Dev/v1.2 (#4)

Co-authored-by: ISMAIL MASSERAN <topaz@Mac.dlinkrouter.local>
Reviewed-on: #4

be/Modules/Auth/Entities/User.php

@@ -8,6 +8,7 @@ use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\SoftDeletes;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
+use Illuminate\Support\Str;
 use Laravel\Sanctum\HasApiTokens;
 use Spatie\Activitylog\LogOptions;
 use Spatie\Activitylog\Traits\LogsActivity;
@@ -51,9 +52,11 @@ class User extends Authenticatable
         'marriage_status',
         'member_number',
         'member_type',
+        'public_profile_token',
         'join_date',
         'birth_date',
         'birth_place',
+        'onboarding_completed_at',
     ];
 
     /**
@@ -67,8 +70,55 @@ class User extends Authenticatable
         'two_factor_secret',
         'two_factor_recovery_codes',
         'two_factor_confirmed_at',
+        'public_profile_token',
     ];
 
+    protected static function booted(): void
+    {
+        static::creating(function (User $user) {
+            $expiryDays = self::publicProfileTokenTtlDays();
+
+            if (empty($user->public_profile_token)) {
+                $user->public_profile_token = Str::random(48);
+            }
+
+            if (empty($user->public_profile_token_expires_at)) {
+                $user->public_profile_token_expires_at = now()->addDays($expiryDays);
+            }
+        });
+    }
+
+    public static function publicProfileTokenTtlDays(): int
+    {
+        return (int) config('user.public_profile_token_ttl_days', 90);
+    }
+
+    public function isPublicProfileTokenExpired(): bool
+    {
+        return $this->public_profile_token_expires_at !== null
+            && $this->public_profile_token_expires_at->isPast();
+    }
+
+    public function ensurePublicProfileToken(): string
+    {
+        $expiryDays = self::publicProfileTokenTtlDays();
+
+        if (blank($this->public_profile_token) || $this->isPublicProfileTokenExpired()) {
+            $this->forceFill([
+                'public_profile_token' => Str::random(48),
+                'public_profile_token_expires_at' => now()->addDays($expiryDays),
+            ])->save();
+
+            return $this->public_profile_token;
+        }
+
+        $this->forceFill([
+            'public_profile_token_expires_at' => now()->addDays($expiryDays),
+        ])->save();
+
+        return $this->public_profile_token;
+    }
+
     /**
      * Get the attributes that should be cast.
      *
@@ -84,9 +134,11 @@ class User extends Authenticatable
             'marriage_status' => 'string',
             'member_number' => 'integer',
             'member_type' => 'string',
+            'public_profile_token_expires_at' => 'datetime',
             'join_date' => 'date',
             'birth_date' => 'date',
             'birth_place' => 'string',
+            'onboarding_completed_at' => 'datetime',
         ];
     }
 

be/Modules/Auth/Http/Controllers/SessionController.php

@@ -24,6 +24,7 @@ class SessionController extends Controller
             ], 401);
         }
 
+        $user->ensurePublicProfileToken();
         $user->load(['roles.permissions']);
 
         return response()->json([

be/Modules/Auth/Services/AuthSessionService.php

@@ -12,6 +12,8 @@ class AuthSessionService
 {
     public function createAuthResponse(User $user, string $message, int $status = 200): JsonResponse
     {
+        $user->ensurePublicProfileToken();
+
         if (config('app.env') !== 'local') {
             $user->tokens()->delete();
         }

be/Modules/Auth/Transformers/UserResource.php

@@ -36,9 +36,11 @@ class UserResource extends JsonResource
             'marriage_status' => $this->marriage_status,
             'member_number' => $this->member_number,
             'member_type' => $this->member_type,
+            'public_profile_token' => $this->public_profile_token,
             'join_date' => $this->join_date,
             'birth_date' => $this->birth_date,
             'birth_place' => $this->birth_place,
+            'onboarding_completed_at' => $this->onboarding_completed_at,
             'created_at' => $this->created_at,
             'updated_at' => $this->updated_at,
             'deleted_at' => $this->deleted_at,