Add UpdateController for composer update via API

Introduces UpdateController to allow triggering 'composer update digitaldiff/diffbase' via an authenticated API endpoint. Updates README with cronjob instructions and roadmap, comments out releases slicing in ApiController, and fixes form action in index.twig.

Author: stefanladner

README.md

@@ -10,5 +10,25 @@ composer require "digitaldiff/diffbase" -w && php craft plugin/install diffbase
 - Test the API Key by going to ```yourdomain.com/api/info?key=```
 - Copy the API key to flow.diff.ch/admin and make a new entry with the API key and the site url 
 
+## Cronjob
+```
+cd /home/<CHANGEME>/public_html/<CRAFT_DIRECTORY> && composer update digitaldiff/diffbase --no-interaction --no-progress
+```
+
 ## Compatibility
-Only works/tested with Craft CMS 5.x
+Only works/tested with Craft CMS 5.x
+
+## roadmap / ideas
+- domain check
+- spf check
+- licence infos
+- history (uptime)
+- default dashboard widgets
+  - contact
+  - support
+  - urgent informations
+  - diff.blog
+- start que from dashboard
+- empty cache from dashboard
+- go directly to /admin
+- 

src/Plugin.php

@@ -81,7 +81,8 @@ function(RegisterTemplateRootsEvent $event) {
             UrlManager::class,
             UrlManager::EVENT_REGISTER_SITE_URL_RULES,
             function (RegisterUrlRulesEvent $event) {
-                $event->rules['api/info'] = 'diffbase/api/info'; // Maps 'api/info' to the ApiController
+                $event->rules['api/info'] = 'diffbase/api/info'; // Bestehend
+//                $event->rules['actions/diffbase/update/composer-update'] = 'diffbase/update/composer-update'; // Neu
             }
         );
 

src/controllers/ApiController.php

@@ -414,7 +414,7 @@ private function processCraftUpdates($cmsUpdate): array
             'package_name' => $cmsUpdate->packageName ?? 'craftcms/cms',
             'php_constraint' => $cmsUpdate->phpConstraint ?? null,
             'total_releases' => count($cmsUpdate->releases ?? []),
-            'releases' => array_slice($cmsUpdate->releases ?? [], 0, 3)
+            //'releases' => array_slice($cmsUpdate->releases ?? [], 0, 3)
         ];
     }
 

src/controllers/UpdateController.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace digitaldiff\diffbase\controllers;
+
+use Craft;
+use craft\web\Controller;
+use yii\web\Response;
+
+class UpdateController extends Controller
+{
+    protected array|bool|int $allowAnonymous = ['composer-update'];
+    public $enableCsrfValidation = false;
+
+    public function actionComposerUpdate(): Response
+    {
+        $plugin = Craft::$app->getPlugins()->getPlugin('diffbase');
+        $settings = $plugin->getSettings();
+
+        $providedKey = Craft::$app->getRequest()->getParam('key') ??
+            Craft::$app->getRequest()->getHeaders()->get('X-API-Key');
+
+        if (!$providedKey || $providedKey !== $settings->apiKey) {
+            return $this->asJson(['error' => 'Invalid API key'], 401);
+        }
+
+        set_time_limit(300);
+
+        $command = 'cd ' . CRAFT_BASE_PATH . ' && composer update digitaldiff/diffbase 2>&1';
+        $output = shell_exec($command);
+
+        return $this->asJson([
+            'success' => !str_contains($output, 'error'),
+            'output' => $output,
+            'timestamp' => date('Y-m-d H:i:s')
+        ]);
+    }
+}

src/templates/index.twig

@@ -43,7 +43,7 @@ Notes:
                 Kopieren
               </button>
 
-              <form method="post" action="{{ actionUrl('_diffbase/cp/generate-api-key') }}" style="display: inline;">
+              <form method="post" action="{{ actionUrl('diffbase/cp/generate-api-key') }}" style="display: inline;">
                 {{ csrfInput() }}
                 {{ redirectInput('_diffbase') }}
                 <button type="submit" class="btn submit">