Coba Commit

2026-06-12 22:46:13 +07:00
parent f167f233b7
commit 66bb4c4c7c
126 changed files with 1613 additions and 866 deletions
@@ -0,0 +1,77 @@
+<?php
+/**
+ * api_pengguna.php
+ * Endpoint: Manajemen data Pengguna (hanya Admin).
+ */
+
+require_once __DIR__ . '/../core_config/database.php';
+require_once __DIR__ . '/../core_config/middleware_auth.php';
+
+header('Content-Type: application/json; charset=utf-8');
+
+function sendSuccess($data = null, $message = 'Success', $code = 200) {
+    http_response_code($code);
+    echo json_encode(['status' => 'success', 'message' => $message, 'data' => $data]);
+    exit();
+}
+function sendError($message = 'Error', $code = 400) {
+    http_response_code($code);
+    echo json_encode(['status' => 'error', 'message' => $message]);
+    exit();
+}
+
+requireApiRole('admin');
+
+$pdo    = Database::getConnection();
+$method = $_SERVER['REQUEST_METHOD'];
+
+switch ($method) {
+    case 'GET':
+        try {
+            $stmt = $pdo->query(
+                "SELECT id, username, role, nama_lengkap, created_at FROM users ORDER BY created_at DESC"
+            );
+            sendSuccess($stmt->fetchAll(), 'Data Pengguna berhasil diambil');
+        } catch (PDOException $e) {
+            sendError('Gagal mengambil data pengguna: ' . $e->getMessage(), 500);
+        }
+        break;
+
+    case 'POST':
+        $input = json_decode(file_get_contents('php://input'), true);
+        if (!isset($input['username'], $input['password'])) {
+            sendError('Username dan password wajib diisi');
+        }
+        try {
+            $hash = password_hash($input['password'], PASSWORD_BCRYPT);
+            $stmt = $pdo->prepare(
+                "INSERT INTO users (username, password, role, nama_lengkap)
+                 VALUES (:username, :password, :role, :nama_lengkap)"
+            );
+            $stmt->execute([
+                ':username'    => $input['username'],
+                ':password'    => $hash,
+                ':role'        => $input['role'] ?? 'user',
+                ':nama_lengkap'=> $input['nama_lengkap'] ?? null,
+            ]);
+            sendSuccess(['id' => $pdo->lastInsertId()], 'Pengguna berhasil dibuat', 201);
+        } catch (PDOException $e) {
+            sendError('Gagal membuat pengguna: ' . $e->getMessage(), 500);
+        }
+        break;
+
+    case 'DELETE':
+        $id = $_GET['id'] ?? null;
+        if (!$id) sendError('ID pengguna wajib disertakan');
+        try {
+            $stmt = $pdo->prepare("DELETE FROM users WHERE id = :id");
+            $stmt->execute([':id' => $id]);
+            sendSuccess(null, 'Pengguna berhasil dihapus');
+        } catch (PDOException $e) {
+            sendError('Gagal menghapus pengguna: ' . $e->getMessage(), 500);
+        }
+        break;
+
+    default:
+        sendError('Method not allowed', 405);
+}