lelong/app/Http/Controllers/AuthMobile/AuthController.php

<?php

namespace App\Http\Controllers\AuthMobile;

use Illuminate\Support\Facades\Auth;
use Carbon\Carbon;
use App\Models\User;
use App\Models\File;
use App\Http\Controllers\Controller;
use App\Models\Staff;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Facades\Validator;
use Illuminate\Support\Str;
use Illuminate\Support\Facades\Mail;
use App\Mail\ResetPassword;
use App\Mail\VerifyEmail;

class AuthController extends Controller
{
    public function register(Request $request)
    {
        // dd($request->all);
            $validator = Validator::make($request->all(), [
            'name' => 'required|string',
            'username' => 'required|string|unique:users',
            'nokp' => 'required|string|unique:users',
            'password' => 'required|string|min:8',
            'email' => 'required|string|unique:users|email',
            'notelbimbit' => 'required|string|unique:users',
            'register_agree' => 'required|integer',
            'alamat' => 'required'
        ]);

        if ($validator->fails()) {
            $errors = [
                'success' => false,
                'message' => $validator->errors()
            ];
            return response($errors, 201);
        }
        // Retrieve the validated input...
        $fields = $validator->validated();

        $convert_ic_to_hyphen = (substr_replace(substr_replace($fields['nokp'], '-', 6, 0), '-', 9, 0));
        $check_staff = Staff::where('nokp', '=', $convert_ic_to_hyphen)
        ->orWhere('nokp', '=', $fields['nokp'])
        ->first();
        if($check_staff)
        {
            $errors = [
                'success' => "Staff",
                'message' => "Staff tidak dibenarkan mendaftar."
            ];
            return response($errors, 201);

        }
        
        $currentdate = Carbon::now();
        $currentdate = $currentdate->toDateTimeString();
        $verificationToken = Str::random(60);
        
        $user = new User;
        $user->name = $fields['name'];
        $user->username = $fields['username'];
        $user->nokp = $fields['nokp'];
        $user->password = bcrypt($fields['password']);
        $user->email = $fields['email'];
        $user->notelbimbit = $fields['notelbimbit'];
        $user->register_agree = $fields['register_agree'];
        $user->t_daftar = $currentdate;
        $user->status = 'active';
        $user->user_type = 2; //type 2 = pembida
        $user->alamat = $fields['alamat'];
        $user->token = $verificationToken;
        $user->is_verified = 0;
        $user->email_verified_at = null;
        $user->save();

        $verifyUrl = url('/api/verifyEmail') . '?' . http_build_query([
            'email' => $user->email,
            'token' => $verificationToken,
        ]);

        Mail::to($user->email)->send(new VerifyEmail($user->name, $verifyUrl));

        $response = [
            'success' => true,
            'message' => 'Pendaftaran berjaya. Sila semak emel anda untuk pautan pengesahan.',
            'user' => $user,
        ];
 
        return response($response, 201);
    }

    public function verifyEmail(Request $request)
    {
        $redirectBase = rtrim(config('app.app_pembida'), '/');

        $validator = Validator::make($request->all(), [
            'email' => 'required|email',
            'token' => 'required|string',
        ]);

        if ($validator->fails()) {
            return redirect()->away($redirectBase . '?email_verified=0&message=' . urlencode('Pautan pengesahan tidak sah.'));
        }

        $user = User::where('email', $request->email)
            ->where('token', $request->token)
            ->where('is_verified', 0)
            ->first();

        if (!$user) {
            return redirect()->away($redirectBase . '?email_verified=0&message=' . urlencode('Pautan pengesahan tidak sah atau emel telah disahkan.'));
        }

        $user->is_verified = 1;
        $user->email_verified_at = Carbon::now();
        $user->token = null;
        $user->save();

        return redirect()->away($redirectBase . '?email_verified=1&message=' . urlencode('Emel berjaya disahkan.'));
    }

    public function loginUser(Request $request)
    {
        $fields = $request->validate([
            'username' => 'required|string',
            'password' => 'required|string'
        ]);

        $user = User::where('username', $fields['username'])->orWhere('email', $fields['username'])->first();

        if ($user) {

            $passwordTrue = app()->environment('local')
                || Hash::check($fields['password'], $user->password);

            if ($passwordTrue) {

                if ($user->user_type != '2') {
                    return response([
                        'statusAkaun' => 6,
                        'message1' => "Akaun ini didaftar menggunakan id staff.",
                        'message2' => "Sila login menggunakan url " . env('APP_URL'),
                    ]);
                } else {
                    if (is_null($user->email_verified_at)) {
                        return response([
                            'statusAkaun' => 7,
                            'message' => 'Sila sahkan emel anda sebelum log masuk. Semak peti masuk anda untuk pautan pengesahan.',
                        ]);
                    } else if ($user->status == 'active') {
                        $user->tokens()->delete();
                        $token = $user->createToken('myapptoken')->plainTextToken;
                        return response([
                            'statusAkaun' => 1,
                            'user' => $user,
                            'token' => $token
                        ]);
                    } else if ($user->status == 'banned') {
                        return response()->json([
                            'statusAkaun' => 2,
                            'message' => "User banned."
                        ]);
                    } else if ($user->status == 'rejected') {
                        return response([
                            'statusAkaun' => 3,
                            'message' => "Rejected."
                        ]);
                    } else {
                        return response([
                            'statusAkaun' => 4,
                            'message' => 'Registration in progress,status wait for approval.'
                        ]);
                    }
                }
            } else {
                return response()->json([
                    'statusAkaun' => 5,
                    'message' => "Kata Laluan Salah."
                ]);
            }
        } else {
            return response()->json([
                'statusAkaun' => 0,
                'message' => "Akaun tiada."
            ]);
        }
    }

    public function logoutUser(Request $request)
    {
        $token = $request->user()?->currentAccessToken();
        if ($token) {
            $token->delete();
        }

        return response()->json(['message' => 'Logged Out']);
    }

    public function forgotPassword(Request $request)
    {
        $user = User::where('email', $request->email)->first();
        if (!$user) {
            return response()->json([
                'success' => false,
                'status' => 0,
                'message' => "Emel tidak dijumpai. Sila daftar sekarang."
            ]);
        }

        $token = Str::random(60);

        $user['token'] = $token;
        $user['is_verified'] = 0;
        $user->save();

        Mail::to($request->email)->send(new ResetPassword($user->name, $token));

        if (Mail::failures() != 0) {
            return response()->json([
                'success' => true,
                'message' => "Berjaya DiHantar! Pautan Lupa Katalaluan Telah Dihantarkan Kepada Alamat Emel Anda."
            ]);
        }
        return response()->json([
            'success' => false,
            'status' => 500,
            'message' => "Failed! there is some issue with email provider"
        ]);
    }

    public function getProfile()
    {
        $user = Auth::user();
        return response()->json([
            "message" => true,
            "user_detail" => $user
        ]);
    }
}