4. Controllers handled validation and secure data insertion.

1. 5. Blade rendered the interface dynamically based on the data.

11. Next Chapter Recommendation #