618 lines
21 KiB
PHP
618 lines
21 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use Illuminate\Http\Request;
|
|
use App\Helpers\MobileNumberHelper;
|
|
use App\Jobs\SendSMSJob;
|
|
use App\Models\PackageName;
|
|
use App\Models\Product;
|
|
use App\Models\Transaction;
|
|
use App\Models\User;
|
|
use App\Rules\MobileNumber;
|
|
use Carbon\Carbon;
|
|
use Illuminate\Support\Str;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Support\Facades\Storage;
|
|
use Illuminate\Validation\Rule;
|
|
use Laravel\Socialite\Facades\Socialite;
|
|
use Illuminate\Support\Facades\Http;
|
|
use App\Models\BreathingExercise;
|
|
use App\Models\BreathingTemplate;
|
|
use App\Models\UserBreathingSession;
|
|
class UserController extends Controller
|
|
{
|
|
public function loginV2(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'token' => 'required|string',
|
|
'package_name' => 'required|string',
|
|
]);
|
|
|
|
$response = Http::acceptJson()->withToken($data['token'])->get('https://api.approagency.ir/api/status', [
|
|
'package_name' => $request['package_name']
|
|
]);
|
|
if (!$response->successful()) {
|
|
return response()->json(['message' => 'invalid token'], 401);
|
|
}
|
|
|
|
$response = json_decode($response->body(), true);
|
|
|
|
// First, try to find user by identifier
|
|
$user = null;
|
|
if (!empty($response['uuid'])) {
|
|
$user = User::where('identifier', $response['uuid'])->first();
|
|
}
|
|
|
|
// If not found, try by email
|
|
if (!$user) {
|
|
$user = User::where('email', $response['email'])->first();
|
|
}
|
|
$mobile = $response['mobile'] ?? null;
|
|
|
|
// If mobile already exists, set it null to avoid duplicate error
|
|
if ($mobile && User::where('mobile', $mobile)->where('id', '!=', $user?->id)->exists()) {
|
|
$mobile = null;
|
|
}
|
|
// If user still doesn't exist, create new
|
|
if (!$user) {
|
|
$user = User::create([
|
|
'email' => $response['email'],
|
|
'identifier' => $response['uuid'] ?? null,
|
|
'password' => config('app.default_password'),
|
|
// 'name' => trim(($response['first_name'] ?? '') . ' ' . ($response['last_name'] ?? '')),
|
|
'mobile' => $mobile,
|
|
'first_name' => $response['first_name'] ?? null,
|
|
'last_name' => $response['last_name'] ?? null
|
|
]);
|
|
} else {
|
|
// Only update name and mobile for existing user
|
|
$user->first_name = $response['first_name'] ?? $user->first_name;
|
|
$user->last_name = $response['last_name'] ?? $user->last_name;
|
|
// $user->name = trim(($response['first_name'] ?? '') . ' ' . ($response['last_name'] ?? ''));
|
|
$user->mobile = $mobile ?? $user->mobile;
|
|
$user->save();
|
|
}
|
|
|
|
|
|
$access_token = $user->createToken('user')->plainTextToken;
|
|
|
|
return [
|
|
'email' => $user->email,
|
|
'identifier' => $user->identifier,
|
|
'token' => $access_token,
|
|
'user' => $user,
|
|
];
|
|
}
|
|
|
|
private function syncUserFromStatus(array $response, ?User $user = null): User
|
|
{
|
|
// Try to find user if not passed
|
|
if (!$user) {
|
|
if (!empty($response['uuid'])) {
|
|
$user = User::where('identifier', $response['uuid'])->first();
|
|
}
|
|
if (!$user && !empty($response['email'])) {
|
|
$user = User::where('email', $response['email'])->first();
|
|
}
|
|
}
|
|
|
|
$mobile = $response['mobile'] ?? null;
|
|
if ($mobile && User::where('mobile', $mobile)->where('id', '!=', $user?->id)->exists()) {
|
|
$mobile = null; // avoid duplicate
|
|
}
|
|
|
|
if (!$user) {
|
|
// create new
|
|
$user = User::create([
|
|
'email' => $response['email'],
|
|
'identifier' => $response['uuid'] ?? null,
|
|
'password' => config('app.default_password'),
|
|
'mobile' => $mobile,
|
|
'first_name' => $response['first_name'] ?? null,
|
|
'last_name' => $response['last_name'] ?? null,
|
|
]);
|
|
} else {
|
|
// update existing
|
|
$user->first_name = $response['first_name'] ?? $user->first_name;
|
|
$user->last_name = $response['last_name'] ?? $user->last_name;
|
|
$user->mobile = $mobile ?? $user->mobile;
|
|
$user->save();
|
|
}
|
|
|
|
return $user;
|
|
}
|
|
|
|
|
|
public function loginForeginer(Request $request)
|
|
{
|
|
$request->validate([
|
|
'user_token' => ['required'],
|
|
'package_name' => ['required', new PackageNameExist],
|
|
]);
|
|
$response = $this->repository->userTokenVerify($request['package_name'], $request['user_token']);
|
|
if ($response['ok']) {
|
|
$user = User::where('identifier', $response['data']['identifier'])->first();
|
|
if (empty($user)) {
|
|
$user = new User();
|
|
$user['identifier'] = $response['data']['identifier'];
|
|
$user['name'] = $response['data']['username'];
|
|
$user->save();
|
|
}
|
|
if (!empty($request['fcm_token'])) FcmToken::firstOrCreate(['token' => $request['fcm_token'], 'user_id' => $user['id']]);
|
|
$access_token = $user->createToken('user')->plainTextToken;
|
|
return ['identifier' => $user['identifier'], 'token' => $access_token];
|
|
} else abort(500);
|
|
}
|
|
public function login(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'auth' => 'string|required',
|
|
'password' => 'string|required',
|
|
'package_name' => 'string|required',
|
|
'fcm_token' => 'string|nullable'
|
|
]);
|
|
|
|
if (!$packageName = PackageName::where('name', $data['package_name'])->first()) {
|
|
return response()->json(['message' => 'package name not found'], 404);
|
|
}
|
|
|
|
$authType = filter_var($data['auth'], FILTER_VALIDATE_EMAIL) ? 'email' : 'mobile';
|
|
if ($authType == 'mobile') {
|
|
$data['auth'] = MobileNumberHelper::formatMobile($data['auth']);
|
|
}
|
|
|
|
$user = User::where($authType, $data['auth'])->first();
|
|
|
|
if (!$user || !Hash::check(trim($data['password']), $user->password)) {
|
|
return response()->json(['message' => 'wrong credentials'], 404);
|
|
}
|
|
|
|
// Attach package if not exists
|
|
if (!$user->packageNames()->where('package_names.id', $packageName->id)->exists()) {
|
|
$user->packageNames()->attach($packageName->id, [
|
|
'tries' => $packageName->tries,
|
|
'fcm_token' => $data['fcm_token'] ?? null,
|
|
]);
|
|
} else {
|
|
$user->packageNames()->updateExistingPivot($packageName->id, [
|
|
'fcm_token' => $data['fcm_token'] ?? null,
|
|
]);
|
|
}
|
|
|
|
$token = $user->createToken('token', $user->is_admin ? ['admin'] : ['user'])->plainTextToken;
|
|
|
|
return response()->json([
|
|
'user' => $user,
|
|
'token' => $token,
|
|
]);
|
|
}
|
|
|
|
public function resendEmailVerification(Request $request)
|
|
{
|
|
$request->validate([
|
|
'email' => 'required|email',
|
|
]);
|
|
|
|
$user = User::where('email', $request->email)->first();
|
|
|
|
if (!$user) {
|
|
return response()->json(['message' => 'User not found'], 404);
|
|
}
|
|
|
|
if ($user->email_verified_at) {
|
|
return response()->json(['message' => 'Email is already verified'], 400);
|
|
}
|
|
|
|
// Generate new code
|
|
$code = rand(1000, 9999);
|
|
|
|
// Delete previous codes
|
|
\DB::table('email_verifications')->where('user_id', $user->id)->delete();
|
|
|
|
// Insert new verification code
|
|
\DB::table('email_verifications')->insert([
|
|
'user_id' => $user->id,
|
|
'code' => $code,
|
|
'expires_at' => now()->addMinutes(15),
|
|
'created_at' => now(),
|
|
'updated_at' => now(),
|
|
]);
|
|
|
|
// Send email
|
|
\Mail::to($user->email)->send(new \App\Mail\VerifyEmailCodeMail($code));
|
|
|
|
return response()->json([
|
|
'message' => 'Verification email resent successfully'
|
|
]);
|
|
}
|
|
|
|
|
|
public function register(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'first_name' => 'string|nullable',
|
|
'last_name' => 'string|nullable',
|
|
'email' => 'email|required_without:mobile',
|
|
'password' => 'string|nullable|required_with:email',
|
|
'mobile' => ['string', new MobileNumber, 'nullable', 'required_without:email'],
|
|
'fcm_token' => 'string|nullable',
|
|
'package_name' => 'string|required'
|
|
]);
|
|
|
|
$packageNameValue = $data['package_name'];
|
|
unset($data['package_name']);
|
|
|
|
if (isset($data['mobile'])) {
|
|
$data['mobile'] = MobileNumberHelper::formatMobile($data['mobile']);
|
|
if (User::where('mobile', $data['mobile'])->exists()) {
|
|
return response()->json(['message' => 'Mobile number already exists'], 400);
|
|
}
|
|
}
|
|
|
|
if (isset($data['email']) && User::where('email', $data['email'])->exists()) {
|
|
return response()->json(['message' => 'Email already exists'], 400);
|
|
}
|
|
|
|
// ✅ Check if email can receive a message before creating the user
|
|
if (isset($data['email'])) {
|
|
$code = rand(1000, 9999);
|
|
|
|
try {
|
|
// Try sending email
|
|
\Mail::to($data['email'])->send(new \App\Mail\VerifyEmailCodeMail($code));
|
|
} catch (\Exception $e) {
|
|
return response()->json([
|
|
'message' => 'لطفا آدرس ایمیل خود را بررسی کنید و مجدد تلاش کنید',
|
|
], 400);
|
|
}
|
|
}
|
|
|
|
// Hash password
|
|
$data['password'] = isset($data['password'])
|
|
? Hash::make($data['password'])
|
|
: Hash::make(Str::random(8));
|
|
|
|
// Create user only if email sending didn't fail
|
|
$user = User::create($data);
|
|
|
|
// Attach package
|
|
if ($packageName = PackageName::where('name', $packageNameValue)->first()) {
|
|
$user->packageNames()->attach($packageName->id, [
|
|
'tries' => $packageName->tries,
|
|
'fcm_token' => $data['fcm_token'] ?? null,
|
|
]);
|
|
}
|
|
|
|
// Save email verification code after user is created
|
|
if (isset($data['email'])) {
|
|
\DB::table('email_verifications')->insert([
|
|
'user_id' => $user->id,
|
|
'code' => $code,
|
|
'expires_at' => now()->addMinutes(15),
|
|
'created_at' => now(),
|
|
'updated_at' => now(),
|
|
]);
|
|
}
|
|
|
|
// Create token
|
|
$token = $user->createToken('token', $user->is_admin ? ['admin'] : ['user'])->plainTextToken;
|
|
|
|
return response()->json([
|
|
'message' => 'User registered successfully.',
|
|
'user' => $user,
|
|
'token' => $token
|
|
]);
|
|
}
|
|
|
|
|
|
|
|
public function verifyEmailCode(Request $request)
|
|
{
|
|
$request->validate([
|
|
'email' => 'required|email',
|
|
'code' => 'required|string',
|
|
]);
|
|
|
|
$user = User::where('email', $request->email)->first();
|
|
if (!$user) {
|
|
return response()->json(['message' => 'User not found'], 404);
|
|
}
|
|
|
|
$record = \DB::table('email_verifications')
|
|
->where('user_id', $user->id)
|
|
->where('code', $request->code)
|
|
->where('expires_at', '>', now())
|
|
->first();
|
|
|
|
if (!$record) {
|
|
return response()->json(['message' => 'Invalid or expired code'], 400);
|
|
}
|
|
|
|
// Mark email as verified
|
|
$user->update(['email_verified_at' => now()]);
|
|
|
|
// Delete verification record
|
|
\DB::table('email_verifications')->where('id', $record->id)->delete();
|
|
$token = $user->createToken('token', $user->is_admin ? ['admin'] : ['user'])->plainTextToken;
|
|
return response()->json(['message' => 'Email verified successfully', 'token' => $token]);
|
|
}
|
|
|
|
public function loginOTP(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'mobile' => ['string', new MobileNumber, 'required'],
|
|
'package_name' => 'string|required',
|
|
'fcm_token' => 'string',
|
|
]);
|
|
|
|
if (!$packageName = PackageName::where('name', $data['package_name'])->first()) {
|
|
return response()->json([
|
|
'message' => 'package name not found'
|
|
], 404);
|
|
}
|
|
|
|
if (!$user = User::where('mobile', $data['mobile'])->first()) {
|
|
$user = User::create([
|
|
'mobile' => MobileNumberHelper::formatMobile($data['mobile']),
|
|
'password' => config('app.default_password'),
|
|
]);
|
|
}
|
|
if ($data['mobile'] != config('approo.admin_mobile')) {
|
|
$otpToken = rand(pow(10, 4), pow(10, 5) - 1);
|
|
$user->otpTokens()->create([
|
|
'token' => $otpToken
|
|
]);
|
|
|
|
$verify = Str::random(8);
|
|
// SendSMSJob::dispatch([
|
|
// 'mobile' => $data['mobile'],
|
|
// 'message' => "کد ورود به برنامه: $otpToken
|
|
// @{$packageName->web_app_url} #$otpToken
|
|
// لغو 11"
|
|
// ]);
|
|
SendSMSJob::dispatch([
|
|
'mobile' => $data['mobile'],
|
|
'token' => "$otpToken"
|
|
]);
|
|
}
|
|
|
|
|
|
if (!$user->packageNames()->where('package_names.id', $packageName->id)->exists()) {
|
|
$user->packageNames()->attach($packageName->id, ['tries' => $packageName->tries,
|
|
|
|
'fcm_token' => $data['fcm_token'] ?? null,]);
|
|
} else {
|
|
$user->packageNames()->updateExistingPivot($packageName->id,[
|
|
'fcm_token' => $data['fcm_token'] ?? null,]);
|
|
}
|
|
|
|
return response()->json([
|
|
'message' => 'otp sent',
|
|
'verify_code' => $verify ?? null
|
|
]);
|
|
}
|
|
|
|
public function checkOTP(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'mobile' => ['string', new MobileNumber, 'required'],
|
|
'token' => 'string|required',
|
|
]);
|
|
|
|
if (!$user = User::where('mobile', $data['mobile'])->first()) {
|
|
return response()->json([
|
|
'message' => 'user not found'
|
|
], 404);
|
|
}
|
|
|
|
$otpToken = $user->otpTokens()->where('token', $data['token'])->where('created_at', '>', now()->subMinutes(15))->first();
|
|
if (!$otpToken && !($data['mobile'] == config('approo.admin_mobile') && $data['token'] == config('approo.admin_otp'))) {
|
|
return response()->json([
|
|
'message' => 'token not valid'
|
|
], 400);
|
|
}
|
|
$otpToken?->delete();
|
|
|
|
$token = '';
|
|
if ($user->is_admin) {
|
|
$token = $user->createToken('token', ['admin'])->plainTextToken;
|
|
} else {
|
|
$token = $user->createToken('token', ['user'])->plainTextToken;
|
|
}
|
|
|
|
return response()->json([
|
|
'user' => $user,
|
|
'token' => $token,
|
|
]);
|
|
}
|
|
public function updateProfile(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'first_name' => 'string|nullable',
|
|
'last_name' => 'string|nullable',
|
|
'birthday' => 'date|nullable',
|
|
'gender' => ['integer', 'nullable', Rule::in(User::GENDERS)],
|
|
'email' => 'email|nullable',
|
|
'mobile' => [new MobileNumber, 'string'],
|
|
'avatar' => 'image'
|
|
]);
|
|
|
|
if (isset($data['email'])) {
|
|
$user = User::where('email', $data['email'])->first();
|
|
if ($user && $data['email'] != auth()->user()->email) {
|
|
return response()->json([
|
|
'message' => 'user with given email exists'
|
|
], 400);
|
|
}
|
|
}
|
|
|
|
if (isset($data['mobile'])) {
|
|
$user = User::where('mobile', $data['mobile'])->first();
|
|
if ($user && $data['mobile'] != auth()->user()->mobile) {
|
|
return response()->json([
|
|
'message' => 'user with given email exists'
|
|
], 400);
|
|
}
|
|
}
|
|
|
|
$user = auth()->user();
|
|
if (isset($data['avatar'])) {
|
|
Storage::disk('public')->put("avatars/$user->uuid.png", file_get_contents($data['avatar']->path()));
|
|
$data['avatar'] = "storage/avatars/$user->uuid.png";
|
|
}
|
|
|
|
$user->update($data);
|
|
|
|
return response()->json([
|
|
'user' => $user,
|
|
'message' => 'user updated'
|
|
]);
|
|
}
|
|
|
|
public function profile()
|
|
{
|
|
$user = auth()->user();
|
|
$response = Http::acceptJson()->withToken($request->bearerToken())->get('https://api.approagency.ir/api/status', [
|
|
'package_name' => $request->get('package_name') // you may need to pass it from frontend
|
|
]);
|
|
|
|
if ($response->successful()) {
|
|
$user = $this->syncUserFromStatus($response->json(), $user);
|
|
}
|
|
return response()->json([
|
|
'user' => $user
|
|
]);
|
|
}
|
|
public function status(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'package_name' => 'string|required'
|
|
]);
|
|
|
|
if (!$packageName = PackageName::with('cafeConfig')->where('name', $data['package_name'])->first()) {
|
|
return response()->json([
|
|
'message' => 'package name not found'
|
|
], 404);
|
|
}
|
|
|
|
$user = auth()->user();
|
|
if ($user->mobile == config('approo.admin_mobile')) {
|
|
$user['products'] = Product::where('package_name_id', $packageName->id)->get();
|
|
} else {
|
|
// if ($packageName->cafeConfig) {
|
|
// $user['products'] = $user->products()->where('package_name_id', $packageName->id)->get();
|
|
// foreach ($user['products'] as $key => $product) {
|
|
// $service = new CafeService($packageName->cafeConfig);
|
|
// if ($product->pivot->gateway == Transaction::GATEWAYS['cafe'] && $product->pivot->purchase_token && $product->type != Product::TYPES['permanent']) {
|
|
// $activeSubscriptions = $service->checkSubscription($product, $product->pivot->purchase_token);
|
|
// if ($activeSubscriptions) {
|
|
// $expire = Carbon::createFromTimestamp($activeSubscriptions[0]['validUntilTimestampMsec'] / 1000);
|
|
// $user->products()->updateExistingPivot($product, ['expire_at' => $expire->format('Y-m-d H:i:s')]);
|
|
// } else {
|
|
// $user->products()->updateExistingPivot($product, ['expire_at' => now()->format('Y-m-d H:i:s')]);
|
|
// }
|
|
// }
|
|
// }
|
|
// }
|
|
$user['products'] = $user->products()
|
|
->where('package_name_id', $packageName->id)
|
|
->where(fn($q) => $q->where('user_product.expire_at', '>', now()->addHour())->orWhere('user_product.expire_at', null))
|
|
->get();
|
|
|
|
$user['package_name'] = $user->packageNames()
|
|
->where('package_names.id', $packageName->id)
|
|
->first();
|
|
}
|
|
|
|
return $user;
|
|
}
|
|
public function try(Request $request, $name) {
|
|
$user = auth()->user();
|
|
|
|
if (!$packageName = $user->packageNames()->where('name', $name)->first()) {
|
|
return response()->json([
|
|
'message' => 'package name not found'
|
|
], 404);
|
|
}
|
|
|
|
if ($packageName->pivot->tries <= 0) {
|
|
return response()->json([
|
|
'message' => 'no more tries'
|
|
], 400);
|
|
}
|
|
|
|
$packageName->pivot->tries->decrement();
|
|
|
|
return response()->json([
|
|
'message' => 'success'
|
|
]);
|
|
}
|
|
|
|
public function oauthCallback(Request $request)
|
|
{
|
|
return dd(Socialite::driver('google')->stateless()->user());
|
|
}
|
|
|
|
public function googleLogin(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
'access_token' => 'string|required',
|
|
'package_name' => 'string|required',
|
|
]);
|
|
|
|
if (!$packageName = PackageName::where('name', $data['package_name'])->first()) {
|
|
return response()->json([
|
|
'message' => 'package name not found'
|
|
], 404);
|
|
}
|
|
|
|
$response = Http::get("https://www.googleapis.com/oauth2/v3/userinfo", [
|
|
'access_token' => $data['access_token']
|
|
])->json();
|
|
|
|
if (!isset($response['email'])) {
|
|
return response()->json([
|
|
'message' => 'invalid token'
|
|
], 400);
|
|
}
|
|
if (!$user = User::where('email', $response['email'])->first()) {
|
|
$user = User::create([
|
|
'email' => $response['email'],
|
|
'first_name' => $response['given_name'] ?? null,
|
|
'last_name' => $response['family_name'] ?? null,
|
|
'password' => config('app.default_password'),
|
|
'email_verified_at' => now(),
|
|
]);
|
|
|
|
if (!$user->packageNames()->where('package_names.id', $packageName->id)->exists()) {
|
|
$user->packageNames()->attach($packageName->id, [
|
|
'tries' => $packageName->tries,
|
|
'source' => $data['source'] ?? 0,
|
|
]);
|
|
}
|
|
}else {
|
|
if (!$user->email_verified_at) {
|
|
$user->update([
|
|
'email_verified_at' => now(),
|
|
]);
|
|
}
|
|
}
|
|
|
|
$token = $user->createToken('token', ['user'])->plainTextToken;
|
|
|
|
return response()->json([
|
|
'user' => $user,
|
|
'token' => $token,
|
|
]);
|
|
}
|
|
|
|
public function leaderBoard(){
|
|
$users = User::with(['breathingSessions.template'])->where('xp', '>', 0)
|
|
->orderBy('xp', 'desc')
|
|
->get();
|
|
|
|
return $users;
|
|
}
|
|
}
|