validate([ 'auth' => 'string|required', 'password' => 'string|required', 'package_name' => 'string|required', 'fcm_token' => 'string|nullable' ]); if (!$packageName = PackageName::where('name', $data['package_name'])->first()) { return response()->json(['message' => 'package name not found'], 404); } $authType = filter_var($data['auth'], FILTER_VALIDATE_EMAIL) ? 'email' : 'mobile'; if ($authType == 'mobile') { $data['auth'] = MobileNumberHelper::formatMobile($data['auth']); } $user = User::where($authType, $data['auth'])->first(); if (!$user || !Hash::check(trim($data['password']), $user->password)) { return response()->json(['message' => 'wrong credentials'], 404); } // Attach package if not exists if (!$user->packageNames()->where('package_names.id', $packageName->id)->exists()) { $user->packageNames()->attach($packageName->id, [ 'tries' => $packageName->tries, 'fcm_token' => $data['fcm_token'] ?? null, ]); } else { $user->packageNames()->updateExistingPivot($packageName->id, [ 'fcm_token' => $data['fcm_token'] ?? null, ]); } $token = $user->createToken('token', $user->is_admin ? ['admin'] : ['user'])->plainTextToken; return response()->json([ 'user' => $user, 'token' => $token, ]); } public function register(Request $request) { $data = $request->validate([ 'first_name' => 'string|nullable', 'last_name' => 'string|nullable', 'email' => 'email|required_without:mobile', 'password' => 'string|nullable|required_with:email', 'mobile' => ['string', new MobileNumber, 'nullable', 'required_without:email'], 'fcm_token' => 'string|nullable' ]); if (isset($data['mobile'])) { $data['mobile'] = MobileNumberHelper::formatMobile($data['mobile']); if (User::where('mobile', $data['mobile'])->exists()) { return response()->json(['message' => 'Mobile number already exists'], 400); } } if (isset($data['email']) && User::where('email', $data['email'])->exists()) { return response()->json(['message' => 'Email already exists'], 400); } $data['password'] = $data['password'] ?? Hash::make(Str::random(8)); $user = User::create($data); // Send email verification if email exists if (isset($data['email'])) { $code = rand(100000, 999999); \DB::table('email_verifications')->insert([ 'user_id' => $user->id, 'code' => $code, 'expires_at' => now()->addMinutes(15), 'created_at' => now(), 'updated_at' => now(), ]); \Mail::to($user->email)->send(new \App\Mail\VerifyEmailCodeMail($code)); } return response()->json([ 'message' => 'User registered successfully.', 'user' => $user, ]); } public function verifyEmailCode(Request $request) { $request->validate([ 'email' => 'required|email', 'code' => 'required|string', ]); $user = User::where('email', $request->email)->first(); if (!$user) { return response()->json(['message' => 'User not found'], 404); } $record = \DB::table('email_verifications') ->where('user_id', $user->id) ->where('code', $request->code) ->where('expires_at', '>', now()) ->first(); if (!$record) { return response()->json(['message' => 'Invalid or expired code'], 400); } // Mark email as verified $user->update(['email_verified_at' => now()]); // Delete verification record \DB::table('email_verifications')->where('id', $record->id)->delete(); $token = $user->createToken('token', $user->is_admin ? ['admin'] : ['user'])->plainTextToken; return response()->json(['message' => 'Email verified successfully', 'token' => $token]); } public function loginOTP(Request $request) { $data = $request->validate([ 'mobile' => ['string', new MobileNumber, 'required'], 'package_name' => 'string|required', 'fcm_token' => 'string', ]); if (!$packageName = PackageName::where('name', $data['package_name'])->first()) { return response()->json([ 'message' => 'package name not found' ], 404); } if (!$user = User::where('mobile', $data['mobile'])->first()) { $user = User::create([ 'mobile' => MobileNumberHelper::formatMobile($data['mobile']), 'password' => config('app.default_password'), ]); } if ($data['mobile'] != config('approo.admin_mobile')) { $otpToken = rand(pow(10, 4), pow(10, 5) - 1); $user->otpTokens()->create([ 'token' => $otpToken ]); $verify = Str::random(8); // SendSMSJob::dispatch([ // 'mobile' => $data['mobile'], // 'message' => "کد ورود به برنامه: $otpToken // @{$packageName->web_app_url} #$otpToken // لغو 11" // ]); SendSMSJob::dispatch([ 'mobile' => $data['mobile'], 'token' => "$otpToken" ]); } if (!$user->packageNames()->where('package_names.id', $packageName->id)->exists()) { $user->packageNames()->attach($packageName->id, ['tries' => $packageName->tries, 'fcm_token' => $data['fcm_token'] ?? null,]); } else { $user->packageNames()->updateExistingPivot($packageName->id,[ 'fcm_token' => $data['fcm_token'] ?? null,]); } return response()->json([ 'message' => 'otp sent', 'verify_code' => $verify ?? null ]); } public function checkOTP(Request $request) { $data = $request->validate([ 'mobile' => ['string', new MobileNumber, 'required'], 'token' => 'string|required', ]); if (!$user = User::where('mobile', $data['mobile'])->first()) { return response()->json([ 'message' => 'user not found' ], 404); } $otpToken = $user->otpTokens()->where('token', $data['token'])->where('created_at', '>', now()->subMinutes(15))->first(); if (!$otpToken && !($data['mobile'] == config('approo.admin_mobile') && $data['token'] == config('approo.admin_otp'))) { return response()->json([ 'message' => 'token not valid' ], 400); } $otpToken?->delete(); $token = ''; if ($user->is_admin) { $token = $user->createToken('token', ['admin'])->plainTextToken; } else { $token = $user->createToken('token', ['user'])->plainTextToken; } return response()->json([ 'user' => $user, 'token' => $token, ]); } public function updateProfile(Request $request) { $data = $request->validate([ 'first_name' => 'string|nullable', 'last_name' => 'string|nullable', 'birthday' => 'date|nullable', 'gender' => ['integer', 'nullable', Rule::in(User::GENDERS)], 'email' => 'email|nullable', 'mobile' => [new MobileNumber, 'string'], 'avatar' => 'image' ]); if (isset($data['email'])) { $user = User::where('email', $data['email'])->first(); if ($user && $data['email'] != auth()->user()->email) { return response()->json([ 'message' => 'user with given email exists' ], 400); } } if (isset($data['mobile'])) { $user = User::where('mobile', $data['mobile'])->first(); if ($user && $data['mobile'] != auth()->user()->mobile) { return response()->json([ 'message' => 'user with given email exists' ], 400); } } $user = auth()->user(); if (isset($data['avatar'])) { Storage::disk('public')->put("avatars/$user->uuid.png", file_get_contents($data['avatar']->path())); $data['avatar'] = "storage/avatars/$user->uuid.png"; } $user->update($data); return response()->json([ 'user' => $user, 'message' => 'user updated' ]); } public function profile() { $user = auth()->user(); $templates = BreathingTemplate::where('user_id', $user->id)->get(); $sessions = UserBreathingSession::with('template')->where('user_id', $user->id)->get(); return response()->json([ 'email' => $user->email, 'first_name' => $user->first_name, 'last_name' => $user->last_name, 'mobile'=> $user->mobile, 'birthday' => $user ->birthday, 'xp' => $user->xp, 'templates' => $templates, 'sessions' => $sessions ]); } public function status(Request $request) { $data = $request->validate([ 'package_name' => 'string|required' ]); if (!$packageName = PackageName::with('cafeConfig')->where('name', $data['package_name'])->first()) { return response()->json([ 'message' => 'package name not found' ], 404); } $user = auth()->user(); $user->load(['response', 'plans']); if ($user->mobile == config('approo.admin_mobile')) { $user['products'] = Product::where('package_name_id', $packageName->id)->get(); } else { // if ($packageName->cafeConfig) { // $user['products'] = $user->products()->where('package_name_id', $packageName->id)->get(); // foreach ($user['products'] as $key => $product) { // $service = new CafeService($packageName->cafeConfig); // if ($product->pivot->gateway == Transaction::GATEWAYS['cafe'] && $product->pivot->purchase_token && $product->type != Product::TYPES['permanent']) { // $activeSubscriptions = $service->checkSubscription($product, $product->pivot->purchase_token); // if ($activeSubscriptions) { // $expire = Carbon::createFromTimestamp($activeSubscriptions[0]['validUntilTimestampMsec'] / 1000); // $user->products()->updateExistingPivot($product, ['expire_at' => $expire->format('Y-m-d H:i:s')]); // } else { // $user->products()->updateExistingPivot($product, ['expire_at' => now()->format('Y-m-d H:i:s')]); // } // } // } // } $user['products'] = $user->products() ->where('package_name_id', $packageName->id) ->where(fn ($q) => $q->where('user_product.expire_at', '>', now()->addHour())->orWhere('user_product.expire_at', null)) ->get(); $user['package_name'] = $user->packageNames() ->where('package_names.id', $packageName->id) ->first(); } return $user; } public function try(Request $request, $name) { $user = auth()->user(); if (!$packageName = $user->packageNames()->where('name', $name)->first()) { return response()->json([ 'message' => 'package name not found' ], 404); } if ($packageName->pivot->tries <= 0) { return response()->json([ 'message' => 'no more tries' ], 400); } $packageName->pivot->tries->decrement(); return response()->json([ 'message' => 'success' ]); } public function oauthCallback(Request $request) { return dd(Socialite::driver('google')->stateless()->user()); } public function googleLogin(Request $request) { $data = $request->validate([ 'access_token' => 'string|required', 'package_name' => 'string|required', ]); if (!$packageName = PackageName::where('name', $data['package_name'])->first()) { return response()->json([ 'message' => 'package name not found' ], 404); } $response = Http::get("https://www.googleapis.com/oauth2/v3/userinfo", [ 'access_token' => $data['access_token'] ])->json(); if (!isset($response['email'])) { return response()->json([ 'message' => 'invalid token' ], 400); } if (!$user = User::where('email', $response['email'])->first()) { $user = User::create([ 'email' => $response['email'], 'password' => config('app.default_password'), ]); if (!$user->packageNames()->where('package_names.id', $packageName->id)->exists()) { $user->packageNames()->attach($packageName->id, [ 'tries' => $packageName->tries, 'source' => $data['source'] ?? 0, ]); } } $token = $user->createToken('token', ['user'])->plainTextToken; return response()->json([ 'user' => $user, 'token' => $token, ]); } }