58 خطوط
2.1 KiB
PHP
58 خطوط
2.1 KiB
PHP
<?php
|
|
|
|
namespace App\Modules\Identity\Http;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Models\User;
|
|
use App\Modules\Identity\Application\AuthenticatedUserPayload;
|
|
use App\Modules\Identity\Domain\Enums\AccountStatus;
|
|
use App\Modules\Identity\Domain\Enums\UserRole;
|
|
use App\Modules\Identity\Http\Requests\LoginRequest;
|
|
use Illuminate\Http\JsonResponse;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Validation\ValidationException;
|
|
|
|
final class AuthController extends Controller
|
|
{
|
|
public function __construct(private readonly AuthenticatedUserPayload $payload) {}
|
|
|
|
public function login(LoginRequest $request): JsonResponse
|
|
{
|
|
$credentials = $request->validated();
|
|
$user = User::query()->where('email', mb_strtolower($credentials['email']))->first();
|
|
|
|
if (! $user || ! Hash::check($credentials['password'], $user->password)) {
|
|
throw ValidationException::withMessages(['email' => ['The provided credentials are incorrect.']]);
|
|
}
|
|
|
|
if ($user->status === AccountStatus::Disabled) {
|
|
return response()->json(['error' => ['code' => 'account_disabled', 'message' => 'This account is disabled.']], 403);
|
|
}
|
|
|
|
$user->loadMissing('organization');
|
|
if ($user->role !== UserRole::SuperAdmin && (! $user->organization || $user->organization->status !== 'active')) {
|
|
return response()->json(['error' => ['code' => 'organization_unavailable', 'message' => 'The organization is unavailable.']], 403);
|
|
}
|
|
|
|
$token = $user->createToken($credentials['device_name'] ?? 'web')->plainTextToken;
|
|
|
|
return response()->json(['data' => [
|
|
'token' => $token,
|
|
'user' => $this->payload->make($user),
|
|
]]);
|
|
}
|
|
|
|
public function me(Request $request): JsonResponse
|
|
{
|
|
return response()->json(['data' => $this->payload->make($request->user())]);
|
|
}
|
|
|
|
public function logout(Request $request): JsonResponse
|
|
{
|
|
$request->user()->currentAccessToken()?->delete();
|
|
|
|
return response()->json(['data' => ['loggedOut' => true]]);
|
|
}
|
|
}
|