crud
This commit is contained in:
74
app/Http/Controllers/AuthController.php
Normal file
74
app/Http/Controllers/AuthController.php
Normal file
@@ -0,0 +1,74 @@
|
||||
<?php
|
||||
|
||||
namespace App\Http\Controllers;
|
||||
|
||||
use App\Models\User;
|
||||
use Illuminate\Http\Request;
|
||||
use Illuminate\Support\Facades\Hash;
|
||||
use Illuminate\Validation\ValidationException;
|
||||
|
||||
class AuthController extends Controller
|
||||
{
|
||||
/**
|
||||
* Регистрация пользователя.
|
||||
*/
|
||||
public function register(Request $request)
|
||||
{
|
||||
$validated = $request->validate([
|
||||
'name' => 'required|string|max:255',
|
||||
'email' => 'required|string|email|max:255|unique:users',
|
||||
'password' => 'required|string|min:8|confirmed',
|
||||
'custom_field' => 'required|string|min:2'
|
||||
]);
|
||||
|
||||
$user = User::create([
|
||||
'name' => $validated['name'],
|
||||
'email' => $validated['email'],
|
||||
'password' => Hash::make($validated['password']),
|
||||
'custom_field' => $validated['custom_field'],
|
||||
]);
|
||||
|
||||
return response()->json([
|
||||
'message' => 'Пользователь зарегистрирован.',
|
||||
'user' => $user,
|
||||
'token' => $user->createToken('auth_token')->plainTextToken
|
||||
], 201);
|
||||
}
|
||||
|
||||
/**
|
||||
* Вход пользователя.
|
||||
*/
|
||||
public function login(Request $request)
|
||||
{
|
||||
$request->validate([
|
||||
'email' => 'required|email',
|
||||
'password' => 'required',
|
||||
]);
|
||||
|
||||
$user = User::where('email', $request->email)->first();
|
||||
|
||||
if (!$user || !Hash::check($request->password, $user->password)) {
|
||||
throw ValidationException::withMessages([
|
||||
'email' => ['Неверные учётные данные.'],
|
||||
]);
|
||||
}
|
||||
|
||||
return response()->json([
|
||||
'message' => 'Успешный вход.',
|
||||
'user' => $user,
|
||||
'token' => $user->createToken('auth_token')->plainTextToken
|
||||
]);
|
||||
}
|
||||
|
||||
/**
|
||||
* Выход (инвалидация токена).
|
||||
*/
|
||||
public function logout(Request $request)
|
||||
{
|
||||
$request->user()->currentAccessToken()->delete();
|
||||
|
||||
return response()->json([
|
||||
'message' => 'Вы успешно вышли из системы.'
|
||||
]);
|
||||
}
|
||||
}
|
||||
@@ -9,9 +9,15 @@ use Illuminate\Http\Response;
|
||||
|
||||
class ComponentsController extends Controller
|
||||
{
|
||||
public function index(){
|
||||
return response()->json(Component::all()->toJson());
|
||||
}
|
||||
public function index()
|
||||
{
|
||||
$components = Component::with('user', 'componentType')
|
||||
->where('is_official', true)
|
||||
->orWhere('created_by_user_id', auth()->id())
|
||||
->get();
|
||||
|
||||
return response()->json($components);
|
||||
}
|
||||
|
||||
|
||||
|
||||
@@ -26,49 +32,73 @@ class ComponentsController extends Controller
|
||||
return response()->json($component);
|
||||
}
|
||||
|
||||
public function create(Request $request)
|
||||
{
|
||||
$name = $request->get(key:'name');
|
||||
$type = $request->get(key:'type');
|
||||
$brand = $request->get(key:'brand');
|
||||
$model = $request->get(key:'model');
|
||||
$price = $request->get(key:'price');
|
||||
public function store(Request $request)
|
||||
{
|
||||
$validated = $request->validate([
|
||||
'name' => 'required|string|max:255',
|
||||
'price' => 'required|numeric|min:0',
|
||||
'component_type_id' => 'required|exists:component_types,id',
|
||||
'specifications' => 'nullable|array',
|
||||
]);
|
||||
|
||||
$component = new Component();
|
||||
$component->name = $name;
|
||||
$component->type = $type;
|
||||
$component->brand = $brand;
|
||||
$component->model = $model;
|
||||
$component->price = $price;
|
||||
|
||||
$component->save();
|
||||
$component = Component::create([
|
||||
'name' => $validated['name'],
|
||||
'price' => $validated['price'],
|
||||
'component_type_id' => $validated['component_type_id'],
|
||||
'specifications' => $validated['specifications'] ?? null,
|
||||
'is_official' => false, // всегда false для пользователя
|
||||
'created_by_user_id' => auth()->id(), // автоматически привязываем к пользователю
|
||||
]);
|
||||
|
||||
return response()->json([
|
||||
'message' => 'Компонент успешно создан.',
|
||||
'component' => $component
|
||||
], 201);
|
||||
}
|
||||
|
||||
public function update(Request $request, $id)
|
||||
{
|
||||
$component = Component::findOrFail($id);
|
||||
|
||||
|
||||
return response()->json($component->toJson());
|
||||
// Проверяем, что компонент принадлежит пользователю и не официальный
|
||||
if ($component->created_by_user_id !== auth()->id() || $component->is_official) {
|
||||
return response()->json([
|
||||
'message' => 'Вы не можете редактировать этот компонент.'
|
||||
], 403);
|
||||
}
|
||||
|
||||
public function update(Request $request, int $id): JsonResponse{
|
||||
$validated = $request->validate([
|
||||
'name' => 'required|string|max:255',
|
||||
'price' => 'required|numeric|min:0',
|
||||
'component_type_id' => 'required|exists:component_types,id',
|
||||
'specifications' => 'nullable|array',
|
||||
]);
|
||||
|
||||
return response()->json([
|
||||
'name' => $request->get('name'),
|
||||
'type' => $request->get('type'),
|
||||
'brand' => $request->get('brand'),
|
||||
'model' => $request->get('model'),
|
||||
'price' => $request->get('price'),
|
||||
], Response::HTTP_ACCEPTED);
|
||||
|
||||
}
|
||||
$component->update($validated);
|
||||
|
||||
public function destroy(int $id): JsonResponse
|
||||
{
|
||||
// мы бы здесь написали вызов запроса delete из БД
|
||||
return response()->json([
|
||||
'message' => 'Компонент обновлён.',
|
||||
'component' => $component
|
||||
]);
|
||||
}
|
||||
|
||||
public function destroy($id)
|
||||
{
|
||||
$component = Component::findOrFail($id);
|
||||
|
||||
// Проверяем, что компонент принадлежит пользователю и не официальный
|
||||
if ($component->created_by_user_id !== auth()->id() || $component->is_official) {
|
||||
return response()->json([
|
||||
'success' => true,
|
||||
], Response::HTTP_ACCEPTED);
|
||||
'message' => 'Вы не можете удалить этот компонент.'
|
||||
], 403);
|
||||
}
|
||||
|
||||
|
||||
$component->delete();
|
||||
|
||||
return response()->json([
|
||||
'message' => 'Компонент удалён.'
|
||||
]);
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -33,8 +33,5 @@ class UsersController extends Controller
|
||||
return ['token' => $user->createToken('frontend')->plainTextToken];
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user