Profile System

Profile System

User profile dashboard, settings management, privacy controls, and account deletion. Stats aggregated from Redis with MySQL fallback for pre-v5 users. Fully audited for v5 — all controllers, stores, tests confirmed correct. 35 tests across 7 files. No user tag editing (admin-only). User photo delete flows call MetricsService::deletePhoto() before soft delete.

Key Files

• app/Http/Controllers/User/ProfileController.php — Dashboard data (index), GeoJSON (geojson), CSV export (download)
• app/Http/Controllers/ApiSettingsController.php — Privacy toggles, whitelisted setting updates, legacy key remapping
• app/Http/Controllers/API/DeleteAccountController.php — Account deletion with Redis cleanup across all location scopes
• app/Http/Controllers/User/UserPhotoController.php — Bulk tag, bulk delete, filter, previous custom tags
• app/Http/Controllers/User/Photos/UsersUploadsController.php — Paginated photo listing with v5 tag structure
• app/Services/LevelService.php — XP-threshold based levels (12 levels, config-driven via config/levels.php)
• app/Services/Redis/RedisMetricsCollector.php — getUserMetrics() returns uploads/xp/litter/streak from Redis
• app/Services/Redis/RedisKeys.php — Cluster-safe key generation for all scopes
• resources/js/stores/profile.js — Pinia store: FETCH_PROFILE() from /api/user/profile/index
• resources/js/stores/settings.js — Pinia store: UPDATE_SETTING, TOGGLE_PRIVACY, DELETE_ACCOUNT
• resources/js/views/Profile/Profile.vue — Tab container (Dashboard, Photos, Settings) with query-param routing
• resources/js/views/Profile/components/ProfileDashboard.vue — Level card, stats grid, rank, achievements, locations, team
• resources/js/views/Profile/components/ProfilePhotos.vue — Upload count, links to /uploads, /upload, /tag
• resources/js/views/Profile/components/ProfileSettings.vue — Account fields, preference toggles, privacy toggles, delete account
• resources/js/views/Profile/components/SettingsField.vue — Inline-editable text field with save/cancel
• resources/js/views/Profile/components/SettingsToggle.vue — Toggle switch component
• tests/Feature/User/ProfileIndexTest.php — 4 tests (structure, auth, location counts, rank total)
• tests/Feature/User/PublicProfileTest.php — 4 tests (public profile data, private returns, privacy settings, 404)
• tests/Feature/User/ProfileGeojsonTest.php — 1 test (geojson returns only admin-approved photos, uses summary JSON not result_string)
• tests/Feature/User/SettingsProfileTest.php — 10 tests (whitelist, validation, legacy remapping, old routes)
• tests/Feature/User/DeleteAccountTest.php — 4 tests (Redis cleanup, photo preservation, password validation)
• tests/Feature/User/UserPhotoBulkDeleteTest.php — 5 tests (soft-delete, counters, ownership, metrics, selectAll)
• tests/Feature/Photos/WebDeletePhotoTest.php — 5 tests (single delete, ownership, counters, metrics reversal)

Invariants

1. All profile routes use auth:sanctum. Not auth:api. Use actingAs($user) in tests (no guard argument).
2. Redis-first with MySQL fallback. RedisMetricsCollector::getUserMetrics() returns Redis data; ProfileController falls back to MySQL. resolveUserStats() batches the DB fallback into a single selectRaw('COUNT(*), SUM(total_tags)') query. Litter stat falls back to Photo::sum('total_tags') (not deprecated users.total_litter).
3. Rank from Redis ZSET with MySQL fallback. ZREVRANK on {g}:lb:xp; if false, count users with more XP via User::where('xp', '>', $xp)->count() + 1.
4. Level updated on profile view. If $user->level != calculated, $user->save() syncs it.
5. Settings whitelist enforced server-side. ApiSettingsController::ALLOWED_SETTINGS = ['name', 'username', 'email', 'global_flag', 'picked_up', 'previous_tags', 'emailsub', 'public_profile']. Any other key returns 422. 5a. users.public_photos controls upload visibility default. Boolean, default true. New uploads inherit this value unless overridden by an explicit request param. School team uploads always override to false regardless. Updated via the settings system. Own-user photo queries (e.g. GET /api/v3/user/photos) include all photos regardless of is_public — the user sees their own private photos.
6. Legacy key remapping. items_remaining → picked_up with inverted boolean (backward compat for old mobile clients).
7. Photos preserved on account deletion. User hard-deleted, photos remain (public contribution to map).
8. Redis cleanup is comprehensive. Removes user from XP and contributor rankings for every location scope (global, country, state, city), plus user stats hash, tags hash, and streak bitmap.
9. Privacy toggles are boolean columns. show_name_maps, show_username_maps, show_name_createdby, show_username_createdby on User model. Controllers toggle and return new value.
10. Photo deletion reverses metrics. MetricsService::deletePhoto() called for processed photos before soft-delete. Decrements user.xp and user.total_images.
11. GeoJSON uses summary JSON, not result_string. ProfileController@geojson returns properties.summary (v5 JSON array), not properties.result_string (deprecated v4 string). Frontend popup.js expects summary.

Routes

SPA routes — auth:sanctum (session cookies + Sanctum tokens)

# Profile dashboard
GET    /api/user/profile/index                    → ProfileController@index
GET    /api/user/profile/map                      → ProfileController@geojson
GET    /api/user/profile/download                 → ProfileController@download

# Photo management (SPA)
GET    /api/user/profile/photos/index             → UserPhotoController@index
GET    /api/user/profile/photos/filter            → UserPhotoController@filter
POST   /api/user/profile/photos/tags/bulkTag      → UserPhotoController@bulkTag
POST   /api/user/profile/photos/delete            → UserPhotoController@destroy

# Single-photo delete (SPA legacy route, also auth:sanctum)
POST   /api/profile/photos/delete                 → PhotosController@deleteImage

# Settings (SPA — new endpoints)
POST   /api/settings/update                       → ApiSettingsController@update
POST   /api/settings/delete-account               → DeleteAccountController

# Privacy toggles (SPA)
POST   /api/settings/privacy/maps/name            → ApiSettingsController@mapsName
POST   /api/settings/privacy/maps/username        → ApiSettingsController@mapsUsername
POST   /api/settings/privacy/leaderboard/name     → ApiSettingsController@leaderboardName
POST   /api/settings/privacy/leaderboard/username  → ApiSettingsController@leaderboardUsername
POST   /api/settings/privacy/createdby/name       → ApiSettingsController@createdByName
POST   /api/settings/privacy/createdby/username    → ApiSettingsController@createdByUsername
POST   /api/settings/privacy/toggle-previous-tags  → ApiSettingsController@togglePreviousTags

Legacy mobile routes — auth:api (Passport tokens)

# Settings (mobile — legacy endpoints, separate from SPA)
POST   /api/settings/details                      → UsersController@details
PATCH  /api/settings/details/password             → UsersController@changePassword
POST   /api/settings/privacy/update               → UsersController@togglePrivacy
POST   /api/settings/phone/submit                 → UsersController@phone
POST   /api/settings/phone/remove                 → UsersController@removePhone
POST   /api/settings/toggle                       → UsersController@togglePresence
POST   /api/settings/email/toggle                 → EmailSubController@toggleEmailSub
GET    /api/settings/flags/countries              → SettingsController@getCountries
POST   /api/settings/save-flag                    → SettingsController@saveFlag
PATCH  /api/settings                              → SettingsController@update

# Photo delete (mobile)
DELETE /api/photos/delete                         → ApiPhotosController@deleteImage

v3 routes — auth:api,web (both guards)

GET    /api/v3/user/photos                        → UsersUploadsController@index
GET    /api/v3/user/photos/stats                  → UsersUploadsController@stats
PATCH  /api/v3/photos/{id}/visibility             → PhotoVisibilityController (or inline)
                                                     Owner only. Blocked for school team photos (403).
                                                     Toggles is_public per-photo. Triggers dirty tile marking via PhotoObserver.

Patterns

ProfileController@index response

return [
    'user' => [id, name, username, avatar, created_at, member_since, global_flag, public_profile],
    'stats' => [uploads, litter, xp, streak, littercoin, photo_percent, tag_percent],
    'level' => [level, title, xp_into_level, xp_for_next, xp_remaining, progress_percent],
    'rank' => [global_position, global_total, percentile],
    'achievements' => [unlocked, total],
    'locations' => [countries, states, cities],
    'global_stats' => [total_photos, total_tags],
    'team' => [id, name] | null,
];