Initial commit for combined ProjectKP
This commit is contained in:
raditarahman5-cloud
@@ -0,0 +1,200 @@
|
||||
<?php
|
||||
|
||||
namespace App\Http\Controllers;
|
||||
|
||||
use Illuminate\Http\Request;
|
||||
use Illuminate\Support\Facades\Auth;
|
||||
use Illuminate\Support\Facades\Hash;
|
||||
use Illuminate\Validation\Rule;
|
||||
use App\Models\User;
|
||||
|
||||
class AuthController extends Controller
|
||||
{
|
||||
/**
|
||||
* LOGIN API
|
||||
* Menerima username/email + password.
|
||||
* Mengembalikan token untuk dipakai frontend KP-ASOY.
|
||||
*/
|
||||
public function login(Request $request)
|
||||
{
|
||||
$request->validate([
|
||||
'username' => 'nullable|string',
|
||||
'login' => 'nullable|string',
|
||||
'password' => 'required|string',
|
||||
]);
|
||||
|
||||
// Frontend KP-ASOY mengirim field "username".
|
||||
// Tapi tetap kita dukung field "login" agar fleksibel.
|
||||
$login = trim($request->username ?? $request->login);
|
||||
|
||||
if (!$login) {
|
||||
return response()->json([
|
||||
'message' => 'Username atau email wajib diisi.'
|
||||
], 422);
|
||||
}
|
||||
|
||||
// Cek apakah input berupa email atau username
|
||||
$field = filter_var($login, FILTER_VALIDATE_EMAIL) ? 'email' : 'username';
|
||||
|
||||
$user = User::where($field, $login)->first();
|
||||
|
||||
\Illuminate\Support\Facades\Log::info('Login Attempt', ['login' => $login, 'password' => $request->password, 'user_found' => $user ? true : false, 'hash_check' => $user ? Hash::check($request->password, $user->password) : false]);
|
||||
|
||||
if (!$user || !Hash::check($request->password, $user->password)) {
|
||||
return response()->json([
|
||||
'message' => 'Login gagal. Username/email atau password salah.'
|
||||
], 401);
|
||||
}
|
||||
|
||||
// Hapus token lama agar tidak menumpuk terlalu banyak
|
||||
$user->tokens()->delete();
|
||||
|
||||
// Buat token Sanctum
|
||||
$token = $user->createToken('kp-asoy-token')->plainTextToken;
|
||||
|
||||
return response()->json([
|
||||
'message' => 'Login berhasil',
|
||||
'token' => $token,
|
||||
'user' => [
|
||||
'id' => $user->id,
|
||||
'name' => $user->name,
|
||||
'username' => $user->username,
|
||||
'email' => $user->email,
|
||||
'role' => strtolower($user->role),
|
||||
'jabatan' => $user->jabatan,
|
||||
]
|
||||
], 200);
|
||||
}
|
||||
|
||||
/**
|
||||
* REGISTER USER
|
||||
* Dipakai admin/superadmin untuk membuat akun user/pegawai.
|
||||
*/
|
||||
public function register(Request $request)
|
||||
{
|
||||
$request->validate([
|
||||
'name' => 'required|string|max:255',
|
||||
'username' => 'required|string|max:255|unique:users,username',
|
||||
'password' => 'required|string|min:6',
|
||||
'role' => [
|
||||
'required',
|
||||
Rule::in(['user', 'admin', 'superadmin', 'User', 'Admin', 'Superadmin', 'Super Admin'])
|
||||
],
|
||||
'jabatan' => 'nullable|string|max:255',
|
||||
]);
|
||||
|
||||
$role = strtolower($request->role);
|
||||
|
||||
if ($role === 'super admin') {
|
||||
$role = 'superadmin';
|
||||
}
|
||||
|
||||
// Generate email if not provided to satisfy DB unique constraint
|
||||
$email = $request->email ?? ($request->username . '@mail.com');
|
||||
|
||||
$user = User::create([
|
||||
'name' => $request->name,
|
||||
'username' => $request->username,
|
||||
'email' => $email,
|
||||
'password' => bcrypt($request->password),
|
||||
'role' => $role,
|
||||
'jabatan' => $request->jabatan,
|
||||
]);
|
||||
|
||||
return response()->json([
|
||||
'message' => 'Register berhasil',
|
||||
'user' => [
|
||||
'id' => $user->id,
|
||||
'name' => $user->name,
|
||||
'username' => $user->username,
|
||||
'email' => $user->email,
|
||||
'role' => $user->role,
|
||||
'jabatan' => $user->jabatan,
|
||||
]
|
||||
], 201);
|
||||
}
|
||||
|
||||
/**
|
||||
* DATA USER YANG SEDANG LOGIN
|
||||
*/
|
||||
public function me(Request $request)
|
||||
{
|
||||
$user = $request->user();
|
||||
|
||||
return response()->json([
|
||||
'user' => [
|
||||
'id' => $user->id,
|
||||
'name' => $user->name,
|
||||
'username' => $user->username,
|
||||
'email' => $user->email,
|
||||
'role' => strtolower($user->role),
|
||||
'jabatan' => $user->jabatan,
|
||||
]
|
||||
]);
|
||||
}
|
||||
|
||||
/**
|
||||
* LOGOUT API
|
||||
*/
|
||||
public function logout(Request $request)
|
||||
{
|
||||
if ($request->user()) {
|
||||
$request->user()->currentAccessToken()->delete();
|
||||
}
|
||||
|
||||
return response()->json([
|
||||
'message' => 'Logout berhasil'
|
||||
]);
|
||||
}
|
||||
|
||||
/**
|
||||
* UPDATE AKUN
|
||||
* Untuk fitur pengaturan akun: ubah email dan password.
|
||||
*/
|
||||
public function updateProfile(Request $request)
|
||||
{
|
||||
$user = $request->user();
|
||||
|
||||
$request->validate([
|
||||
'username' => [
|
||||
'required',
|
||||
'string',
|
||||
Rule::unique('users', 'username')->ignore($user->id),
|
||||
],
|
||||
'password' => 'nullable|string|min:6',
|
||||
'current_password' => 'nullable|string',
|
||||
]);
|
||||
|
||||
$user->username = $request->username;
|
||||
// Jika tidak ada email, tidak perlu diupdate.
|
||||
// Backend tetap aman karena saat register kita yang men-generate email.
|
||||
|
||||
if ($request->filled('password')) {
|
||||
if ($user->role === 'user') {
|
||||
return response()->json([
|
||||
'message' => 'Pegawai tidak diizinkan mengubah kata sandi.'
|
||||
], 403);
|
||||
}
|
||||
if (!Hash::check($request->current_password, $user->password)) {
|
||||
return response()->json([
|
||||
'message' => 'Kata sandi saat ini tidak cocok.'
|
||||
], 400);
|
||||
}
|
||||
$user->password = bcrypt($request->password);
|
||||
}
|
||||
|
||||
$user->save();
|
||||
|
||||
return response()->json([
|
||||
'message' => 'Profil berhasil diperbarui',
|
||||
'user' => [
|
||||
'id' => $user->id,
|
||||
'name' => $user->name,
|
||||
'username' => $user->username,
|
||||
'email' => $user->email,
|
||||
'role' => strtolower($user->role),
|
||||
'jabatan' => $user->jabatan,
|
||||
]
|
||||
]);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user