75 lines
2.3 KiB
PHP
75 lines
2.3 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api\V1\Supervisor;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Http\Controllers\Concerns\RespondsWithJson;
|
|
use App\Http\Requests\Api\V1\Supervisor\LoginRequest;
|
|
use App\Http\Resources\SupervisorResource;
|
|
use App\Models\Supervisor;
|
|
use Illuminate\Http\JsonResponse;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Illuminate\Support\Facades\Hash;
|
|
|
|
class AuthController extends Controller
|
|
{
|
|
use RespondsWithJson;
|
|
|
|
public function login(LoginRequest $request): JsonResponse
|
|
{
|
|
$supervisor = Supervisor::query()
|
|
->where('email', $request->string('email')->toString())
|
|
->first();
|
|
|
|
if ($supervisor === null || ! Hash::check($request->string('password')->toString(), $supervisor->password)) {
|
|
return $this->error('Identifiants invalides.', 401);
|
|
}
|
|
|
|
if (! $supervisor->is_active) {
|
|
return $this->error('Compte superviseur désactivé.', 403);
|
|
}
|
|
|
|
$supervisor->update(['last_login_at' => now()]);
|
|
|
|
$deviceName = $request->input('device_name', 'backoffice');
|
|
$accessMinutes = (int) config('laverie.auth.access_token_ttl_minutes', 60);
|
|
$refreshDays = (int) config('laverie.auth.refresh_token_ttl_days', 30);
|
|
|
|
$accessToken = $supervisor->createToken(
|
|
"{$deviceName}-access",
|
|
['supervisor', 'access'],
|
|
now()->addMinutes($accessMinutes),
|
|
);
|
|
|
|
$refreshToken = $supervisor->createToken(
|
|
"{$deviceName}-refresh",
|
|
['supervisor', 'refresh'],
|
|
now()->addDays($refreshDays),
|
|
);
|
|
|
|
Auth::guard('supervisor')->login($supervisor);
|
|
|
|
return $this->success([
|
|
'supervisor' => new SupervisorResource($supervisor),
|
|
'access_token' => $accessToken->plainTextToken,
|
|
'refresh_token' => $refreshToken->plainTextToken,
|
|
'token_type' => 'Bearer',
|
|
'expires_in' => $accessMinutes * 60,
|
|
], 'Connexion superviseur réussie.');
|
|
}
|
|
|
|
public function logout(Request $request): JsonResponse
|
|
{
|
|
$user = $request->user();
|
|
|
|
if ($user instanceof Supervisor) {
|
|
$user->currentAccessToken()?->delete();
|
|
}
|
|
|
|
Auth::guard('supervisor')->logout();
|
|
|
|
return $this->success(message: 'Déconnexion superviseur réussie.');
|
|
}
|
|
}
|