cacto
e739ef5d38
Токен-аутентификация Sanctum (login/logout по устройствам), эндпоинты /api/v1 для зон/устройств/правил автоматизации с тем же RBAC (owner/viewer), что и в веб-версии — контроллеры переиспользуют существующие Policy и FormRequest. Устройства отдают живой статус из Device Shadow (Redis) и историю телеметрии из ClickHouse, плюс управление (turn-on/turn-off/set-level) через device-control-service.
53 lines
1.5 KiB
PHP
53 lines
1.5 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api\V1;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Http\Resources\UserResource;
|
|
use App\Models\User;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Validation\ValidationException;
|
|
|
|
class AuthController extends Controller
|
|
{
|
|
/**
|
|
* Issue a Sanctum personal access token for a mobile client. Each
|
|
* client names its own token (device_name) so a user can see/revoke
|
|
* per-device sessions later without logging everyone out at once.
|
|
*/
|
|
public function login(Request $request)
|
|
{
|
|
$credentials = $request->validate([
|
|
'email' => ['required', 'email'],
|
|
'password' => ['required', 'string'],
|
|
'device_name' => ['required', 'string', 'max:255'],
|
|
]);
|
|
|
|
$user = User::where('email', $credentials['email'])->first();
|
|
|
|
if (! $user || ! Hash::check($credentials['password'], $user->password)) {
|
|
throw ValidationException::withMessages([
|
|
'email' => ['Неверный email или пароль.'],
|
|
]);
|
|
}
|
|
|
|
return response()->json([
|
|
'token' => $user->createToken($credentials['device_name'])->plainTextToken,
|
|
'user' => new UserResource($user),
|
|
]);
|
|
}
|
|
|
|
public function logout(Request $request)
|
|
{
|
|
$request->user()->currentAccessToken()->delete();
|
|
|
|
return response()->noContent();
|
|
}
|
|
|
|
public function me(Request $request)
|
|
{
|
|
return new UserResource($request->user());
|
|
}
|
|
}
|