From f2093ba01cbdfa38e3dd6f4ace740b0daf8a295f Mon Sep 17 00:00:00 2001
From: BTMS2 <btms2@BTMS2s-MacBook-Pro.local>
Date: Thu, 29 May 2025 10:23:13 +0800
Subject: [PATCH] update request tac

---
 app/Http/Controllers/Mobile/UserController.php | 7 +++----
 routes/api.php                                 | 2 +-
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/app/Http/Controllers/Mobile/UserController.php b/app/Http/Controllers/Mobile/UserController.php
index 7fcdb96e..7e0eabdd 100644
--- a/app/Http/Controllers/Mobile/UserController.php
+++ b/app/Http/Controllers/Mobile/UserController.php
@@ -178,7 +178,7 @@ class UserController extends Controller
         ]);
 
         $tac_code_model = new TacCode();
-        $tac_code_model->tac_code = $tac_code;
+        $tac_code_model->tac_code = Hash::make($tac_code);
         $tac_code_model->phone_number = $request->phone_number;
         $tac_code_model->case_code = 1;
         $tac_code_model->case_description = 'Verify Phone Number';
@@ -188,7 +188,6 @@ class UserController extends Controller
         return response()->json([
             'success' => true,
             'message' => 'Tac Sent!',
-            'response' => $tac_code_model
         ]);
     }
 
@@ -198,13 +197,13 @@ class UserController extends Controller
         $current_date_time = $current->toDateTimeString();
 
         $tac_code = TacCode::query()
-            ->where('tac_code', $request->tac_code)
             ->where('phone_number', $request->phone_number)
             ->where('expired_at', '>=', $current_date_time)
             ->where('status', 0)
+            ->latest()
             ->first();
 
-        if ($tac_code) {
+        if ($tac_code && Hash::check($request->tac_code, $tac_code->tac_code)) {
             $user = Auth::user();
             $user->notelbimbit = $request->phone_number;
             $user->save();
diff --git a/routes/api.php b/routes/api.php
index 4c15d582..03b33cca 100644
--- a/routes/api.php
+++ b/routes/api.php
@@ -52,7 +52,7 @@ Route::group(['middleware' => ['auth:sanctum']], function () {
     Route::get('/user/profile', [UserController::class, 'getProfileUser']);
     Route::put('/userUpdate/profile', [UserController::class, 'updateProfileUser']);
 
-    Route::get('/requestTac', [UserController::class, 'requestTac']);
+    Route::post('/requestTac', [UserController::class, 'requestTac']);
     Route::post('/verifyTac', [UserController::class, 'verifyTac']);
 
     //============HOME===========================