aboutsummaryrefslogtreecommitdiffstats
path: root/source/app/Http/Controllers/Api/LoginController.php
blob: 0fae72eceffe7b59d140675b9fe15bc5ff61c221 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
<?php

namespace App\Http\Controllers\Api;

use App\Http\Controllers\Controller;
use App\Models\Admin;
use App\Models\Company;
use App\Models\Student;
use App\Services\LogService;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;
use Illuminate\Validation\ValidationException;

class LoginController extends Controller
{
    /**
     * Handle unified login for students, companies, and admins
     *
     * @param Request $request
     * @param LogService $logService
     * @return JsonResponse
     * @throws ValidationException
     */
    public function login(Request $request, LogService $logService): JsonResponse
    {
        $request->validate([
            'email' => 'required|email',
            'password' => 'required'
        ]);

        // Try student login
        $student = Student::where('email', $request->email)->first();
        if ($student) {
            if (Hash::check($request->password, $student->password)) {
                // Log successful student login
                $logService->setLog("Student", $student->id, "Student logged in", "Auth");
                
                return response()->json([
                    'user' => $student,
                    'token' => $student->createToken('student-token', ['student'])->plainTextToken,
                    'user_type' => 'student'
                ]);
            }
        }

        // Try company login
        $company = Company::where('email', $request->email)->first();
        if ($company) {
            if (Hash::check($request->password, $company->password)) {
                // Log successful company login
                $logService->setLog("Company", $company->id, "Company logged in", "Auth");
                
                return response()->json([
                    'user' => $company,
                    'token' => $company->createToken('company-token', ['company'])->plainTextToken,
                    'user_type' => 'company'
                ]);
            }
        }
        
        // Try admin login
        $admin = Admin::where('email', $request->email)->first();
        if ($admin) {
            if (Hash::check($request->password, $admin->password)) {
                // Log successful admin login
                $logService->setLog("Admin", $admin->id, "Admin logged in", "Auth");
                
                return response()->json([
                    'user' => $admin,
                    'token' => $admin->createToken('admin-token', ['admin'])->plainTextToken,
                    'user_type' => 'admin'
                ]);
            }
        }

        // Authentication failed
        throw ValidationException::withMessages([
            'email' => ['The provided credentials are incorrect.'],
        ]);
    }

    /**
     * Log out the authenticated user
     *
     * @param Request $request
     * @param LogService $logService
     * @return JsonResponse
     */
    public function logout(Request $request, LogService $logService): JsonResponse
    {
        $user = $request->user();
        $userType = null;
        $userId = null;
        
        if ($user instanceof Student) {
            $userType = 'Student';
            $userId = $user->id;
        } elseif ($user instanceof Company) {
            $userType = 'Company';
            $userId = $user->id;
        } elseif ($user instanceof Admin) {
            $userType = 'Admin';
            $userId = $user->id;
        }
        
        // Delete the current token
        $request->user()->currentAccessToken()->delete();
        
        // Log the logout if we identified the user type
        if ($userType && $userId) {
            $logService->setLog($userType, $userId, "$userType logged out", "Auth");
        }
        
        return response()->json([
            'message' => 'Successfully logged out'
        ]);
    }
}