MIF_E31221305/TA_website/app/Http/Controllers/AdminController.php

54 lines
1.3 KiB
PHP

<?php
namespace App\Http\Controllers;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use App\Models\User;
class AdminController extends Controller
{
public function showLoginForm()
{
return view('auth.admin-login');
}
public function login(Request $request)
{
$credentials = $request->validate([
'email' => ['required', 'email'],
'password' => ['required'],
]);
$user = User::where('email', $credentials['email'])->first();
if (!$user || $user->role !== 'admin') {
return back()->withErrors([
'email' => 'These credentials do not have admin access.',
]);
}
if (Auth::attempt($credentials)) {
$request->session()->regenerate();
// Update last login time - REMOVED as requested
// $user->update([
// 'last_login_at' => now()
// ]);
return redirect()->intended('admin/dashboard');
}
return back()->withErrors([
'email' => 'The provided credentials do not match our records.',
]);
}
public function logout(Request $request)
{
Auth::logout();
$request->session()->invalidate();
$request->session()->regenerateToken();
return redirect('/admin/login');
}
}