fix: link old

app/Http/Controllers/Hooks/PhotoOriginController.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Http\Controllers\Hooks;
+
+use App\Http\Controllers\Controller;
+use App\Models\Photo;
+use App\Services\PhotoOrigin;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Storage;
+use Symfony\Component\HttpFoundation\Response;
+
+class PhotoOriginController extends Controller
+{
+    public function __invoke(Request $request, Photo $photo, PhotoOrigin $origin): Response
+    {
+        $token = $request->header('X-Photo-Origin-Token', $request->query('token'));
+        abort_unless($origin->serveEnabled() && $origin->tokenMatches(is_string($token) ? $token : null), 401);
+
+        $path = trim((string) $photo->path);
+        abort_unless($origin->isSafeRelPath($path), 404);
+        abort_unless(Storage::disk('local')->exists($path), 404);
+
+        $abs = Storage::disk('local')->path($path);
+        $mime = @mime_content_type($abs) ?: 'application/octet-stream';
+
+        return response((string) file_get_contents($abs), 200)
+            ->header('Content-Type', $mime)
+            ->header('X-Photo-Origin', 'local');
+    }
+}