c46b017b51
Audit items #15, #16, #20, #22. #15 — AuthController::me and UserResource form/table now read tier via PlanFeatures::for($user)->tier() instead of Plan::resolveForUser($user) ->name. Tiers.md: PlanFeatures is the single entitlement gate. #16 — Moved SQLite GREATEST/LEAST PHP-backed function registration from AppServiceProvider::boot to tests/TestCase::setUp. Production app boot no longer checks the DB driver name. #20 — FetchOilPrices: added Log::warning on EIA fallback and Log::error on both-providers-failed so primary-source reliability can be trended beyond the cron output buffer. #22 — FuelPriceService::flattenEnabledFlags is now an instance method, matching the rest of the class. No external callers. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
83 lines
2.6 KiB
PHP
83 lines
2.6 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Models\Plan;
|
|
use App\Models\User;
|
|
use App\Services\PlanFeatures;
|
|
use Illuminate\Http\JsonResponse;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Illuminate\Validation\Rules\Password;
|
|
use Laravel\Sanctum\TransientToken;
|
|
|
|
class AuthController extends Controller
|
|
{
|
|
public function register(Request $request): JsonResponse
|
|
{
|
|
$data = $request->validate([
|
|
'name' => ['required', 'string', 'max:255'],
|
|
'email' => ['required', 'email', 'max:255', 'unique:users,email'],
|
|
'password' => ['required', 'confirmed', Password::defaults()],
|
|
]);
|
|
|
|
$user = User::create($data);
|
|
$token = $user->createToken('api')->plainTextToken;
|
|
|
|
return response()->json(['token' => $token, 'user' => $user], 201);
|
|
}
|
|
|
|
public function login(Request $request): JsonResponse
|
|
{
|
|
$credentials = $request->validate([
|
|
'email' => ['required', 'email'],
|
|
'password' => ['required', 'string'],
|
|
]);
|
|
|
|
if (! Auth::attempt($credentials)) {
|
|
return response()->json(['message' => 'Invalid credentials.'], 401);
|
|
}
|
|
|
|
/** @var User $user */
|
|
$user = Auth::user();
|
|
$token = $user->createToken('api')->plainTextToken;
|
|
|
|
return response()->json(['token' => $token, 'user' => $user]);
|
|
}
|
|
|
|
public function logout(Request $request): JsonResponse
|
|
{
|
|
$token = $request->user()->currentAccessToken();
|
|
|
|
// TransientToken means session-based auth (no Bearer token) — invalidate session instead
|
|
if ($token instanceof TransientToken) {
|
|
$request->session()->invalidate();
|
|
$request->session()->regenerateToken();
|
|
} else {
|
|
$token->delete();
|
|
}
|
|
|
|
return response()->json(['message' => 'Logged out.']);
|
|
}
|
|
|
|
public function me(Request $request): JsonResponse
|
|
{
|
|
$user = $request->user();
|
|
$subscription = $user->subscription();
|
|
|
|
$expiresAt = $subscription?->ends_at ?? $subscription?->current_period_end;
|
|
|
|
return response()->json(array_merge(
|
|
$user->toArray(),
|
|
[
|
|
'tier' => PlanFeatures::for($user)->tier(),
|
|
'subscription_cancelled' => $subscription?->canceled() ?? false,
|
|
'subscription_cadence' => Plan::resolveCadenceForUser($user),
|
|
'subscribed_at' => $subscription?->created_at?->toIso8601String(),
|
|
'subscription_expires_at' => $expiresAt?->toIso8601String(),
|
|
],
|
|
));
|
|
}
|
|
}
|