++ fix: use months for assignment PDF link TTL instead of hours

app/Http/Controllers/AssignmentPdfController.php

@@ -0,0 +1,56 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\Assegnazione;
+use Carbon\Carbon;
+use Illuminate\Contracts\View\View;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Facades\URL;
+use Symfony\Component\HttpFoundation\StreamedResponse;
+
+class AssignmentPdfController extends Controller
+{
+    public function viewer(Request $request, Assegnazione $assignment, string $code): View
+    {
+        $this->validateAccess($request, $assignment, $code);
+
+        $expiresAt = Carbon::createFromTimestamp((int) $request->query('expires'));
+        $pdfUrl = URL::temporarySignedRoute(
+            'assignments.pdf.file',
+            $expiresAt,
+            ['assignment' => $assignment->id, 'code' => $code]
+        );
+
+        return view('assignments.pdf-viewer', [
+            'assignment' => $assignment,
+            'pdfUrl' => $pdfUrl,
+        ]);
+    }
+
+    public function file(Request $request, Assegnazione $assignment, string $code): StreamedResponse
+    {
+        $this->validateAccess($request, $assignment, $code);
+
+        $pdfPath = $assignment->territorio?->pdf_path;
+        abort_unless($pdfPath && Storage::disk('public')->exists($pdfPath), 404);
+
+        return Storage::disk('public')->response(
+            $pdfPath,
+            'territorio-' . $assignment->territorio?->numero . '.pdf',
+            [
+                'Content-Type' => 'application/pdf',
+                'Content-Disposition' => 'inline; filename="territorio-' . $assignment->territorio?->numero . '.pdf"',
+            ]
+        );
+    }
+
+    protected function validateAccess(Request $request, Assegnazione $assignment, string $code): void
+    {
+        abort_unless($request->hasValidSignature(), 403);
+        abort_unless($assignment->pdf_access_code && hash_equals($assignment->pdf_access_code, $code), 404);
+        abort_unless($assignment->is_aperta, 403);
+        abort_unless($assignment->territorio?->pdf_path, 404);
+    }
+}