TA-bibit-cabai/app/Http/Controllers/AdminForgotPasswordController.php

<?php

namespace App\Http\Controllers;

use App\Http\Controllers\Controller;
use App\Models\User;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\DB;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Facades\Mail;
use Illuminate\Support\Str;
use Carbon\Carbon;

class AdminForgotPasswordController extends Controller
{
    // ─────────────────────────────────────────────────────────
    // STEP 1 — Tampilkan form input email
    // ─────────────────────────────────────────────────────────
    public function showForgotForm()
    {
        return view('admin.forgot-password');
    }

    // ─────────────────────────────────────────────────────────
    // STEP 1 — Proses: validasi email & kirim OTP
    // ─────────────────────────────────────────────────────────
    public function sendOtp(Request $request)
    {
        $request->validate([
            'email' => ['required', 'email'],
        ], [
            'email.required' => 'Email wajib diisi.',
            'email.email'    => 'Format email tidak valid.',
        ]);

        $admin = User::where('email', $request->email)
                     ->where('is_admin', true)
                     ->first();

        if (!$admin) {
            return back()->withErrors([
                'email' => 'Email tidak terdaftar sebagai akun admin.',
            ])->withInput();
        }

        $otp = str_pad(random_int(0, 999999), 6, '0', STR_PAD_LEFT);

        DB::table('password_reset_tokens')->where('email', $request->email)->delete();
        DB::table('password_reset_tokens')->insert([
            'email'      => $request->email,
            'token'      => Hash::make($otp),
            'created_at' => Carbon::now(),
        ]);

        Mail::send('emails.admin-otp', [
            'otp'  => $otp,
            'name' => $admin->name ?? 'Admin',
        ], function ($message) use ($request) {
            $message->to($request->email)
                    ->subject('Kode Verifikasi Reset Password Admin - Bibit Cabai');
        });

        $request->session()->put('admin_reset_email', $request->email);

        return redirect()->route('admin.password.verify-otp-form')
                         ->with('success', 'Kode OTP telah dikirim ke email admin Anda. Berlaku 10 menit.');
    }

    // ─────────────────────────────────────────────────────────
    // STEP 2 — Tampilkan form input OTP
    // ─────────────────────────────────────────────────────────
    public function showVerifyOtpForm(Request $request)
    {
        if (!$request->session()->has('admin_reset_email')) {
            return redirect()->route('admin.password.request')
                             ->with('error', 'Silakan masukkan email admin terlebih dahulu.');
        }

        return view('admin.verify-otp');
    }

    // ─────────────────────────────────────────────────────────
    // STEP 2 — Proses: verifikasi OTP
    // ─────────────────────────────────────────────────────────
    public function verifyOtp(Request $request)
    {
        $request->validate([
            'otp' => ['required', 'digits:6'],
        ], [
            'otp.required' => 'Kode OTP wajib diisi.',
            'otp.digits'   => 'Kode OTP harus 6 digit angka.',
        ]);

        $email = $request->session()->get('admin_reset_email');

        if (!$email) {
            return redirect()->route('admin.password.request')
                             ->with('error', 'Sesi tidak valid. Silakan ulangi dari awal.');
        }

        $record = DB::table('password_reset_tokens')->where('email', $email)->first();

        if (!$record) {
            return back()->with('error', 'Kode OTP tidak ditemukan. Silakan kirim ulang.');
        }

        if (Carbon::now()->diffInMinutes(Carbon::parse($record->created_at)) > 10) {
            DB::table('password_reset_tokens')->where('email', $email)->delete();
            return back()->with('error', 'Kode OTP sudah kadaluarsa. Silakan kirim ulang kode.');
        }

        if (!Hash::check($request->otp, $record->token)) {
            return back()->with('error', 'Kode OTP salah. Periksa kembali kode yang Anda masukkan.');
        }

        $verifiedToken = Str::random(60);
        DB::table('password_reset_tokens')
            ->where('email', $email)
            ->update(['token' => Hash::make($verifiedToken)]);

        $request->session()->put('admin_reset_token', $verifiedToken);

        return redirect()->route('admin.password.reset-form')
                         ->with('success', 'Kode berhasil diverifikasi! Silakan buat password baru.');
    }

    // ─────────────────────────────────────────────────────────
    // STEP 2 — Kirim ulang OTP
    // ─────────────────────────────────────────────────────────
    public function resendOtp(Request $request)
    {
        $email = $request->session()->get('admin_reset_email');

        if (!$email) {
            return redirect()->route('admin.password.request')
                             ->with('error', 'Sesi tidak valid. Silakan masukkan email admin kembali.');
        }

        $admin = User::where('email', $email)
                     ->where('is_admin', true)
                     ->first();

        if (!$admin) {
            return redirect()->route('admin.password.request')
                             ->with('error', 'Email tidak ditemukan.');
        }

        $otp = str_pad(random_int(0, 999999), 6, '0', STR_PAD_LEFT);

        DB::table('password_reset_tokens')->where('email', $email)->delete();
        DB::table('password_reset_tokens')->insert([
            'email'      => $email,
            'token'      => Hash::make($otp),
            'created_at' => Carbon::now(),
        ]);

        Mail::send('emails.admin-otp', [
            'otp'  => $otp,
            'name' => $admin->name ?? 'Admin',
        ], function ($message) use ($email) {
            $message->to($email)
                    ->subject('Kode OTP Baru (Kirim Ulang) - Bibit Cabai Admin');
        });

        return back()->with('success', 'Kode OTP baru telah dikirim ke email admin Anda.');
    }

    // ─────────────────────────────────────────────────────────
    // STEP 3 — Tampilkan form password baru
    // ─────────────────────────────────────────────────────────
    public function showResetForm(Request $request)
    {
        if (!$request->session()->has('admin_reset_token') ||
            !$request->session()->has('admin_reset_email')) {
            return redirect()->route('admin.password.request')
                             ->with('error', 'Sesi tidak valid. Silakan ulangi dari awal.');
        }

        return view('admin.reset-password');
    }

    // ─────────────────────────────────────────────────────────
    // STEP 3 — Proses: simpan password baru
    // ─────────────────────────────────────────────────────────
    public function resetPassword(Request $request)
    {
        $request->validate([
            'password'              => ['required', 'min:8', 'confirmed', 'regex:/^\S+$/'],
            'password_confirmation' => ['required'],
        ], [
            'password.required'  => 'Password baru wajib diisi.',
            'password.min'       => 'Password minimal 8 karakter.',
            'password.confirmed' => 'Konfirmasi password tidak cocok.',
            'password.regex'     => 'Password tidak boleh mengandung spasi.',
        ]);

        $email = $request->session()->get('admin_reset_email');
        $token = $request->session()->get('admin_reset_token');

        if (!$email || !$token) {
            return redirect()->route('admin.password.request')
                             ->with('error', 'Sesi tidak valid. Silakan ulangi dari awal.');
        }

        $record = DB::table('password_reset_tokens')->where('email', $email)->first();

        if (!$record || !Hash::check($token, $record->token)) {
            return redirect()->route('admin.password.request')
                             ->with('error', 'Token tidak valid. Silakan ulangi dari awal.');
        }

        User::where('email', $email)
            ->where('is_admin', true)
            ->update(['password' => Hash::make($request->password)]);

        DB::table('password_reset_tokens')->where('email', $email)->delete();
        $request->session()->forget(['admin_reset_email', 'admin_reset_token']);

        return redirect()->route('admin.login.form')
                         ->with('success', 'Password admin berhasil diubah! Silakan login dengan password baru.');
    }
}