baodev0
c377c7e195
- Create a new Blade view for domain registration (`registrant-tochuc.blade.php`) to capture organization and manager details. - Implement email templates for new domain orders for both admin (`domain-order-new.blade.php`) and customers (`domain-order-received.blade.php`). - Add CSV exports for client and domain data. - Introduce tests for customer mass assignment, password reset, login throttling, and permission gating. - Ensure service renewals use current pricing and validate ownership for virtual machines. - Validate mass assignment behavior in service model.
116 lines
3.5 KiB
PHP
116 lines
3.5 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api\Admin\Auth;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Http\Requests\UpdateProfileRequest;
|
|
use App\Http\Resources\Api\Admin\AdminUserResource;
|
|
use App\Services\ActivityLogger;
|
|
use Illuminate\Http\JsonResponse;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Tymon\JWTAuth\Facades\JWTAuth;
|
|
use Tymon\JWTAuth\Exceptions\JWTException;
|
|
|
|
class AuthController extends Controller
|
|
{
|
|
public function __construct(private readonly ActivityLogger $activityLogger) {}
|
|
|
|
public function login(Request $request): JsonResponse
|
|
{
|
|
$request->validate([
|
|
'username' => 'required|string',
|
|
'password' => 'required|string',
|
|
]);
|
|
|
|
$token = Auth::guard('admin')->attempt($request->only('username', 'password'));
|
|
|
|
if (!$token) {
|
|
$this->activityLogger->log(
|
|
event: 'login_failed',
|
|
logName: 'auth',
|
|
description: '[admin] Đăng nhập thất bại với username: ' . $request->username,
|
|
);
|
|
return response()->json([
|
|
'error' => true,
|
|
'message' => 'Thông tin đăng nhập không chính xác.',
|
|
], 401);
|
|
}
|
|
|
|
$user = Auth::guard('admin')->user();
|
|
|
|
$this->activityLogger->logAuth('login', 'admin', $user->id, $user->username ?? $user->email);
|
|
|
|
return response()->json([
|
|
'error' => false,
|
|
'data' => [
|
|
'token' => $token,
|
|
'token_type' => 'bearer',
|
|
'expires_in' => config('jwt.ttl') * 60,
|
|
'user' => new AdminUserResource($user),
|
|
],
|
|
]);
|
|
}
|
|
|
|
public function me(): JsonResponse
|
|
{
|
|
$user = Auth::guard('admin')->user();
|
|
|
|
return response()->json([
|
|
'error' => false,
|
|
'data' => ['user' => new AdminUserResource($user)],
|
|
]);
|
|
}
|
|
|
|
public function updateProfile(UpdateProfileRequest $request): JsonResponse
|
|
{
|
|
$user = Auth::guard('admin')->user();
|
|
|
|
$user->update($request->validated());
|
|
|
|
return response()->json([
|
|
'error' => false,
|
|
'message' => 'Cập nhật hồ sơ thành công.',
|
|
'data' => ['user' => new AdminUserResource($user->fresh())],
|
|
]);
|
|
}
|
|
|
|
public function refresh(): JsonResponse
|
|
{
|
|
try {
|
|
$newToken = JWTAuth::parseToken()->refresh();
|
|
$user = JWTAuth::setToken($newToken)->toUser();
|
|
|
|
return response()->json([
|
|
'error' => false,
|
|
'data' => [
|
|
'token' => $newToken,
|
|
'token_type' => 'bearer',
|
|
'expires_in' => config('jwt.ttl') * 60,
|
|
'user' => new AdminUserResource($user),
|
|
],
|
|
]);
|
|
} catch (JWTException) {
|
|
return response()->json([
|
|
'error' => true,
|
|
'message' => 'Không thể làm mới phiên đăng nhập. Vui lòng đăng nhập lại.',
|
|
], 401);
|
|
}
|
|
}
|
|
|
|
public function logout(): JsonResponse
|
|
{
|
|
$user = Auth::guard('admin')->user();
|
|
if ($user) {
|
|
$this->activityLogger->logAuth('logout', 'admin', $user->id, $user->username ?? $user->email);
|
|
}
|
|
|
|
Auth::guard('admin')->logout();
|
|
|
|
return response()->json([
|
|
'error' => false,
|
|
'message' => 'Đã đăng xuất thành công.',
|
|
]);
|
|
}
|
|
}
|