All posts

Get the business logic out of your controllers

Published April 25, 2026 · by Majd Ghithan, written with the help of AI

Get the business logic out of your controllers

I once opened a OrderController@store method that was 240 lines long. Validation, a discount calculation, three model writes, a Stripe charge, two emails, a Slack notification, and an if for a promo that ran only in December. It worked. It also could not be tested without booting half the app, and nobody wanted to touch it, because touching it meant reading all 240 lines to make sure you didn't break the December thing.

The problem was never that the logic was hard. It's that the logic had nowhere to live except the controller, so it all moved in.

A controller has one job: take an HTTP request, hand it to something that does the work, and turn the result into an HTTP response. That's it. It's a translator between the web and your application. The moment it starts deciding things, calculating things, charging cards, it's doing two jobs, and the second one is the one you actually care about testing.

The fat controller

Here's the shape of what I opened. Trimmed, but honest.

public function store(Request $request)
{
    $data = $request->validate([
        'items' => 'required|array',
        'coupon' => 'nullable|string',
    ]);

    $total = 0;
    foreach ($data['items'] as $item) {
        $product = Product::findOrFail($item['id']);
        $total += $product->price * $item['qty'];
    }

    if ($data['coupon'] === 'DEC24' && now()->month === 12) {
        $total *= 0.8;
    }

    $order = Order::create(['total' => $total, 'user_id' => auth()->id()]);
    // ...charge Stripe, send emails, notify Slack...

    return redirect()->route('orders.show', $order);
}

Every business rule in the application is now reachable only through an HTTP request. Want to create an order from an Artisan command? A queued job? A test? You can't, not without faking a request. The logic is welded to the transport.

Move the work into an Action

An Action is a class with one public method that does one thing. No interface, no abstract base, no ActionInterface — you don't need the ceremony. Just a class that holds a verb.

class PlaceOrder
{
    public function handle(User $user, array $items, ?string $coupon): Order
    {
        $total = $this->total($items, $coupon);

        $order = Order::create([
            'total' => $total,
            'user_id' => $user->id,
        ]);

        // charge, notify — or dispatch jobs for those
        return $order;
    }

    private function total(array $items, ?string $coupon): int
    {
        $total = collect($items)->sum(
            fn ($i) => Product::findOrFail($i['id'])->price * $i['qty']
        );

        return $coupon === 'DEC24' && now()->month === 12
            ? (int) round($total * 0.8)
            : $total;
    }
}

Now the controller shrinks to what a controller is for:

OrderController@store — lines of code
2409Fat controllerAfter the Action
lines
Fat controller
public function store(Request $r)
{
    // 240 lines:
    // validate, price, discount,
    // create, charge, email,
    // notify, the December if...
}
Thin controller + Action
public function store(
    StoreOrderRequest $r,
    PlaceOrder $place,
) {
    $order = $place->handle(
        $r->user(),
        $r->validated('items'),
        $r->validated('coupon'),
    );

    return redirect()->route(
        'orders.show', $order
    );
}

Single-action controllers when it's really one thing

If a controller has exactly one job, don't wrap it in a class with a store method — make the class itself the action with __invoke:

class PlaceOrderController
{
    public function __construct(private PlaceOrder $place) {}

    public function __invoke(StoreOrderRequest $request)
    {
        $order = $this->place->handle(
            $request->user(),
            $request->validated('items'),
            $request->validated('coupon'),
        );

        return redirect()->route('orders.show', $order);
    }
}

Route it directly: Route::post('/orders', PlaceOrderController::class). One route, one file, one thing. No seven-method resource controller where six methods are empty.

Action or Service — what's the difference?

An Action is one verb: PlaceOrder, CancelSubscription, RefundPayment. A Service is a small cluster of related verbs that share state or setup: a PricingService that knows about coupons, taxes, and shipping together. I reach for Actions by default and only group them into a Service when three of them keep passing the same dependencies around. Don't start with the Service. You rarely need it.

Why this actually pays off

Testing. PlaceOrder is a plain object. A unit test news it up, calls handle, asserts on the returned order. No HTTP kernel, no route, no middleware. The test that used to need a full feature test now runs in milliseconds.

Reuse. The same Action runs from the controller, from a queued job, from an Artisan command, from a webhook handler. Write the December discount once; every entry point gets it for free.

Reading. When the order logic breaks, you open PlaceOrder. You don't scroll past validation and redirect noise to find the one line that prices the coupon. The file's name tells you it's where orders get placed.

The rule I hold myself to: a controller method should read like a table of contents, not a chapter. Request in, delegate, response out. If you can't see all three in one screen without scrolling, the work is in the wrong place.

🤖 Heads up: this post was drafted with AI. Spot something wrong or off?Edit it on GitHub & open a PR
Majd Ghithan

Majd Ghithan

Full-Stack Engineer & Tech Lead

More posts

Laravel finally resizes images for you

Laravel finally resizes images for you

Every Laravel app I've built that takes an avatar ended the same way: composer require intervention/image, wire up a facade, write a little service class, and hope the next dev…

July 26, 2026Read more
What actually breaks at 100,000 users (that never breaks in a demo)

What actually breaks at 100,000 users (that never breaks in a demo)

The first time I shipped a dashboard to a hundred thousand active users, nothing I had tested was what broke. Everything that failed had passed every check I ran. It worked on m…

July 25, 2026Read more
Where your queue jobs go to die under load

Where your queue jobs go to die under load

The support ticket said "I never got my invoice email." I checked the logs. The job ran. It succeeded. failedjobs was empty. Everything said the email went out. It did not.

July 18, 2026Read more
The indexes you're missing (and the one that's hurting you)

The indexes you're missing (and the one that's hurting you)

A client sent me a query that took 4.2 seconds. One WHERE, one ORDER BY, a table with three million rows. I added a single index and it dropped to 11 milliseconds. They asked if…

July 11, 2026Read more
Caching in Laravel without the stampede

Caching in Laravel without the stampede

We cached the homepage's "trending products" query for five minutes. It was our slowest query — about 900ms, a big aggregation across orders. Caching it took the homepage from s…

July 4, 2026Read more
Taking one endpoint from 800ms to 80ms

Taking one endpoint from 800ms to 80ms

The order-details endpoint took 800 milliseconds. Not broken, just slow enough that the app felt heavy everywhere it was used. The team's instinct was "the server needs more mem…

June 27, 2026Read more
The N+1 you can't see (it's hiding in your accessors)

The N+1 you can't see (it's hiding in your accessors)

I've fixed hundreds of N+1 queries. The easy ones are right there in the controller — a foreach with $order-customer inside it, obvious the moment you read the code. Those aren'…

June 20, 2026Read more
The Friday deploy that charged customers twice

The Friday deploy that charged customers twice

It was 4:40 on a Friday. The change was tiny — a one-line tweak to how we called the payment provider, plus a bump to the queue worker's timeout. Small, tested, reviewed. I depl…

June 13, 2026Read more
Code review people don't dread

Code review people don't dread

I once left forty-one comments on a junior's pull request. I was proud of it. Thorough, I told myself. The next day he barely made eye contact, and his next PR sat open for a we…

June 6, 2026Read more
Hiring a mid-level Laravel dev: the signals that actually matter

Hiring a mid-level Laravel dev: the signals that actually matter

The best hire I ever made failed my first question. I asked him to explain service containers and he stumbled, went quiet, then said "honestly I use them every day but I've neve…

May 30, 2026Read more
Saying no to a feature without being the 'no' person

Saying no to a feature without being the 'no' person

For about a year I was the engineer everyone learned to route around. Not because I was wrong, I was usually right, but because my answer to new ideas was a flat "no, that'll br…

May 23, 2026Read more
My first 90 days as a tech lead (and the habit I had to break)

My first 90 days as a tech lead (and the habit I had to break)

Three weeks into leading my first team, I stayed late to "help" by rewriting a junior's feature myself. It was faster my way. I pushed it, felt productive, went home. The next m…

May 16, 2026Read more
Breaking down the task that scares you

Breaking down the task that scares you

There's a specific kind of ticket that makes my stomach drop. Not the hard ones, hard is fine. It's the ambiguous ones. "Migrate billing to the new provider." "Add multi-tenancy…

May 9, 2026Read more
1:1s that aren't just status updates

1:1s that aren't just status updates

For my first few months as a lead, my 1:1s were thirty minutes of me asking "so, what are you working on?" and nodding at answers I already knew from standup. We both left sligh…

May 2, 2026Read more
Form Requests are the most underrated thing in Laravel

Form Requests are the most underrated thing in Laravel

Most Laravel devs meet Form Requests once, in a tutorial, use them to hold a rules() array, and never look deeper. That's a shame, because a Form Request is the cleanest place i…

April 18, 2026Read more
Testing Laravel without mocking everything

Testing Laravel without mocking everything

I inherited a codebase once with 900 unit tests and no confidence. Every test mocked the repository, mocked the model, mocked the mailer, mocked the thing three layers down. The…

April 11, 2026Read more
Three Eloquent features that clean up your models

Three Eloquent features that clean up your models

The messiest Laravel model I ever wrote wasn't messy because of Eloquent. It was messy because I ignored the parts of Eloquent that exist specifically to keep it clean. The same…

April 4, 2026Read more
The migration that locked the table for eight minutes

The migration that locked the table for eight minutes

The deploy looked boring. One migration, adding a lastseenat column to the users table with a default of now(). I'd written a hundred like it. I ran it at 2pm on a Tuesday becau…

March 28, 2026Read more
Chasing a memory leak in a Laravel queue worker

Chasing a memory leak in a Laravel queue worker

The alert came in at 4am: one of our queue:work processes had been OOM-killed. The supervisor restarted it, it processed jobs for about forty minutes, and got killed again. It w…

March 21, 2026Read more