DONE: replace email verification by link instead of otp

be/Modules/Auth/Entities/EmailVerificationOtp.php

@@ -1,44 +0,0 @@
-<?php
-
-namespace Modules\Auth\Entities;
-
-use Illuminate\Database\Eloquent\Concerns\HasUuids;
-use Illuminate\Database\Eloquent\Model;
-use Illuminate\Database\Eloquent\Relations\BelongsTo;
-
-class EmailVerificationOtp extends Model
-{
-    use HasUuids;
-
-    protected $table = 'email_verification_otps';
-
-    protected $fillable = [
-        'user_id',
-        'code',
-        'expires_at',
-        'attempts',
-    ];
-
-    protected function casts(): array
-    {
-        return [
-            'expires_at' => 'datetime',
-            'attempts' => 'integer',
-        ];
-    }
-
-    public function user(): BelongsTo
-    {
-        return $this->belongsTo(User::class);
-    }
-
-    public function isExpired(): bool
-    {
-        return $this->expires_at->isPast();
-    }
-
-    public function hasExceededMaxAttempts(): bool
-    {
-        return $this->attempts >= (int) config('auth.email_verification.max_attempts', 5);
-    }
-}

be/Modules/Auth/Entities/User.php

@@ -2,7 +2,8 @@
 
 namespace Modules\Auth\Entities;
 
-// use Illuminate\Contracts\Auth\MustVerifyEmail;
+use Illuminate\Auth\MustVerifyEmail as MustVerifyEmailTrait;
+use Illuminate\Contracts\Auth\MustVerifyEmail;
 use Illuminate\Database\Eloquent\Concerns\HasUuids;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\SoftDeletes;
@@ -22,12 +23,13 @@ use Modules\Role\Entities\Role;
 use Modules\User\Entities\Address;
 use Modules\User\Entities\BankDetail;
 use Modules\User\Entities\Employment;
+use Modules\Auth\Notifications\VerifyEmailNotification;
 use Modules\User\Entities\Heir;
 
-class User extends Authenticatable
+class User extends Authenticatable implements MustVerifyEmail
 {
     /** @use HasFactory<\Modules\Auth\Database\Factories\UserFactory> */
-    use HasApiTokens, HasFactory, HasPermissions, HasRoles, HasUuids, Impersonate, LogsActivity, Notifiable, SoftDeletes;
+    use HasApiTokens, HasFactory, HasPermissions, HasRoles, HasUuids, Impersonate, LogsActivity, MustVerifyEmailTrait, Notifiable, SoftDeletes;
 
     protected $table = 'users';
 
@@ -301,9 +303,9 @@ class User extends Authenticatable
         return $currentUser->hasPermissionTo('menyamar pengguna');
     }
 
-    public function hasVerifiedEmail(): bool
+    public function sendEmailVerificationNotification(): void
     {
-        return $this->email_verified_at !== null;
+        $this->notify(new VerifyEmailNotification);
     }
 
     /**
@@ -315,15 +317,11 @@ class User extends Authenticatable
     }
 
     /**
-     * Whether credentials are valid for issuing a session (includes verified pending users).
+     * Whether credentials are valid for issuing a session (includes pending users awaiting admin activation).
      */
     public function canAuthenticate(): bool
     {
-        if ($this->canLogin()) {
-            return true;
-        }
-
-        return $this->hasVerifiedEmail() && $this->status === 'pending';
+        return in_array($this->status, ['active', 'pending'], true);
     }
 
     /**