project-ta/.history/app/Http/Controllers/AuthController_202605061807...

172 lines
4.2 KiB
PHP

<?php
namespace App\Http\Controllers;
use Illuminate\Http\Request;
use App\Models\User;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Facades\Mail;
use App\Mail\OtpMail;
use Carbon\Carbon;
class AuthController extends Controller
{
// ================= LOGIN =================
public function login()
{
return view('auth.login');
}
public function prosesLogin(Request $request)
{
$request->validate([
'login' => 'required',
'password' => 'required'
]);
$login = $request->login;
$field = filter_var($login, FILTER_VALIDATE_EMAIL) ? 'email' : 'username';
if (Auth::attempt([$field => $login, 'password' => $request->password])) {
$request->session()->regenerate();
/** @var \App\Models\User $user */
$user = Auth::user();
return match($user->role) {
'admin' => redirect('/admin/dashboard'),
'rt' => redirect('/rt/iuran'),
default => redirect('/user/home'),
};
}
return back()->with('error', 'Login gagal!');
}
// ================= REGISTER =================
public function register()
{
return view('auth.register');
}
public function prosesRegister(Request $request)
{
$request->validate([
'name' => 'required',
'username' => 'required|unique:users,username',
'email' => 'required|email|unique:users,email',
'password' => 'required|min:6',
]);
User::create([
'name' => $request->name,
'username' => $request->username,
'email' => $request->email,
'password' => Hash::make($request->password),
'role' => 'user'
]);
return redirect('/login')->with('success', 'Register berhasil');
}
// ================= LOGOUT =================
public function logout(Request $request)
{
Auth::logout();
$request->session()->invalidate();
$request->session()->regenerateToken();
return redirect('/login');
}
// ================= FORGOT PASSWORD =================
public function forgotForm()
{
return view('auth.forgot');
}
public function sendOtp(Request $request)
{
$request->validate([
'email' => 'required|email'
]);
$user = User::where('email', $request->email)->first();
if (!$user) {
return back()->with('error', 'Email tidak ditemukan');
}
$otp = rand(100000, 999999);
$user->otp_code = $otp;
$user->otp_expired = now()->addMinutes(5);
$user->save();
Mail::to($user->email)->send(new OtpMail($otp));
session(['reset_email' => $user->email]);
return redirect()->route('password.otp')->with('success', 'OTP dikirim ke email');
}
public function otpForm()
{
return view('auth.otp');
}
public function verifyOtp(Request $request)
{
$request->validate([
'otp' => 'required'
]);
$user = User::where('email', session('reset_email'))->first();
if (!$user) {
return redirect()->route('password.forgot');
}
if ($user->otp_code != $request->otp) {
return back()->with('error', 'OTP salah');
}
if (Carbon::now()->gt($user->otp_expired)) {
return back()->with('error', 'OTP expired');
}
return redirect()->route('password.reset');
}
public function resetForm()
{
return view('auth.reset');
}
public function resetPassword(Request $request)
{
$request->validate([
'password' => 'required|min:6|confirmed'
]);
$user = User::where('email', session('reset_email'))->first();
if (!$user) {
return redirect()->route('password.forgot');
}
$user->password = Hash::make($request->password);
$user->otp_code = null;
$user->otp_expired = null;
$user->save();
return redirect('/login')->with('success', 'Password berhasil direset');
}
}