aso/Modules/HospitalPortal/Http/Controllers/Api/AuthController.php

<?php

namespace Modules\HospitalPortal\Http\Controllers\Api;

use App\Http\Controllers\Controller;
use App\Models\User;
use Crypt;
use Error;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Facades\Mail;
use Modules\Internal\Emails\SendVerifyEmail;
use Modules\Internal\Events\ForgetPassword;
use Illuminate\Support\Facades\Validator;
use Modules\HospitalPortal\Helpers\ApiResponse;
use Illuminate\Support\Facades\DB;
use App\Helpers\Helper;
use Illuminate\Support\Facades\View;

class AuthController extends Controller
{
    public function login(Request $request)
    {
        $data = [
            'email' => $request->email,
            'password' => $request->password
        ];
        $validator = Validator::make($request->all(), [
            'email' => 'required|email',
            'password' => 'required'
        ], [
            'email.required' => trans('Validation.required',['attribute' => 'Email']),
            'email.email' => trans('Validation.email'),
            'password.required' => trans('Validation.required',['attribute' => 'Password']),
        ]);

        if ($validator->fails())
        {
           return ApiResponse::apiResponse('Bad Request', $data, $validator->errors(), 400);
        }
        else
        {
            $user = User::where('email', $request->email)->first();
            if (!$user) {
                return ApiResponse::apiResponse('Not Found', $data, trans('Message.not_found'), 404);
            }

            if (!Hash::check($request->password, $user->password)) {
                return ApiResponse::apiResponse('Bad Request', $data, trans('Message.password'), 400);
            }

            $res_data = [
                'user' => $user,
                'token' => $user->createToken('app')->plainTextToken
            ];

            return ApiResponse::apiResponse("Success", $res_data, trans('Message.success'), 200);
        }
    }

    public function logout(Request $request)
    {
        $request->user()->tokens()->delete();

        return ApiResponse::apiResponse('Success', [], trans('Message.logout'), 200);
    }

    public function resetPassword(Request $request)
    {
        $user = Auth::user();

        $request->validate([
            'old_password' => 'required',
            'new_password' => 'required',
            'confirm_new_password' => 'required'
        ]);

        if (!Hash::check($request['old_password'], $user->password)) {
            return response(['Message' => 'Password Salah'], 403);
        }

        if ($request["new_password"] != $request["confirm_new_password"]) {
            return response([
                'Message' => "Password Tidak Sama"
            ]);
        }

        $user->update([
            'password' => Hash::make($request->confirm_new_password),
        ]);
        return response()->json($user);
    }

    public function verifyEmail(Request $request)
    {
        $request->validate([
            'email' => 'required|email',
        ]);

        $user = User::query()
            ->where('email', $request->email)
            ->first();

        if (!$user) {
            return response(['Message' => 'User Tidak Ditemukan'], 404);
        }

        Event(new ForgetPassword($user));

        // Mail::to($user->email)->send(new SendVerifyEmail($user));

        return response()->json($user);
    }

    public function forgotPassword(Request $request)
    {
        $data = [
            'email' => $request->email,
        ];

        $validator = Validator::make($request->all(), [
            'email' => 'required|email',
        ], [
            'email.required' => trans('Validation.required',['attribute' => 'Email']),
            'email.email' => trans('Validation.email'),
        ]);

        if ($validator->fails())
        {
           return ApiResponse::apiResponse('Bad Request', $data, $validator->errors(), 400);
        }
        else
        {
            $user = User::where('email', $request->email)->first();
            if (!$user) {
                return ApiResponse::apiResponse('Not Found', $data, trans('Message.not_found'), 404);
            }

            //send email
            // Insert data notifications
            $emailTo = $request->email;
            $dataNotif = [
                'user_id' => $user->id,
                'email' => $emailTo,
                'title' => 'Forgot Password',
                'description' => 'Request forgot password from App Doctor',
                'type' => 1,
                'isUnRead' => true,
                'created_by' => auth()->check() ? auth()->user()->id : null,
                'created_at' => date('Y-m-d H:i:s'),
                'updated_at' => date('Y-m-d H:i:s'),
            ];
            $sendNotif = Helper::insertNotification($dataNotif);
            //Insert data password reset
            $token = mt_rand(100000, 999999); // Menghasilkan angka acak antara 100000 dan 999999
            $p_resets = DB::table('password_resets')
            ->insert([
                'email' => $request->email,
                'token' => $token,
                'created_at' => date('Y-m-d H:i:s'),
            ]);
            // Send Email after insert notifications
            if($sendNotif && $p_resets)
            {
                //send to alarm
                $nameTo = 'User';
                $dataEmail = [
                    'email' => $emailTo,
                    'name' => $nameTo,
                    'subject' => 'Request Forgot Password from App Doctor Date '. date('Y-m-d H:i:s'),
                    'body' => View::make('email/forgot_password', ['token' => $token])->render(),
                ];
                Helper::sendEmail($dataEmail);

                $res = DB::table('password_resets')
                ->where('email', '=', $request->email)
                ->where('token', '=', $token)
                ->get();

                return ApiResponse::apiResponse("Success", $res, trans('Message.success'), 200);
            }
            else
            {
                return ApiResponse::apiResponse("Internal Server Error", $data, trans('Message.server_error'), 500);
            }
        }
    }
}