Commit Graph

15 Commits

Author SHA1 Message Date
micko samawa 3e6188bfaa refine dashboard and admin access 2026-06-14 21:15:56 +07:00
micko samawa 721c5dd9d4 improve admin dashboard 2026-06-13 12:59:33 +07:00
micko samawa cf4435580d final update web and mobile 2026-06-12 22:46:44 +07:00
micko samawa 6bad1aa7b2 feat: Implement admin-scoped data visibility and comprehensive authorization
- Add admin_id FK to kontrakans table
- Add authorization checks to KontrakanController (edit, update, destroy, bulkDestroy)
- Add authorization checks to BookingController (store, bulkDestroy)
- Fix EnsureRole middleware to use auth:admin guard
- Fix booking index stats to filter by admin ownership
- Add model relationships: Admin.kontrakans(), Admin.isSuperAdmin(), Admin.isAdmin()
- Ensure admin biasa sees only their data, super_admin sees all data
- Secure bulk delete operations with per-item admin validation
2026-05-25 14:00:20 +07:00
micko samawa 605e92bbd9 Fix: Reset super admin, fix User model role attribute, remove rate limiting for development
- Added new super admin account (mikoadmin@gmail.com)
- Fixed User model getRoleLabelAttribute() to handle null role
- Fixed AuthController to refresh user after creation
- Removed rate limiting from register/login endpoints for development
- Added migration to ensure role and phone columns exist
- Updated app config with correct IP (10.192.233.99:8000)
- Fixed API response to include all required fields for Flutter
2026-05-19 08:01:07 +07:00
micko samawa cf41a8b582 Perbaiki pengisian alamat laundry dari peta 2026-05-17 14:16:55 +07:00
micko samawa c0fe039e91 Update mobile config, add admin reminder notifications, and apply migrations 2026-05-10 23:29:18 +07:00
micko samawa 8359e2db4a Fix CSRF 419 by excluding _token/_method from laundry draft autosave 2026-04-26 21:14:59 +07:00
micko samawa 82227f5851 Harden admin access and clean unused web controllers 2026-04-18 00:32:43 +07:00
micko samawa 864be692e8 feat: modernize mobile UI and normalize laundry service handling 2026-04-16 01:00:10 +07:00
micko samawa a8e72f1203 Fix laundry distance display with user location and cleanup mobile laundry model 2026-04-04 13:16:51 +07:00
micko samawa b192557bb8 Update user management, booking model, and mobile screens 2026-03-14 11:11:28 +07:00
micko samawa 1a277067f4 Fix favorites system: improve error handling, type safety, and UI feedback
- Rewrite favorite_service.dart with proper error handling, auth checks, and timeouts
- Add error state UI to favorites_screen.dart with retry button
- Add SnackBar feedback on toggle failures in home/search/detail screens
- Type-safe parsing with per-item error handling to prevent crashes
- Clean orphan favorite records from database
- Add debugPrint logging for troubleshooting
- All changes maintain backward compatibility
2026-03-07 00:45:30 +07:00
micko samawa 73e8f197f2 Add laundry open/close times and status fields
Features:
- Laundry: Add jam_buka, jam_tutup, status (buka/tutup) fields to database
- Web forms: Add opening/closing times and status dropdown to create/edit views
- Controller: Validate and save new fields in store() and update()
- Mobile: Parse time strings to remove seconds, display status and hours
- Mobile: Add cache clearing to auto-refresh image data from server
- Mobile: Fix photo priority (prefer 'foto' field over galeri entries)

Changes:
- spk_kontrakan/app/Models/Laundry.php: Update fillable
- spk_kontrakan/app/Http/Controllers/LaundryController.php: Add validation and storage
- spk_kontrakan/resources/views/Laundry/create.blade.php: Add form fields
- spk_kontrakan/resources/views/Laundry/edit.blade.php: Add form fields
- spk_mobile/lib/models/laundry.dart: Time parsing, photo priority fix
- spk_mobile/lib/models/kontrakan.dart: Photo priority fix
- spk_mobile/pubspec.yaml: Add flutter_cache_manager
- Mobile screens: Add cache clearing on data refresh
2026-02-27 03:56:39 +07:00
micko samawa 786743231c fix: Laravel Backend Security & Stability Improvements
- Add rate limiting (api:60/min, login:5/min, register:3/hour, saw:30/min)
- Implement centralized JSON error handler for all API exceptions
- Create 6 Form Request classes for input validation
- Fix N+1 query problems with withCount and eager loading
- Add caching for kriteria queries (1 hour cache)
- Create /api/health and /api/docs documentation endpoints
- Fix export system: CSV export instead of Excel (package not installed)
- Restrict CORS to specific origins, set Sanctum token expiration (30 days)
- Add error_code fields to all API responses
- Update pagination views to remove large arrow icons, replace with text buttons
- Fix field name consistency: use correct database columns
- Add SQL injection prevention via sort column whitelist
- Optimize pagination UI for Activity Logs and other pages
2026-02-26 00:19:15 +07:00