first commit

app/Http/Controllers/AuthController.php

@@ -0,0 +1,130 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Resources\AuthResource;
+use App\Mail\Reset;
+use App\Models\User;
+use Carbon\Carbon;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Http\Response;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Cookie;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Mail;
+use Illuminate\Support\Str;
+
+class AuthController extends Controller
+{
+    public function login(Request $request): JsonResponse|Response
+    {
+        if (! Auth::attempt($request->only('email', 'password'))) {
+            return response()->json([
+                'message' => __('validation.invalid_credentials'),
+                'errors' => ['form_info' => __('validation.invalid_credentials')],
+            ], 422);
+        }
+
+        $user = Auth::user();
+        $token = $user->createToken('token')->plainTextToken;
+
+        return response(new AuthResource($user))
+            ->cookie('jwt', $token, 3 * 60 * 24);
+    }
+
+    public function logout(Request $request): Response
+    {
+        Cookie::queue(Cookie::forget('jwt'));
+        Cookie::queue(Cookie::forget(config('session.cookie')));
+
+        $request->user()->tokens()->delete();
+
+        return response(['message' => 'logout']);
+    }
+
+    public function forgot(Request $request): JsonResponse
+    {
+        $data = $request->validate([
+            'email' => 'required|email',
+        ]);
+
+        $user = User::whereEmail($data['email'])->first();
+        if (! $user) {
+            return response()->json([
+                'message' => 'Check your email',
+            ]);
+        }
+
+        $token = Str::random(12);
+
+        DB::table('password_reset_tokens')->insert([
+            'email' => $user->email,
+            'token' => $token,
+            'created_at' => now(),
+        ]);
+
+        Mail::to($user->email)->queue(new Reset($token));
+
+        return response()->json([
+            'message' => 'Check your email',
+        ]);
+    }
+
+    public function register(Request $request)
+    {
+        $data = $request->validate([
+            'name' => ['required', 'string', 'min:3'],
+            'email' => ['required', 'email', 'unique:users,email'],
+            'password' => ['required', 'min:8'],
+        ]);
+
+        $user = User::create($data);
+        $token = $user->createToken('token')->plainTextToken;
+
+        return response(new AuthResource($user))
+            ->cookie('jwt', $token, 3 * 60 * 24);
+    }
+
+    public function reset(Request $request): JsonResponse
+    {
+        $data = $request->validate([
+            'email' => 'exists:users,email',
+            'token' => 'exists:password_reset_tokens,token',
+            'password' => ['required', 'regex:/^(?=.*?[A-Z])(?=.*[a-z])(?=.*[0-9]).{8,}$/'],
+            'confirm_password' => 'same:password',
+        ], [
+            'password.regex' => __('validation.password_rules'),
+            'confirm_password.same' => __('validation.password_confirm'),
+        ]);
+
+        $token = DB::table('password_reset_tokens')
+            ->whereEmail($data['email'])
+            ->whereToken($data['token'])
+            ->orderBy('created_at', 'desc')
+            ->first();
+
+        if ($token !== null
+            && (new Carbon($token->created_at))->addDay() > now()) {
+            $user = User::whereEmail($data['email'])->first();
+            $user->update(['password' => Hash::make($data['password'])]);
+
+            DB::table('password_reset_tokens')
+                ->whereEmail($data['email'])
+                ->delete();
+
+            return response()->json(['message' => 'New password success']);
+        }
+
+        return response()->json([
+            'message' => __('validation.invalid_credentials'),
+            'errors' => ['form_info' => __('validation.invalid_credentials')],
+        ], 422);
+    }
+
+    public function user(Request $request): JsonResponse
+    {
+        return response()->json(new AuthResource($request->user()));
+    }
+}

app/Http/Controllers/Controller.php

@@ -0,0 +1,12 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
+use Illuminate\Foundation\Validation\ValidatesRequests;
+use Illuminate\Routing\Controller as BaseController;
+
+class Controller extends BaseController
+{
+    use AuthorizesRequests, ValidatesRequests;
+}

app/Http/Controllers/TimeTrackerController.php

@@ -0,0 +1,93 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Resources\TimeTrackerResource;
+use App\Models\TimeTracker;
+use App\Models\ToDo;
+use Illuminate\Http\Request;
+
+class TimeTrackerController extends Controller
+{
+    /**
+     * Display a listing of the resource.
+     */
+    public function index()
+    {
+        //
+    }
+
+    /**
+     * Store a newly created resource in storage.
+     */
+    public function store(Request $request)
+    {
+        $data = $request->validate([
+            'todo_id' => 'exists:to_dos,id',
+        ]);
+
+        $user = $request->user();
+        TimeTracker::whereHas('toDo', fn ($q) => $q->where('user_id', $request->user()->id))
+            ->whereNull('end_at')
+            ->update(['end_at' => now()]);
+        $toDo = $user
+            ->toDos()
+            ->where('id', $data['todo_id'])
+            ->first();
+        $timeTracker = $toDo->timeTrackers()
+            ->create(['start_at' => now()]);
+        $user->time_tracker_id = $timeTracker->id;
+        $user->save();
+
+        return response()->json(new TimeTrackerResource($timeTracker->load('toDo')), 201);
+    }
+
+    /**
+     * Display the specified resource.
+     */
+    public function show(TimeTracker $timeTracker)
+    {
+        //
+    }
+
+    /**
+     * Update the specified resource in storage.
+     */
+    public function update(Request $request, TimeTracker $timeTracker)
+    {
+        //
+    }
+
+    /**
+     * Remove the specified resource from storage.
+     */
+    public function destroy(TimeTracker $timeTracker)
+    {
+        //
+    }
+
+    public function userTimeTracker(Request $request)
+    {
+        if (! $request->user()->currentTimeTracker) {
+            return response()->noContent();
+        }
+
+        return response()->json(new TimeTrackerResource($request->user()->currentTimeTracker?->load('toDo')));
+    }
+
+    public function stopUserTimeTracker(Request $request)
+    {
+        $request->user()->currentTimeTracker()->update(['end_at' => now()]);
+        $request->user()->time_tracker_id = null;
+        $request->user()->save();
+
+        return response()->json([], 204);
+    }
+
+    public function toDoTimeTrackers(Request $request, ToDo $toDo)
+    {
+        abort_if($toDo->user_id !== $request->user()->id, 401, 'unauthoriez');
+
+        return response()->json(TimeTrackerResource::collection($toDo->timeTrackers->sortByDesc('start_at')));
+    }
+}

app/Http/Controllers/ToDoController.php

@@ -0,0 +1,62 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\ToDoRequest;
+use App\Http\Resources\ToDoResource;
+use App\Models\ToDo;
+use Illuminate\Http\Request;
+
+class ToDoController extends Controller
+{
+    /**
+     * Display a listing of to dos.
+     */
+    public function index(Request $request)
+    {
+        //dd($request->user()->toDos);
+        return response()->json(ToDoResource::collection($request->user()->toDos));
+    }
+
+    /**
+     * Store newly to do created resource in storage.
+     */
+    public function store(ToDoRequest $request)
+    {
+        $data = $request->validated();
+
+        $toDo = $request->user()->toDos()->create($data);
+
+        return response()->json(new ToDoResource($toDo), 201);
+    }
+
+    /**
+     * Display the specified to do.
+     */
+    public function show(ToDo $todo)
+    {
+        return response()->json(new ToDoResource($todo));
+    }
+
+    /**
+     * Update the specified resource in storage.
+     */
+    public function update(ToDoRequest $request, ToDo $todo)
+    {
+        $data = $request->validated();
+        $data['checked'] = $request->input('checked') ? now() : null;
+        $todo->update($data);
+
+        return response()->json(new ToDoResource($todo));
+    }
+
+    /**
+     * Remove the specified to do resource from storage.
+     */
+    public function destroy(ToDo $todo)
+    {
+        $todo->delete();
+
+        return response()->noContent();
+    }
+}

app/Http/Kernel.php

@@ -0,0 +1,68 @@
+<?php
+
+namespace App\Http;
+
+use Illuminate\Foundation\Http\Kernel as HttpKernel;
+
+class Kernel extends HttpKernel
+{
+    /**
+     * The application's global HTTP middleware stack.
+     *
+     * These middleware are run during every request to your application.
+     *
+     * @var array<int, class-string|string>
+     */
+    protected $middleware = [
+        // \App\Http\Middleware\TrustHosts::class,
+        \App\Http\Middleware\TrustProxies::class,
+        \Illuminate\Http\Middleware\HandleCors::class,
+        \App\Http\Middleware\PreventRequestsDuringMaintenance::class,
+        \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
+        \App\Http\Middleware\TrimStrings::class,
+        \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,
+    ];
+
+    /**
+     * The application's route middleware groups.
+     *
+     * @var array<string, array<int, class-string|string>>
+     */
+    protected $middlewareGroups = [
+        'web' => [
+            \App\Http\Middleware\EncryptCookies::class,
+            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
+            \Illuminate\Session\Middleware\StartSession::class,
+            \Illuminate\View\Middleware\ShareErrorsFromSession::class,
+            \App\Http\Middleware\VerifyCsrfToken::class,
+            \Illuminate\Routing\Middleware\SubstituteBindings::class,
+        ],
+
+        'api' => [
+            \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
+            \Illuminate\Routing\Middleware\ThrottleRequests::class.':api',
+            \Illuminate\Routing\Middleware\SubstituteBindings::class,
+        ],
+    ];
+
+    /**
+     * The application's middleware aliases.
+     *
+     * Aliases may be used instead of class names to conveniently assign middleware to routes and groups.
+     *
+     * @var array<string, class-string|string>
+     */
+    protected $middlewareAliases = [
+        'auth' => \App\Http\Middleware\Authenticate::class,
+        'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
+        'auth.session' => \Illuminate\Session\Middleware\AuthenticateSession::class,
+        'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
+        'can' => \Illuminate\Auth\Middleware\Authorize::class,
+        'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
+        'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class,
+        'precognitive' => \Illuminate\Foundation\Http\Middleware\HandlePrecognitiveRequests::class,
+        'signed' => \App\Http\Middleware\ValidateSignature::class,
+        'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
+        'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
+    ];
+}

app/Http/Middleware/Authenticate.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Auth\Middleware\Authenticate as Middleware;
+use Illuminate\Http\Request;
+
+class Authenticate extends Middleware
+{
+    /**
+     * Get the path the user should be redirected to when they are not authenticated.
+     */
+    protected function redirectTo(Request $request): ?string
+    {
+        return $request->expectsJson() ? null : route('login');
+    }
+}

app/Http/Middleware/EncryptCookies.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Cookie\Middleware\EncryptCookies as Middleware;
+
+class EncryptCookies extends Middleware
+{
+    /**
+     * The names of the cookies that should not be encrypted.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}

app/Http/Middleware/PreventRequestsDuringMaintenance.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\PreventRequestsDuringMaintenance as Middleware;
+
+class PreventRequestsDuringMaintenance extends Middleware
+{
+    /**
+     * The URIs that should be reachable while maintenance mode is enabled.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}

app/Http/Middleware/RedirectIfAuthenticated.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Providers\RouteServiceProvider;
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Symfony\Component\HttpFoundation\Response;
+
+class RedirectIfAuthenticated
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next, string ...$guards): Response
+    {
+        $guards = empty($guards) ? [null] : $guards;
+
+        foreach ($guards as $guard) {
+            if (Auth::guard($guard)->check()) {
+                return redirect(RouteServiceProvider::HOME);
+            }
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/TrimStrings.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\TrimStrings as Middleware;
+
+class TrimStrings extends Middleware
+{
+    /**
+     * The names of the attributes that should not be trimmed.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        'current_password',
+        'password',
+        'password_confirmation',
+    ];
+}

app/Http/Middleware/TrustHosts.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Http\Middleware\TrustHosts as Middleware;
+
+class TrustHosts extends Middleware
+{
+    /**
+     * Get the host patterns that should be trusted.
+     *
+     * @return array<int, string|null>
+     */
+    public function hosts(): array
+    {
+        return [
+            $this->allSubdomainsOfApplicationUrl(),
+        ];
+    }
+}

app/Http/Middleware/TrustProxies.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Http\Middleware\TrustProxies as Middleware;
+use Illuminate\Http\Request;
+
+class TrustProxies extends Middleware
+{
+    /**
+     * The trusted proxies for this application.
+     *
+     * @var array<int, string>|string|null
+     */
+    protected $proxies;
+
+    /**
+     * The headers that should be used to detect proxies.
+     *
+     * @var int
+     */
+    protected $headers =
+        Request::HEADER_X_FORWARDED_FOR |
+        Request::HEADER_X_FORWARDED_HOST |
+        Request::HEADER_X_FORWARDED_PORT |
+        Request::HEADER_X_FORWARDED_PROTO |
+        Request::HEADER_X_FORWARDED_AWS_ELB;
+}

app/Http/Middleware/ValidateSignature.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Routing\Middleware\ValidateSignature as Middleware;
+
+class ValidateSignature extends Middleware
+{
+    /**
+     * The names of the query string parameters that should be ignored.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        // 'fbclid',
+        // 'utm_campaign',
+        // 'utm_content',
+        // 'utm_medium',
+        // 'utm_source',
+        // 'utm_term',
+    ];
+}

app/Http/Middleware/VerifyCsrfToken.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as Middleware;
+
+class VerifyCsrfToken extends Middleware
+{
+    /**
+     * The URIs that should be excluded from CSRF verification.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}

app/Http/Requests/ToDoRequest.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class ToDoRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'name' => ['string', 'min:3', 'max:255'],
+            'checked' => ['boolean'],
+        ];
+    }
+}

app/Http/Resources/AuthResource.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Http\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class AuthResource extends JsonResource
+{
+    /**
+     * Transform the resource into an array.
+     *
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'name' => $this->name,
+            'email' => $this->email,
+        ];
+    }
+}

app/Http/Resources/TimeTrackerResource.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class TimeTrackerResource extends JsonResource
+{
+    /**
+     * Transform the resource into an array.
+     *
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'start_at' => $this->start_at->format('Y-m-d H:i:s'),
+            'end_at' => $this->end_at?->format('Y-m-d H:i:s'),
+            'to_do' => new ToDoResource($this->whenLoaded('toDo'))
+        ];
+    }
+}

app/Http/Resources/ToDoResource.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class ToDoResource extends JsonResource
+{
+    /**
+     * Transform the resource into an array.
+     *
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'user_id' => $this->user_id,
+            'name' => $this->name,
+            'checked' => (boolean) $this->checked,
+        ];
+    }
+}