541 lines
18 KiB
PHP
541 lines
18 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Helpers\MobileNumberHelper;
|
|
use App\Jobs\SendSMSJob;
|
|
use App\Models\PackageName;
|
|
use App\Models\Product;
|
|
use App\Models\Transaction;
|
|
use App\Models\User;
|
|
use App\Rules\MobileNumber;
|
|
use App\Services\CafeService;
|
|
use Carbon\Carbon;
|
|
use Illuminate\Support\Str;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Support\Facades\Storage;
|
|
use Illuminate\Validation\Rule;
|
|
use Laravel\Socialite\Facades\Socialite;
|
|
use Illuminate\Support\Facades\Http;
|
|
use Illuminate\Support\Facades\Password;
|
|
use Illuminate\Auth\Events\PasswordReset;
|
|
|
|
class UserController extends Controller
|
|
{
|
|
public function requestPasswordReset(Request $request)
|
|
{
|
|
$request->validate([
|
|
'email' => 'required|email',
|
|
]);
|
|
|
|
$status = Password::sendResetLink(
|
|
$request->only('email')
|
|
);
|
|
|
|
if ($status === Password::RESET_LINK_SENT) {
|
|
return response()->json(['message' => __($status)]);
|
|
}
|
|
|
|
return response()->json(['message' => __($status)], 400);
|
|
}
|
|
public function showResetForm($token)
|
|
{
|
|
return view('auth.reset-password', ['token' => $token]);
|
|
}
|
|
|
|
public function resetPassword(Request $request)
|
|
{
|
|
$request->validate([
|
|
'email' => 'required|email',
|
|
'token' => 'required|string',
|
|
'password' => 'required|string|confirmed|min:6',
|
|
]);
|
|
|
|
$status = Password::reset(
|
|
$request->only('email', 'password', 'password_confirmation', 'token'),
|
|
function ($user, $password) {
|
|
$user->forceFill([
|
|
'password' => $password,
|
|
])->setRememberToken(Str::random(60));
|
|
|
|
$user->save();
|
|
|
|
event(new PasswordReset($user));
|
|
}
|
|
);
|
|
|
|
if ($status === Password::PASSWORD_RESET) {
|
|
return response()->json(['message' => __($status)]);
|
|
}
|
|
|
|
return response()->json(['message' => __($status)], 400);
|
|
}
|
|
public function resetPasswordInApp(Request $request)
|
|
{
|
|
$request->validate([
|
|
'email' => 'required|email',
|
|
'password' => 'required|string|confirmed|min:6',
|
|
]);
|
|
|
|
$user = User::where('email', $request->email)->first();
|
|
|
|
if (!$user) {
|
|
return response()->json(['message' => 'کاربری با این ایمیل یافت نشد'], 404);
|
|
}
|
|
|
|
// Update password and remember token
|
|
$user->password = $request->password;
|
|
$user->setRememberToken(Str::random(60));
|
|
$user->save();
|
|
|
|
event(new PasswordReset($user));
|
|
|
|
return response()->json(['message' => 'رمز عبور با موفقیت تغییر یافت']);
|
|
}
|
|
|
|
public function login(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'auth' => 'string|required',
|
|
'password' => 'string|required',
|
|
'package_name' => 'string|required',
|
|
'fcm_token' => 'string|nullable'
|
|
]);
|
|
|
|
if (!$packageName = PackageName::where('name', $data['package_name'])->first()) {
|
|
return response()->json(['message' => 'package name not found'], 404);
|
|
}
|
|
|
|
$authType = filter_var($data['auth'], FILTER_VALIDATE_EMAIL) ? 'email' : 'mobile';
|
|
if ($authType == 'mobile') {
|
|
$data['auth'] = MobileNumberHelper::formatMobile($data['auth']);
|
|
}
|
|
|
|
$user = User::where($authType, $data['auth'])->first();
|
|
|
|
if (!$user || !Hash::check($data['password'], $user->password)) {
|
|
return response()->json(['message' => 'رمز عبور اشتباه است'], 404);
|
|
}
|
|
|
|
// Attach package if not exists
|
|
if (!$user->packageNames()->where('package_names.id', $packageName->id)->exists()) {
|
|
$user->packageNames()->attach($packageName->id, [
|
|
'tries' => $packageName->tries,
|
|
'fcm_token' => $data['fcm_token'] ?? null,
|
|
]);
|
|
} else {
|
|
$user->packageNames()->updateExistingPivot($packageName->id, [
|
|
'fcm_token' => $data['fcm_token'] ?? null,
|
|
]);
|
|
}
|
|
|
|
$token = $user->createToken('token', $user->is_admin ? ['admin'] : ['user'])->plainTextToken;
|
|
|
|
return response()->json([
|
|
'user' => $user,
|
|
'token' => $token,
|
|
]);
|
|
}
|
|
public function resendEmailVerification(Request $request)
|
|
{
|
|
$request->validate([
|
|
'email' => 'required|email',
|
|
]);
|
|
|
|
$user = User::where('email', $request->email)->first();
|
|
|
|
if (!$user) {
|
|
return response()->json(['message' => 'User not found'], 404);
|
|
}
|
|
|
|
if ($user->email_verified_at) {
|
|
return response()->json(['message' => 'Email is already verified'], 400);
|
|
}
|
|
|
|
// Generate new code
|
|
$code = rand(1000, 9999);
|
|
|
|
// Delete previous codes
|
|
\DB::table('email_verifications')->where('user_id', $user->id)->delete();
|
|
|
|
// Insert new verification code
|
|
\DB::table('email_verifications')->insert([
|
|
'user_id' => $user->id,
|
|
'code' => $code,
|
|
'expires_at' => now()->addMinutes(15),
|
|
'created_at' => now(),
|
|
'updated_at' => now(),
|
|
]);
|
|
|
|
// Send email
|
|
\Mail::to($user->email)->send(new \App\Mail\VerifyEmailCodeMail($code));
|
|
|
|
return response()->json([
|
|
'message' => 'Verification email resent successfully'
|
|
]);
|
|
}
|
|
public function register(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'first_name' => 'string|nullable',
|
|
'last_name' => 'string|nullable',
|
|
'email' => 'email|required_without:mobile',
|
|
'password' => 'string|nullable|required_with:email',
|
|
'mobile' => ['string', new MobileNumber, 'nullable', 'required_without:email'],
|
|
'fcm_token' => 'string|nullable',
|
|
'package_name' => 'string|required'
|
|
]);
|
|
|
|
$packageNameValue = $data['package_name'];
|
|
unset($data['package_name']);
|
|
|
|
if (isset($data['mobile'])) {
|
|
$data['mobile'] = MobileNumberHelper::formatMobile($data['mobile']);
|
|
if (User::where('mobile', $data['mobile'])->exists()) {
|
|
return response()->json(['message' => 'Mobile number already exists'], 400);
|
|
}
|
|
}
|
|
|
|
if (isset($data['email']) && User::where('email', $data['email'])->exists()) {
|
|
return response()->json(['message' => 'Email already exists'], 400);
|
|
}
|
|
|
|
// ✅ Check if email can receive a message before creating the user
|
|
if (isset($data['email'])) {
|
|
$code = rand(1000, 9999);
|
|
|
|
try {
|
|
// Try sending email
|
|
\Mail::to($data['email'])->send(new \App\Mail\VerifyEmailCodeMail($code));
|
|
} catch (\Exception $e) {
|
|
return response()->json([
|
|
'code' => $e->getCode(),
|
|
'error' => $e->getMessage(),
|
|
'message' => 'لطفا آدرس ایمیل خود را بررسی کنید و مجدد تلاش کنید',
|
|
|
|
], 400);
|
|
}
|
|
}
|
|
|
|
// Hash password
|
|
$data['password'] = isset($data['password'])
|
|
? $data['password']
|
|
: Str::random(8);
|
|
|
|
// Create user only if email sending didn't fail
|
|
$user = User::create($data);
|
|
|
|
// Attach package
|
|
if ($packageName = PackageName::where('name', $packageNameValue)->first()) {
|
|
$user->packageNames()->attach($packageName->id, [
|
|
'tries' => $packageName->tries,
|
|
'fcm_token' => $data['fcm_token'] ?? null,
|
|
]);
|
|
}
|
|
|
|
// Save email verification code after user is created
|
|
if (isset($data['email'])) {
|
|
\DB::table('email_verifications')->insert([
|
|
'user_id' => $user->id,
|
|
'code' => $code,
|
|
'expires_at' => now()->addMinutes(15),
|
|
'created_at' => now(),
|
|
'updated_at' => now(),
|
|
]);
|
|
}
|
|
|
|
// Create token
|
|
$token = $user->createToken('token', $user->is_admin ? ['admin'] : ['user'])->plainTextToken;
|
|
|
|
return response()->json([
|
|
'message' => 'User registered successfully.',
|
|
'user' => $user,
|
|
'token' => $token
|
|
]);
|
|
}
|
|
public function verifyEmailCode(Request $request)
|
|
{
|
|
$request->validate([
|
|
'email' => 'required|email',
|
|
'code' => 'required|string',
|
|
]);
|
|
|
|
$user = User::where('email', $request->email)->first();
|
|
if (!$user) {
|
|
return response()->json(['message' => 'User not found'], 404);
|
|
}
|
|
|
|
$record = \DB::table('email_verifications')
|
|
->where('user_id', $user->id)
|
|
->where('code', $request->code)
|
|
->where('expires_at', '>', now())
|
|
->first();
|
|
|
|
if (!$record) {
|
|
return response()->json(['message' => 'Invalid or expired code'], 400);
|
|
}
|
|
|
|
// Mark email as verified
|
|
$user->update(['email_verified_at' => now()]);
|
|
|
|
// Delete verification record
|
|
\DB::table('email_verifications')->where('id', $record->id)->delete();
|
|
$token = $user->createToken('token', $user->is_admin ? ['admin'] : ['user'])->plainTextToken;
|
|
return response()->json(['message' => 'Email verified successfully', 'token' => $token]);
|
|
}
|
|
public function loginOTP(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'mobile' => ['string', new MobileNumber, 'required'],
|
|
'package_name' => 'string|required',
|
|
'source' => [Rule::in(PackageName::SOURCES), 'integer'],
|
|
'fcm_token' => 'string',
|
|
]);
|
|
|
|
if (!$packageName = PackageName::where('name', $data['package_name'])->first()) {
|
|
return response()->json([
|
|
'message' => 'package name not found'
|
|
], 404);
|
|
}
|
|
|
|
if (!$user = User::where('mobile', $data['mobile'])->first()) {
|
|
$user = User::create([
|
|
'mobile' => MobileNumberHelper::formatMobile($data['mobile']),
|
|
'password' => config('app.default_password'),
|
|
]);
|
|
}
|
|
if ($data['mobile'] != config('approo.admin_mobile')) {
|
|
$otpToken = rand(pow(10, 4), pow(10, 5) - 1);
|
|
$user->otpTokens()->create([
|
|
'token' => $otpToken
|
|
]);
|
|
|
|
$verify = Str::random(8);
|
|
SendSMSJob::dispatch([
|
|
'mobile' => $data['mobile'],
|
|
'message' => "کد ورود به برنامه: $otpToken
|
|
@{$packageName->web_app_url} #$otpToken
|
|
لغو 11"
|
|
]);
|
|
}
|
|
|
|
if (!$user->packageNames()->where('package_names.id', $packageName->id)->exists()) {
|
|
$user->packageNames()->attach($packageName->id, [
|
|
'tries' => $packageName->tries,
|
|
'source' => $data['source'] ?? 0,
|
|
'fcm_token' => $data['fcm_token'] ?? null,
|
|
]);
|
|
} else {
|
|
$user->packageNames()->updateExistingPivot($packageName->id, [
|
|
'fcm_token' => $data['fcm_token'] ?? null,
|
|
]);
|
|
}
|
|
|
|
return response()->json([
|
|
'message' => 'otp sent',
|
|
'verify_code' => $verify ?? null
|
|
]);
|
|
}
|
|
|
|
public function checkOTP(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'mobile' => ['string', new MobileNumber, 'required'],
|
|
'token' => 'string|required',
|
|
]);
|
|
|
|
if (!$user = User::where('mobile', $data['mobile'])->first()) {
|
|
return response()->json([
|
|
'message' => 'user not found'
|
|
], 404);
|
|
}
|
|
|
|
$otpToken = $user->otpTokens()->where('token', $data['token'])->where('created_at', '>', now()->subMinutes(15))->first();
|
|
if (!$otpToken && !($data['mobile'] == config('approo.admin_mobile') && $data['token'] == config('approo.admin_otp'))) {
|
|
return response()->json([
|
|
'message' => 'token not valid'
|
|
], 400);
|
|
}
|
|
$otpToken?->delete();
|
|
|
|
$token = '';
|
|
if ($user->is_admin) {
|
|
$token = $user->createToken('token', ['admin'])->plainTextToken;
|
|
} else {
|
|
$token = $user->createToken('token', ['user'])->plainTextToken;
|
|
}
|
|
|
|
return response()->json([
|
|
'user' => $user,
|
|
'token' => $token,
|
|
]);
|
|
}
|
|
|
|
public function updateProfile(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'first_name' => 'string|nullable',
|
|
'last_name' => 'string|nullable',
|
|
'birthday' => 'date|nullable',
|
|
'gender' => ['integer', 'nullable', Rule::in(User::GENDERS)],
|
|
'email' => 'email|nullable',
|
|
'mobile' => [new MobileNumber, 'string'],
|
|
'avatar' => 'image'
|
|
]);
|
|
|
|
if (isset($data['email'])) {
|
|
$user = User::where('email', $data['email'])->first();
|
|
if ($user && $data['email'] != auth()->user()->email) {
|
|
return response()->json([
|
|
'message' => 'user with given email exists'
|
|
], 400);
|
|
}
|
|
}
|
|
|
|
if (isset($data['mobile'])) {
|
|
$user = User::where('mobile', $data['mobile'])->first();
|
|
if ($user && $data['mobile'] != auth()->user()->mobile) {
|
|
return response()->json([
|
|
'message' => 'user with given email exists'
|
|
], 400);
|
|
}
|
|
}
|
|
|
|
$user = auth()->user();
|
|
if (isset($data['avatar'])) {
|
|
Storage::disk('public')->put("avatars/$user->uuid.png", file_get_contents($data['avatar']->path()));
|
|
$data['avatar'] = "storage/avatars/$user->uuid.png";
|
|
}
|
|
|
|
$user->update($data);
|
|
|
|
return response()->json([
|
|
'user' => $user,
|
|
'message' => 'user updated'
|
|
]);
|
|
}
|
|
|
|
public function logout(Request $request)
|
|
{
|
|
$request->user()->currentAccessToken()->delete();
|
|
|
|
return response()->json([
|
|
'message' => 'user logged out'
|
|
]);
|
|
}
|
|
|
|
public function status(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'package_name' => 'string|required'
|
|
]);
|
|
|
|
if (!$packageName = PackageName::with('cafeConfig')->where('name', $data['package_name'])->first()) {
|
|
return response()->json([
|
|
'message' => 'package name not found'
|
|
], 404);
|
|
}
|
|
|
|
$user = auth()->user();
|
|
if ($user->mobile == config('approo.admin_mobile')) {
|
|
$user['products'] = Product::where('package_name_id', $packageName->id)->get();
|
|
} else {
|
|
// if ($packageName->cafeConfig) {
|
|
// $user['products'] = $user->products()->where('package_name_id', $packageName->id)->get();
|
|
// foreach ($user['products'] as $key => $product) {
|
|
// $service = new CafeService($packageName->cafeConfig);
|
|
// if ($product->pivot->gateway == Transaction::GATEWAYS['cafe'] && $product->pivot->purchase_token && $product->type != Product::TYPES['permanent']) {
|
|
// $activeSubscriptions = $service->checkSubscription($product, $product->pivot->purchase_token);
|
|
// if ($activeSubscriptions) {
|
|
// $expire = Carbon::createFromTimestamp($activeSubscriptions[0]['validUntilTimestampMsec'] / 1000);
|
|
// $user->products()->updateExistingPivot($product, ['expire_at' => $expire->format('Y-m-d H:i:s')]);
|
|
// } else {
|
|
// $user->products()->updateExistingPivot($product, ['expire_at' => now()->format('Y-m-d H:i:s')]);
|
|
// }
|
|
// }
|
|
// }
|
|
// }
|
|
$user['products'] = $user->products()
|
|
->where('package_name_id', $packageName->id)
|
|
->where(fn($q) => $q->where('user_product.expire_at', '>', now()->addHour())->orWhere('user_product.expire_at', null))
|
|
->get();
|
|
|
|
$user['package_name'] = $user->packageNames()
|
|
->where('package_names.id', $packageName->id)
|
|
->first();
|
|
}
|
|
|
|
return $user;
|
|
}
|
|
|
|
public function try(Request $request, $name)
|
|
{
|
|
$user = auth()->user();
|
|
|
|
if (!$packageName = $user->packageNames()->where('name', $name)->first()) {
|
|
return response()->json([
|
|
'message' => 'package name not found'
|
|
], 404);
|
|
}
|
|
|
|
if ($packageName->pivot->tries <= 0) {
|
|
return response()->json([
|
|
'message' => 'no more tries'
|
|
], 400);
|
|
}
|
|
|
|
$packageName->pivot->tries->decrement();
|
|
|
|
return response()->json([
|
|
'message' => 'success'
|
|
]);
|
|
}
|
|
|
|
public function googleLogin(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'access_token' => 'string|required',
|
|
'package_name' => 'string|required',
|
|
'source' => [Rule::in(PackageName::SOURCES), 'integer']
|
|
]);
|
|
|
|
if (!$packageName = PackageName::where('name', $data['package_name'])->first()) {
|
|
return response()->json([
|
|
'message' => 'package name not found'
|
|
], 404);
|
|
}
|
|
|
|
$response = Http::get("https://www.googleapis.com/oauth2/v3/userinfo", [
|
|
'access_token' => $data['access_token']
|
|
])->json();
|
|
|
|
if (!isset($response['email'])) {
|
|
return response()->json([
|
|
'message' => 'invalid token'
|
|
], 400);
|
|
}
|
|
if (!$user = User::where('email', $response['email'])->first()) {
|
|
$user = User::create([
|
|
'email' => $response['email'],
|
|
'password' => config('app.default_password'),
|
|
]);
|
|
}
|
|
|
|
|
|
if (!$user->packageNames()->where('package_names.id', $packageName->id)->exists()) {
|
|
$user->packageNames()->attach($packageName->id, [
|
|
'tries' => $packageName->tries,
|
|
'source' => $data['source'] ?? 0,
|
|
]);
|
|
}
|
|
|
|
$token = $user->createToken('token', ['user'])->plainTextToken;
|
|
|
|
return response()->json([
|
|
'user' => $user,
|
|
'token' => $token,
|
|
]);
|
|
}
|
|
}
|