init backend presensi
This commit is contained in:
mwpn
1
app/Modules/Auth/Controllers/.gitkeep
Normal file
1
app/Modules/Auth/Controllers/.gitkeep
Normal file
@@ -0,0 +1 @@
|
||||
# Auth Module - Controllers
|
||||
65
app/Modules/Auth/Controllers/AuthController.php
Normal file
65
app/Modules/Auth/Controllers/AuthController.php
Normal file
@@ -0,0 +1,65 @@
|
||||
<?php
|
||||
|
||||
namespace App\Modules\Auth\Controllers;
|
||||
|
||||
use App\Core\BaseApiController;
|
||||
use App\Modules\Auth\Services\AuthService;
|
||||
use CodeIgniter\HTTP\ResponseInterface;
|
||||
|
||||
/**
|
||||
* Auth Controller
|
||||
*
|
||||
* POST /api/auth/login, POST /api/auth/logout, GET /api/auth/me (session-based).
|
||||
*/
|
||||
class AuthController extends BaseApiController
|
||||
{
|
||||
protected AuthService $authService;
|
||||
|
||||
public function __construct()
|
||||
{
|
||||
$this->authService = new AuthService();
|
||||
}
|
||||
|
||||
/**
|
||||
* POST /api/auth/login
|
||||
* Body: { "email": "", "password": "" }
|
||||
*/
|
||||
public function login(): ResponseInterface
|
||||
{
|
||||
$input = $this->request->getJSON(true);
|
||||
$email = $input['email'] ?? '';
|
||||
$password = $input['password'] ?? '';
|
||||
|
||||
if ($email === '' || $password === '') {
|
||||
return $this->errorResponse('Email and password are required', null, null, 400);
|
||||
}
|
||||
|
||||
$user = $this->authService->login($email, $password);
|
||||
if (!$user) {
|
||||
return $this->errorResponse('Invalid email or password', null, null, 401);
|
||||
}
|
||||
|
||||
return $this->successResponse($user, 'Login successful');
|
||||
}
|
||||
|
||||
/**
|
||||
* POST /api/auth/logout
|
||||
*/
|
||||
public function logout(): ResponseInterface
|
||||
{
|
||||
$this->authService->logout();
|
||||
return $this->successResponse(null, 'Logged out');
|
||||
}
|
||||
|
||||
/**
|
||||
* GET /api/auth/me
|
||||
*/
|
||||
public function me(): ResponseInterface
|
||||
{
|
||||
$user = $this->authService->currentUser();
|
||||
if (!$user) {
|
||||
return $this->errorResponse('Not authenticated', null, null, 401);
|
||||
}
|
||||
return $this->successResponse($user, 'Current user');
|
||||
}
|
||||
}
|
||||
232
app/Modules/Auth/Controllers/UserController.php
Normal file
232
app/Modules/Auth/Controllers/UserController.php
Normal file
@@ -0,0 +1,232 @@
|
||||
<?php
|
||||
|
||||
namespace App\Modules\Auth\Controllers;
|
||||
|
||||
use App\Core\BaseApiController;
|
||||
use App\Modules\Auth\Models\RoleModel;
|
||||
use App\Modules\Auth\Models\UserModel;
|
||||
use App\Modules\Auth\Models\UserRoleModel;
|
||||
use CodeIgniter\HTTP\ResponseInterface;
|
||||
|
||||
/**
|
||||
* User API (ADMIN only). List by role; create/update/delete users (for teachers).
|
||||
*/
|
||||
class UserController extends BaseApiController
|
||||
{
|
||||
/**
|
||||
* GET /api/users?role=GURU_MAPEL
|
||||
* Returns users with optional role filter. Response: [{ id, name, email }, ...]
|
||||
*/
|
||||
public function index(): ResponseInterface
|
||||
{
|
||||
$roleCode = $this->request->getGet('role');
|
||||
if ($roleCode === null || $roleCode === '') {
|
||||
return $this->errorResponse('Query parameter role is required', null, null, 422);
|
||||
}
|
||||
|
||||
$roleModel = new RoleModel();
|
||||
$role = $roleModel->findByCode((string) $roleCode);
|
||||
if (!$role) {
|
||||
return $this->successResponse([], 'Users');
|
||||
}
|
||||
|
||||
$userRoleModel = new UserRoleModel();
|
||||
$db = \Config\Database::connect();
|
||||
$builder = $db->table('user_roles');
|
||||
$builder->select('user_id');
|
||||
$builder->where('role_id', $role->id);
|
||||
$rows = $builder->get()->getResultArray();
|
||||
$userIdList = array_values(array_unique(array_map(static fn ($r) => (int) $r['user_id'], $rows)));
|
||||
if ($userIdList === []) {
|
||||
return $this->successResponse([], 'Users');
|
||||
}
|
||||
|
||||
$userModel = new UserModel();
|
||||
$users = $userModel->whereIn('id', $userIdList)->findAll();
|
||||
$data = [];
|
||||
foreach ($users as $u) {
|
||||
$data[] = [
|
||||
'id' => (int) $u->id,
|
||||
'name' => (string) $u->name,
|
||||
'email' => (string) $u->email,
|
||||
];
|
||||
}
|
||||
usort($data, static fn ($a, $b) => strcasecmp($a['name'], $b['name']));
|
||||
|
||||
return $this->successResponse($data, 'Users');
|
||||
}
|
||||
|
||||
/**
|
||||
* POST /api/users
|
||||
* Body (baru): name, email, password, roles[] (isi: GURU_MAPEL dan/atau WALI_KELAS).
|
||||
* Body (lama, tetap didukung): name, email, password, role_code.
|
||||
*/
|
||||
public function store(): ResponseInterface
|
||||
{
|
||||
$payload = $this->request->getJSON(true) ?? [];
|
||||
$name = trim($payload['name'] ?? '');
|
||||
$email = trim($payload['email'] ?? '');
|
||||
$password = $payload['password'] ?? '';
|
||||
$rolesInput = $payload['roles'] ?? null;
|
||||
$roleCode = $payload['role_code'] ?? null; // fallback lama
|
||||
|
||||
if ($name === '' || $email === '' || $password === '') {
|
||||
return $this->errorResponse('Name, email, and password are required', null, null, 422);
|
||||
}
|
||||
|
||||
$roleModel = new RoleModel();
|
||||
$allowedCodes = ['GURU_MAPEL', 'WALI_KELAS'];
|
||||
|
||||
// Normalisasi roles: jika roles[] tidak ada, pakai role_code tunggal (kompatibilitas lama)
|
||||
$roleCodes = [];
|
||||
if (is_array($rolesInput)) {
|
||||
foreach ($rolesInput as $rc) {
|
||||
$rc = (string) $rc;
|
||||
if (in_array($rc, $allowedCodes, true)) {
|
||||
$roleCodes[] = $rc;
|
||||
}
|
||||
}
|
||||
$roleCodes = array_values(array_unique($roleCodes));
|
||||
} elseif (is_string($roleCode) && $roleCode !== '') {
|
||||
if (! in_array($roleCode, $allowedCodes, true)) {
|
||||
return $this->errorResponse('role_code must be GURU_MAPEL or WALI_KELAS', null, null, 422);
|
||||
}
|
||||
$roleCodes = [$roleCode];
|
||||
}
|
||||
|
||||
if ($roleCodes === []) {
|
||||
return $this->errorResponse('At least one role (GURU_MAPEL or WALI_KELAS) is required', null, null, 422);
|
||||
}
|
||||
|
||||
$userModel = new UserModel();
|
||||
$existing = $userModel->findByEmail($email);
|
||||
if ($existing) {
|
||||
return $this->errorResponse('Email already registered', null, null, 422);
|
||||
}
|
||||
|
||||
$userModel->skipValidation(false);
|
||||
$id = $userModel->insert([
|
||||
'name' => $name,
|
||||
'email' => $email,
|
||||
'password_hash' => password_hash($password, PASSWORD_DEFAULT),
|
||||
'is_active' => 1,
|
||||
]);
|
||||
if ($id === false) {
|
||||
return $this->errorResponse(implode(' ', $userModel->errors()), $userModel->errors(), null, 422);
|
||||
}
|
||||
|
||||
$userRoleModel = new UserRoleModel();
|
||||
foreach ($roleCodes as $code) {
|
||||
$role = $roleModel->findByCode($code);
|
||||
if ($role) {
|
||||
$userRoleModel->insert(['user_id' => $id, 'role_id' => $role->id]);
|
||||
}
|
||||
}
|
||||
|
||||
$user = $userModel->find($id);
|
||||
return $this->successResponse([
|
||||
'id' => (int) $user->id,
|
||||
'name' => (string) $user->name,
|
||||
'email' => (string) $user->email,
|
||||
], 'User created', null, ResponseInterface::HTTP_CREATED);
|
||||
}
|
||||
|
||||
/**
|
||||
* PUT /api/users/{id}
|
||||
* Body (baru): name?, email?, password?, roles[] (GURU_MAPEL/WALI_KELAS)
|
||||
* Body (lama, tetap didukung): role_code tunggal.
|
||||
*/
|
||||
public function update(int $id): ResponseInterface
|
||||
{
|
||||
$userModel = new UserModel();
|
||||
$user = $userModel->find($id);
|
||||
if (! $user) {
|
||||
return $this->errorResponse('User not found', null, null, 404);
|
||||
}
|
||||
|
||||
$payload = $this->request->getJSON(true) ?? [];
|
||||
$data = [];
|
||||
if (array_key_exists('name', $payload)) {
|
||||
$data['name'] = trim($payload['name']);
|
||||
}
|
||||
if (array_key_exists('email', $payload)) {
|
||||
$data['email'] = trim($payload['email']);
|
||||
}
|
||||
if (isset($payload['password']) && $payload['password'] !== '') {
|
||||
$data['password_hash'] = password_hash($payload['password'], PASSWORD_DEFAULT);
|
||||
}
|
||||
|
||||
if ($data !== []) {
|
||||
$validation = \Config\Services::validation();
|
||||
$rules = [
|
||||
'name' => 'required|max_length[255]',
|
||||
'email' => 'required|valid_email|max_length[255]|is_unique[users.email,id,' . $id . ']',
|
||||
];
|
||||
$toValidate = [
|
||||
'name' => $data['name'] ?? $user->name,
|
||||
'email' => $data['email'] ?? $user->email,
|
||||
];
|
||||
if (! $validation->setRules($rules)->run($toValidate)) {
|
||||
return $this->errorResponse(implode(' ', $validation->getErrors()), $validation->getErrors(), null, 422);
|
||||
}
|
||||
$userModel->skipValidation(true);
|
||||
$userModel->update($id, $data);
|
||||
}
|
||||
|
||||
// Sinkronisasi roles
|
||||
$rolesInput = $payload['roles'] ?? null;
|
||||
$roleCode = $payload['role_code'] ?? null; // fallback lama
|
||||
$allowedCodes = ['GURU_MAPEL', 'WALI_KELAS'];
|
||||
|
||||
$roleCodes = null;
|
||||
if (is_array($rolesInput)) {
|
||||
$roleCodes = [];
|
||||
foreach ($rolesInput as $rc) {
|
||||
$rc = (string) $rc;
|
||||
if (in_array($rc, $allowedCodes, true)) {
|
||||
$roleCodes[] = $rc;
|
||||
}
|
||||
}
|
||||
$roleCodes = array_values(array_unique($roleCodes));
|
||||
} elseif (isset($roleCode) && in_array($roleCode, $allowedCodes, true)) {
|
||||
// kompatibilitas lama: satu role_code
|
||||
$roleCodes = [$roleCode];
|
||||
}
|
||||
|
||||
if (is_array($roleCodes)) {
|
||||
$roleModel = new RoleModel();
|
||||
$userRoleModel = new UserRoleModel();
|
||||
$db = \Config\Database::connect();
|
||||
|
||||
// Hapus semua role sebelumnya, lalu insert sesuai request
|
||||
$db->table('user_roles')->where('user_id', $id)->delete();
|
||||
|
||||
foreach ($roleCodes as $code) {
|
||||
$role = $roleModel->findByCode($code);
|
||||
if ($role) {
|
||||
$userRoleModel->insert(['user_id' => $id, 'role_id' => $role->id]);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
$updated = $userModel->find($id);
|
||||
return $this->successResponse([
|
||||
'id' => (int) $updated->id,
|
||||
'name' => (string) $updated->name,
|
||||
'email' => (string) $updated->email,
|
||||
], 'User updated');
|
||||
}
|
||||
|
||||
/**
|
||||
* DELETE /api/users/{id}
|
||||
*/
|
||||
public function delete(int $id): ResponseInterface
|
||||
{
|
||||
$userModel = new UserModel();
|
||||
if (! $userModel->find($id)) {
|
||||
return $this->errorResponse('User not found', null, null, 404);
|
||||
}
|
||||
$userModel->delete($id);
|
||||
return $this->successResponse(null, 'User deleted');
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user