Allowance check

2026-04-14 02:34:00 +00:00
parent 0c4d200839
commit 3775c4a876
100 changed files with 81493 additions and 3226 deletions
@@ -0,0 +1,119 @@
+<?php
+
+namespace App\Http\Controllers\API\v1\Allowance;
+
+use App\AllowanceClaimCode;
+use App\AllowancePayout;
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Util;
+use App\Result;
+use Illuminate\Http\Request;
+use Illuminate\Support\Carbon;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+
+class ClaimCodeController extends Controller
+{
+    public function __invoke(Request $request)
+    {
+        $this->validate($request, [
+            'method' => 'nullable|string|in:cash,bank',
+        ]);
+
+        $electionId = Util::getCurrentElection();
+        $method = $request->input('method', 'cash');
+
+        // voter auth guard; Auth::id() should be voter id under voterAPI
+        $voterId = Auth::id();
+
+        $voter = $request->user();
+        if (!$voter || (int) $voter->id !== (int) $voterId) {
+            return response()->json([
+                'status' => 'failed',
+                'message' => 'Unauthenticated.',
+            ], 401);
+        }
+
+        // Enforce method by attendance
+        if ($method === 'cash' && (int) $voter->kehadiran !== 1) {
+            return response()->json([
+                'status' => 'failed',
+                'message' => 'Kod tuntutan tunai hanya untuk kehadiran Fizikal.',
+            ], 422);
+        }
+        if ($method === 'bank' && (int) $voter->kehadiran !== 2) {
+            return response()->json([
+                'status' => 'failed',
+                'message' => 'Kod tuntutan bank hanya untuk kehadiran Maya.',
+            ], 422);
+        }
+
+        // Must have voted
+        $hasVoted = Result::where('election_id', $electionId)->where('voter_id', $voterId)->exists();
+        if (!$hasVoted) {
+            return response()->json([
+                'status' => 'failed',
+                'message' => 'Sila undi terlebih dahulu sebelum menuntut elaun.',
+            ], 422);
+        }
+
+        // If already paid, don't generate codes
+        $alreadyPaid = AllowancePayout::where('election_id', $electionId)
+            ->where('voter_id', $voterId)
+            ->where('method', $method)
+            ->where('status', 'paid')
+            ->exists();
+
+        if ($alreadyPaid) {
+            return response()->json([
+                'status' => 'failed',
+                'message' => 'Elaun anda telah direkodkan sebagai sudah dibayar.',
+            ], 422);
+        }
+
+        // Generate a 6-digit numeric code
+        $codeInt = random_int(0, 999999);
+        $code = str_pad((string) $codeInt, 6, '0', STR_PAD_LEFT);
+
+        $expiresAt = Carbon::now()->addHours(6);
+
+        $row = AllowanceClaimCode::updateOrCreate(
+            [
+                'election_id' => $electionId,
+                'voter_id' => $voterId,
+                'method' => $method,
+            ],
+            [
+                'code_hash' => Hash::make($code),
+                'code_last4' => substr($code, -4),
+                'expires_at' => $expiresAt,
+                'used_at' => null,
+                'used_by_admin_id' => null,
+            ]
+        );
+
+        activity()
+            ->performedOn($row)
+            ->withProperties([
+                'election_id' => $electionId,
+                'voter_id' => (int) $voterId,
+                'voter_name' => $voter->name,
+                'attendance' => (int) $voter->kehadiran,
+                'method' => $method,
+                'expires_at' => $expiresAt->toDateTimeString(),
+                'code_last4' => $row->code_last4,
+                'ip' => $request->ip(),
+                'user_agent' => $request->userAgent(),
+            ])
+            ->log("generate claim code ({$method}): {$voter->name}");
+
+        return response()->json([
+            'status' => 'success',
+            'message' => 'Kod tuntutan berjaya dijana.',
+            'code' => $code, // return plaintext ONCE to voter
+            'expires_at' => $expiresAt,
+            'method' => $method,
+        ]);
+    }
+}
+