AuthController.php 4.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183
  1. <?php
  2. namespace App\Http\Controllers;
  3. use App\Http\Requests\AuthRequest;
  4. use App\Http\Requests\RefreshTokenRequest;
  5. use App\Http\Requests\RefreshTokenAppRequest;
  6. use App\Http\Requests\UserAppsRequest;
  7. use App\Http\Requests\UserAppsValidateCodeRequest;
  8. use Illuminate\Http\JsonResponse;
  9. use App\Http\Resources\AuthResource;
  10. use App\Services\AuthService;
  11. use Illuminate\Support\Facades\Log;
  12. class AuthController extends Controller
  13. {
  14. public function __construct(protected AuthService $authService) {}
  15. public function login(AuthRequest $request): JsonResponse
  16. {
  17. $validated = $request->validated();
  18. $result = $this->authService->login(
  19. email: $validated["email"],
  20. password: $validated["password"],
  21. );
  22. if (!$result) {
  23. return $this->errorResponse(message: __("auth.failed"), code: 401);
  24. }
  25. return $this->successResponse(
  26. payload: new AuthResource($result["payload"]),
  27. message: __("auth.logged_in"),
  28. )->withCookie(
  29. cookie(
  30. "refresh_token",
  31. $result["refreshToken"],
  32. config("sanctum.rt_expiration") * 60,
  33. "/",
  34. config("session.domain"),
  35. config("session.secure"),
  36. true,
  37. false,
  38. "Lax",
  39. ),
  40. );
  41. }
  42. public function loginApp(AuthRequest $request): JsonResponse
  43. {
  44. $validated = $request->validated();
  45. $result = $this->authService->login(
  46. email: $validated["email"],
  47. password: $validated["password"],
  48. );
  49. if (!$result) {
  50. return $this->errorResponse(message: __("auth.failed"), code: 401);
  51. }
  52. return $this->successResponse(
  53. payload: new AuthResource([
  54. ...$result["payload"],
  55. "refresh_token" => $result["refreshToken"],
  56. ]),
  57. message: __("auth.logged_in"),
  58. );
  59. }
  60. public function logout(): JsonResponse
  61. {
  62. $this->authService->logout();
  63. return $this->successResponse(
  64. message: __("auth.logout"),
  65. )->withoutCookie("refresh_token");
  66. }
  67. public function refresh(RefreshTokenRequest $request): JsonResponse
  68. {
  69. $refresh_token = $request->cookie("refresh_token");
  70. if (is_null($refresh_token)) {
  71. return $this->errorResponse(
  72. code: 403,
  73. )->withoutCookie("refresh_token");
  74. }
  75. $result = $this->authService->refresh(
  76. $refresh_token
  77. );
  78. if (is_null($result)) {
  79. return $this->errorResponse(
  80. message: __("auth.unauthorized"),
  81. code: 403,
  82. )->withoutCookie("refresh_token");
  83. }
  84. return $this->successResponse(
  85. payload: new AuthResource($result["payload"]),
  86. )->withCookie(
  87. cookie(
  88. "refresh_token",
  89. $result["refreshToken"],
  90. config("sanctum.rt_expiration") * 60,
  91. "/",
  92. config("session.domain"),
  93. config("session.secure"),
  94. true,
  95. true,
  96. "Lax",
  97. ),
  98. );
  99. }
  100. public function refreshApp(RefreshTokenAppRequest $request): JsonResponse
  101. {
  102. $refresh_token = $request->validated("refresh_token");
  103. if (is_null($refresh_token)) {
  104. return $this->errorResponse(code: 403);
  105. }
  106. $result = $this->authService->refresh(
  107. $refresh_token
  108. );
  109. if (is_null($result)) {
  110. return $this->errorResponse(
  111. message: __("auth.unauthorized"),
  112. code: 403,
  113. );
  114. }
  115. return $this->successResponse(
  116. payload: new AuthResource([
  117. ...$result["payload"],
  118. "refresh_token" => $result["refreshToken"],
  119. ]),
  120. );
  121. }
  122. public function sendCode(UserAppsRequest $request): JsonResponse
  123. {
  124. $this->authService->sendCode($request->validated());
  125. return $this->successResponse(
  126. message: __("messages.code_sent"),
  127. code: 201,
  128. );
  129. }
  130. public function validateCode(UserAppsValidateCodeRequest $request): JsonResponse
  131. {
  132. try {
  133. $email = $request->input("email");
  134. $phone = $request->input("phone");
  135. $code = $request->input("code");
  136. $result = $this->authService->validateCode($request->validated());
  137. if (!$result) {
  138. return $this->errorResponse(
  139. message: __("auth.invalid_code"),
  140. code: 400,
  141. );
  142. }
  143. return $this->successResponse(
  144. payload: ['email' => $email, 'phone' => $phone, 'code' => $code],
  145. message: __("auth.valid_code"),
  146. code: 200,
  147. );
  148. } catch (\Exception $e) {
  149. return $this->errorResponse(
  150. message: __("auth.validation_error"),
  151. code: 500,
  152. );
  153. }
  154. }
  155. }