feat: password rotation, PPSK management, VLAN/AP groups

- Add password rotation: RotatePasswords console command + migration + service updates - Add PPSK management: UnifiPpsk model, migration, SyncPpskSchedules console - Add VLAN groups and AP groups: VlanGroupController, ApGroupController, model, migration - Add RebootAllAps console command - Add in_alert column to device states - Wire new features through service provider, routes, and existing controllers/services Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-19 17:54:24 -04:00
parent ce3217d8f4
commit 0802ef35f3
22 changed files with 1771 additions and 305 deletions
--- a/src/Console/SyncPpskSchedules.php
+++ b/src/Console/SyncPpskSchedules.php
@@ -0,0 +1,94 @@
+<?php
+
+namespace Dashboard\Unifi\Console;
+
+use App\Models\Setting;
+use Dashboard\Unifi\Models\UnifiPpsk;
+use Dashboard\Unifi\Services\UnifiApiClient;
+use Illuminate\Console\Command;
+
+class SyncPpskSchedules extends Command
+{
+    protected $signature   = 'unifi:sync-ppsk-schedules {--force : Run even if PPSK scheduling is disabled}';
+    protected $description = 'Enable or disable PPSKs based on their weekly half-hour schedule, kicking active clients when disabling';
+
+    public function handle(UnifiApiClient $unifi): int
+    {
+        if (! $this->option('force') && ! Setting::get('unifi.ppsk_scheduling.enabled')) {
+            return self::SUCCESS;
+        }
+
+        $tz   = Setting::get('unifi.timezone', 'UTC');
+        $now  = now($tz);
+        $day  = $now->dayOfWeek;                                 // 0=Sun … 6=Sat
+        $slot = $now->hour * 2 + ($now->minute >= 30 ? 1 : 0);  // 0–47
+
+        $ppsks = UnifiPpsk::whereNotNull('schedule')->get();
+
+        if ($ppsks->isEmpty()) {
+            return self::SUCCESS;
+        }
+
+        // Fetch network confs once so we can resolve vlan → networkconf_id on re-enable
+        $networksByVlan = [];
+        try {
+            foreach ($unifi->getNetworkConfs() as $n) {
+                if (isset($n['vlan'])) {
+                    $networksByVlan[(int) $n['vlan']] = $n;
+                }
+            }
+        } catch (\Throwable $e) {
+            $this->warn("Could not fetch network configs: {$e->getMessage()}");
+        }
+
+        foreach ($ppsks as $ppsk) {
+            $shouldBeOn = (bool) ($ppsk->schedule[$day * 48 + $slot] ?? true);
+
+            if ($shouldBeOn && $ppsk->state === 'held') {
+                $this->enablePpsk($ppsk, $unifi, $networksByVlan);
+            } elseif (! $shouldBeOn && $ppsk->state === 'active' && $ppsk->unifi_id) {
+                $this->disablePpsk($ppsk, $unifi);
+            }
+        }
+
+        return self::SUCCESS;
+    }
+
+    private function enablePpsk(UnifiPpsk $ppsk, UnifiApiClient $unifi, array $networksByVlan): void
+    {
+        try {
+            $data = [
+                'name'         => $ppsk->name,
+                'x_passphrase' => $ppsk->x_passphrase,
+                'wlan_id'      => $ppsk->wlan_id,
+            ];
+
+            if ($ppsk->vlan && isset($networksByVlan[$ppsk->vlan])) {
+                $data['networkconf_id'] = $networksByVlan[$ppsk->vlan]['_id'];
+            }
+
+            $result = $unifi->createPpsk($data);
+            $raw    = $result[0] ?? $result;
+            $newId  = $raw['_id'] ?? null;
+
+            $ppsk->update(['state' => 'active', 'unifi_id' => $newId]);
+            $this->info("Enabled:  {$ppsk->name} (wlan {$ppsk->wlan_id})");
+        } catch (\Throwable $e) {
+            $this->error("Failed to enable PPSK \"{$ppsk->name}\": {$e->getMessage()}");
+        }
+    }
+
+    private function disablePpsk(UnifiPpsk $ppsk, UnifiApiClient $unifi): void
+    {
+        try {
+            $kicked = $unifi->kickClientsForPpsk($ppsk->unifi_id);
+            $unifi->deletePpsk($ppsk->unifi_id);
+            $ppsk->update(['state' => 'held', 'unifi_id' => null]);
+
+            $suffix = $kicked > 0 ? " — kicked {$kicked} client(s)" : '';
+            $this->info("Disabled: {$ppsk->name}{$suffix}");
+        } catch (\Throwable $e) {
+            $this->error("Failed to disable PPSK \"{$ppsk->name}\": {$e->getMessage()}");
+        }
+    }
+}