first commit

app/Http/Controllers/AuthController.php

@@ -0,0 +1,55 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\UsersModel;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Cookie;
+use Illuminate\Support\Facades\Hash;
+use Psy\TabCompletion\Matcher\FunctionsMatcher;
+use Symfony\Component\HttpFoundation\Response;
+
+class AuthController extends Controller
+{
+    public function index()
+    {
+        return response()->json(['message' => 'succes', 'data' => 'data user'], 200);
+    }
+
+    public function login(Request $request)
+    {
+        if (!Auth::attempt($request->only('email', 'password'))) {
+            return response()->json(['status' => 'error', 'message' => 'invalid credentials'], Response::HTTP_UNAUTHORIZED);
+        }
+        $user = Auth::user();
+        $token = $user->createToken('token')->plainTextToken;
+        $cookie = cookie('jwt', $token, 60 * 2);
+
+        UsersModel::where('id', $user->id)
+            ->update(['remember_token' => $token]);
+
+        return response()->json([
+            'data' => UsersModel::select(['id', 'user_name', 'name', 'email'])->where('id', $user->id)->first(),
+            'token' => $token,
+            'metadata' => ['status' => 'Ok', 'message' => 'Success']
+        ])->withCookie($cookie);
+    }
+
+    public function userAuth()
+    {
+        $user = Auth::user();
+        return response()->json(['data' => 'hallloooo', 'metadata' => ['status' => 'Ok', 'message' => 'success']]);
+        // return $user;
+    }
+
+    public function logout()
+    {
+        $cookie = Cookie::forget('jwt');
+        // if ($cookie) {
+        //   return response()->json(['metadata' => ['status' => '400', 'message' => 'error']], Response::HTTP_BAD_REQUEST);
+        // } else {
+        //   }
+        return response()->json(['metadata' => ['status' => 'Ok', 'message' => 'success']])->withCookie($cookie);
+    }
+}

app/Http/Controllers/Controller.php

@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
+use Illuminate\Foundation\Bus\DispatchesJobs;
+use Illuminate\Foundation\Validation\ValidatesRequests;
+use Illuminate\Routing\Controller as BaseController;
+
+class Controller extends BaseController
+{
+    use AuthorizesRequests, DispatchesJobs, ValidatesRequests;
+}

app/Http/Controllers/LoginController.php

@@ -0,0 +1,14 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+
+class LoginController extends Controller
+{
+    //
+    public function index(){
+        
+        return response()->json(['message'=>'succes','data'=>''],200);
+    }
+}

app/Http/Controllers/Users/UserController.php

@@ -0,0 +1,52 @@
+<?php
+
+namespace App\Http\Controllers\Users;
+
+use App\Http\Controllers\Controller;
+use App\Models\UsersModel;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Cache;
+
+class UserController extends Controller
+{
+    public function index()
+    {
+        $CacheKey = 'AllUser';
+        $userKey = 'User';
+        $users = UsersModel::get();
+        $user = UsersModel::limit(1)->get();
+
+        Cache::put($CacheKey, $users, 50);
+        Cache::put($userKey, $user, 50);
+        session(['User' => Cache::get($userKey)]);
+        return response()->json(['listUser' => $users, 'User' => Cache::get($userKey)], 200);
+    }
+
+    public function register(Request $request)
+    {
+        $User = UsersModel::create([
+            'user_name' =>  $request->input('user_name'),
+            'name'      =>  $request->input('name'),
+            'email'     =>  $request->input('email'),
+            'password'  =>  Hash::make($request->input('password')),
+
+        ]);
+        return response()->json(['data' => $User, 'metadata' => ['status' => 'oke', 'message' => 'success']], 200);
+    }
+    public function getUser($id, Request $param)
+    {
+        $user = UsersModel::find($id);
+        return response()->json(['User' => $param->input('user_id')], 200);
+    }
+
+    public function updateUser(Request $request, $id)
+    {
+        $update = UsersModel::update([
+            'nama' => $param->input('nama'),
+            'email' => $param->input('email'),
+            'password' => Hash::make($param->input('pass'))
+        ]);
+        return response()->json(['User' => 'oke'], 200);
+    }
+}

app/Http/Kernel.php

@@ -0,0 +1,68 @@
+<?php
+
+namespace App\Http;
+
+use Illuminate\Foundation\Http\Kernel as HttpKernel;
+
+class Kernel extends HttpKernel
+{
+    /**
+     * The application's global HTTP middleware stack.
+     *
+     * These middleware are run during every request to your application.
+     *
+     * @var array<int, class-string|string>
+     */
+    protected $middleware = [
+        // \App\Http\Middleware\TrustHosts::class,
+        \App\Http\Middleware\TrustProxies::class,
+        \Fruitcake\Cors\HandleCors::class,
+        \App\Http\Middleware\PreventRequestsDuringMaintenance::class,
+        \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
+        \App\Http\Middleware\TrimStrings::class,
+        \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,
+    ];
+
+    /**
+     * The application's route middleware groups.
+     *
+     * @var array<string, array<int, class-string|string>>
+     */
+    protected $middlewareGroups = [
+        'web' => [
+            \App\Http\Middleware\EncryptCookies::class,
+            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
+            \Illuminate\Session\Middleware\StartSession::class,
+            // \Illuminate\Session\Middleware\AuthenticateSession::class,
+            \Illuminate\View\Middleware\ShareErrorsFromSession::class,
+            \App\Http\Middleware\VerifyCsrfToken::class,
+            \Illuminate\Routing\Middleware\SubstituteBindings::class,
+        ],
+
+        'api' => [
+            // \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
+            // 'throttle:api',
+            \Illuminate\Routing\Middleware\SubstituteBindings::class,
+        ],
+    ];
+
+    /**
+     * The application's route middleware.
+     *
+     * These middleware may be assigned to groups or used individually.
+     *
+     * @var array<string, class-string|string>
+     */
+    protected $routeMiddleware = [
+        'auth' => \App\Http\Middleware\Authenticate::class,
+        'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
+        'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
+        'can' => \Illuminate\Auth\Middleware\Authorize::class,
+        'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
+        'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class,
+        'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class,
+        'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
+        'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
+        'logging' => \App\Http\Middleware\LogRequestResponse::class,
+    ];
+}

app/Http/Middleware/Authenticate.php

@@ -0,0 +1,39 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Auth\Middleware\Authenticate as Middleware;
+use Illuminate\Auth\Middleware\Authorize;
+
+class Authenticate extends Middleware
+{
+    /**
+     * Get the path the user should be redirected to when they are not authenticated.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return string|null
+     */
+    protected function redirectTo($request)
+    {
+        if (! $request->expectsJson()) {
+            return route('login');
+        }
+    }
+
+    public function handle($request, Closure $next, ...$guards)
+    {
+        $jwt = $request->cookie('jwt');
+        if ($jwt) {
+            # code...
+            $request->headers->set('Authorization', 'Bearer ' . $jwt);
+        }
+        // $output = new \Symfony\Component\Console\Output\ConsoleOutput();
+        // $output->writeln($request->cookie('jwt'));
+        // $output->writeln('author : ' . $request->header('Authorization'));
+        // $output->writeln('cookie : ' . $request->header('cookie'));
+        $this->authenticate($request, $guards);
+
+        return $next($request);
+    }
+}

app/Http/Middleware/EncryptCookies.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Cookie\Middleware\EncryptCookies as Middleware;
+
+class EncryptCookies extends Middleware
+{
+    /**
+     * The names of the cookies that should not be encrypted.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}

app/Http/Middleware/LogRequestResponse.php

@@ -0,0 +1,58 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Http\Response;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Log;
+
+
+class LogRequestResponse
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @param  \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse)  $next
+     * @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
+     */
+    public function handle(Request $request, Closure $next)
+    {
+        $data = $request->all();
+
+        // If logging an authentication request, mask the password in the log
+        if ($request->isMethod('post') && $request->path() === 'api/login' && isset($data['password'])) {
+            $data['password'] = 'REDACTED';  // Mask the password
+        }
+
+        // Log the request
+        Log::info("API Request: {$request->method()}, {$request->fullUrl()}", [
+            'headers' => $request->headers->all(),
+            'body' => $data,  // Ensure the body is safely logged
+        ]);
+
+        // Continue processing the request
+        $response = $next($request);
+
+        // Log the response
+        $responseContent = $response->getContent();
+
+        // If the response is JSON, decode it for better readability in the logs
+        $decodedResponse = null;
+        if ($response->headers->get('Content-Type') === 'application/json') {
+            $decodedResponse = json_decode($responseContent, true);
+        }
+
+        // Log::info("API Response: {$response->status()}, {$request->fullUrl()}", [
+        //     'user' => Auth::user()?->email,  // Optionally log the authenticated user email
+        //     'headers' => $response->headers->all(),
+        //     'body' => $decodedResponse ?? $responseContent,  // Log decoded response if it's JSON
+        // ]);
+        Log::info("API Response: {$response->status()}, {$request->fullUrl()}");
+
+        return $response;
+    }
+}

app/Http/Middleware/PreventRequestsDuringMaintenance.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\PreventRequestsDuringMaintenance as Middleware;
+
+class PreventRequestsDuringMaintenance extends Middleware
+{
+    /**
+     * The URIs that should be reachable while maintenance mode is enabled.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}

app/Http/Middleware/RedirectIfAuthenticated.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Providers\RouteServiceProvider;
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+
+class RedirectIfAuthenticated
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @param  \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse)  $next
+     * @param  string|null  ...$guards
+     * @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
+     */
+    public function handle(Request $request, Closure $next, ...$guards)
+    {
+        $guards = empty($guards) ? [null] : $guards;
+
+        foreach ($guards as $guard) {
+            if (Auth::guard($guard)->check()) {
+                return redirect(RouteServiceProvider::HOME);
+            }
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/TrimStrings.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\TrimStrings as Middleware;
+
+class TrimStrings extends Middleware
+{
+    /**
+     * The names of the attributes that should not be trimmed.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        'current_password',
+        'password',
+        'password_confirmation',
+    ];
+}

app/Http/Middleware/TrustHosts.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Http\Middleware\TrustHosts as Middleware;
+
+class TrustHosts extends Middleware
+{
+    /**
+     * Get the host patterns that should be trusted.
+     *
+     * @return array<int, string|null>
+     */
+    public function hosts()
+    {
+        return [
+            $this->allSubdomainsOfApplicationUrl(),
+        ];
+    }
+}

app/Http/Middleware/TrustProxies.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Http\Middleware\TrustProxies as Middleware;
+use Illuminate\Http\Request;
+
+class TrustProxies extends Middleware
+{
+    /**
+     * The trusted proxies for this application.
+     *
+     * @var array<int, string>|string|null
+     */
+    protected $proxies;
+
+    /**
+     * The headers that should be used to detect proxies.
+     *
+     * @var int
+     */
+    protected $headers =
+        Request::HEADER_X_FORWARDED_FOR |
+        Request::HEADER_X_FORWARDED_HOST |
+        Request::HEADER_X_FORWARDED_PORT |
+        Request::HEADER_X_FORWARDED_PROTO |
+        Request::HEADER_X_FORWARDED_AWS_ELB;
+}

app/Http/Middleware/VerifyCsrfToken.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as Middleware;
+
+class VerifyCsrfToken extends Middleware
+{
+    /**
+     * The URIs that should be excluded from CSRF verification.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}