feat: implement system-wide activity logging with database persistence, repository patterns, and admin controller access.

app/Http/Controllers/Api/Admin/Auth/AuthController.php

@@ -4,6 +4,7 @@ namespace App\Http\Controllers\Api\Admin\Auth;
 
 use App\Http\Controllers\Controller;
 use App\Http\Resources\Api\Admin\AdminUserResource;
+use App\Services\ActivityLogger;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
@@ -12,6 +13,8 @@ use Tymon\JWTAuth\Exceptions\JWTException;
 
 class AuthController extends Controller
 {
+    public function __construct(private readonly ActivityLogger $activityLogger) {}
+
     public function login(Request $request): JsonResponse
     {
         $request->validate([
@@ -22,6 +25,11 @@ class AuthController extends Controller
         $token = Auth::guard('admin')->attempt($request->only('username', 'password'));
 
         if (!$token) {
+            $this->activityLogger->log(
+                event: 'login_failed',
+                logName: 'auth',
+                description: '[admin] Đăng nhập thất bại với username: ' . $request->username,
+            );
             return response()->json([
                 'error'   => true,
                 'message' => 'Thông tin đăng nhập không chính xác.',
@@ -30,6 +38,8 @@ class AuthController extends Controller
 
         $user = Auth::guard('admin')->user();
 
+        $this->activityLogger->logAuth('login', 'admin', $user->id, $user->username ?? $user->email);
+
         return response()->json([
             'error' => false,
             'data'  => [
@@ -76,6 +86,11 @@ class AuthController extends Controller
 
     public function logout(): JsonResponse
     {
+        $user = Auth::guard('admin')->user();
+        if ($user) {
+            $this->activityLogger->logAuth('logout', 'admin', $user->id, $user->username ?? $user->email);
+        }
+
         Auth::guard('admin')->logout();
 
         return response()->json([