sistem_rekomendasi/app/Http/Controllers/Api/AuthController.php

53 lines
1.4 KiB
PHP

<?php
namespace App\Http\Controllers\Api;
use App\Http\Controllers\Controller;
use App\Models\User;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;
use Illuminate\Validation\ValidationException;
class AuthController extends Controller
{
public function login(Request $request)
{
$request->validate([
'username' => 'required',
'password' => 'required',
]);
$user = User::where('username', $request->username)->first();
if (! $user || ! Hash::check($request->password, $user->password)) {
return response()->json([
'success' => false,
'message' => 'Username atau password salah.'
], 401);
}
// Hapus token lama
$user->tokens()->delete();
// Buat token baru
$token = $user->createToken('auth_token')->plainTextToken;
return response()->json([
'success' => true,
'message' => 'Login berhasil',
'access_token' => $token,
'token_type' => 'Bearer',
'role' => $user->role, // Penting untuk redirect di frontend
'user' => [
'name' => $user->name,
'username' => $user->username,
]
]);
}
public function logout(Request $request)
{
$request->user()->currentAccessToken()->delete();
return response()->json(['message' => 'Berhasil logout']);
}
}