Fix: complete authentication and routing setup for /sidata subpath prefix

This commit is contained in:
2026-08-30 13:19:09 +07:00
parent 2e9257f601
commit 3d7cba88df
2 changed files with 56 additions and 51 deletions
+54 -49
View File
@@ -4,21 +4,19 @@ namespace App\Http\Controllers;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Validator;
use Hash;
use Session;
use Illuminate\Support\Facades\Validator;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Facades\Session;
use App\Models\User;
use App\Models\RoleUser;
use Illuminate\Contracts\Session\Session as SessionSession;
class AuthController extends Controller
{
public function showFormLogin()
{
if (Auth::check()) {
// True sekalian session field di users nanti bisa dipanggil via Auth
// Login Success
return redirect()->route('home');
// Jika sudah login, langsung alihkan ke home
return redirect()->intended(route('home'));
}
return view('login');
}
@@ -26,53 +24,57 @@ class AuthController extends Controller
public function login(Request $request)
{
$rules = [
'nrk' => 'required|string',
'password' => 'required|string'
'nrk' => 'required|string',
'password' => 'required|string'
];
$messages = [
'nrk.required' => 'NRK wajib diisi',
'nrk.string' => 'NRK tidak valid',
'password.required' => 'Password wajib diisi',
'password.string' => 'Password harus berupa string'
'nrk.required' => 'NRK wajib diisi',
'nrk.string' => 'NRK tidak valid',
'password.required' => 'Password wajib diisi',
'password.string' => 'Password harus berupa string'
];
$validator = Validator::make($request->all(), $rules, $messages);
if($validator->fails()){
return redirect()->back()->withErrors($validator)->withInput($request->all);
if ($validator->fails()) {
return redirect()->back()->withErrors($validator)->withInput($request->all());
}
$data = [
'nrk' => $request->input('nrk'),
'password' => $request->input('password'),
$credentials = [
'nrk' => $request->input('nrk'),
'password' => $request->input('password'),
];
Auth::attempt($data);
if (Auth::check()) {
if (Auth::user()->status_lock == 1)
{
if (Auth::attempt($credentials)) {
// Cek jika akun terkunci
if (Auth::user()->status_lock == 1) {
Auth::logout();
$request->session()->invalidate();
$request->session()->regenerateToken();
Session::flash('eror', 'Data Terkunci Silahkan Hubungi Admin');
return redirect()->route('login');
}
// True sekalian session field di users nanti bisa dipanggil via Auth
// Login Success
// Regenerasi session ID untuk keamanan (mencegah Session Fixation)
$request->session()->regenerate();
// Set List Tahun Anggaran ke Session
$taValue = [];
for($i=2022;$i<=date("Y");$i++){
for ($i = 2022; $i <= date("Y"); $i++) {
$taValue[] = $i;
}
Session::put('listTA', $taValue);
return redirect()->route('home');
// Alihkan ke URL yang dituju atau ke route home bawaan
return redirect()->intended(route('home'));
} else {
// False
// Login Fail
// Login Gagal
Session::flash('error', 'NRK atau password salah');
return redirect()->route('login');
}
}
public function showFormRegister()
@@ -83,33 +85,32 @@ class AuthController extends Controller
public function register(Request $request)
{
$rules = [
'name' => 'required|min:3|max:35',
'nrk' => 'required|min:5|unique:users,nrk',
'password' => 'required|confirmed'
'name' => 'required|min:3|max:35',
'nrk' => 'required|min:5|unique:users,nrk',
'password' => 'required|confirmed'
];
$messages = [
'name.required' => 'Nama Lengkap wajib diisi',
'name.min' => 'Nama lengkap minimal 3 karakter',
'name.max' => 'Nama lengkap maksimal 35 karakter',
'nrk.required' => 'NRK wajib diisi',
'nrk.min' => 'NRK tidak valid',
'nrk.unique' => 'NRK sudah terdaftar',
'password.required' => 'Password wajib diisi',
'password.confirmed' => 'Password tidak sama dengan konfirmasi password'
'name.required' => 'Nama Lengkap wajib diisi',
'name.min' => 'Nama lengkap minimal 3 karakter',
'name.max' => 'Nama lengkap maksimal 35 karakter',
'nrk.required' => 'NRK wajib diisi',
'nrk.min' => 'NRK tidak valid',
'nrk.unique' => 'NRK sudah terdaftar',
'password.required' => 'Password wajib diisi',
'password.confirmed' => 'Password tidak sama dengan konfirmasi password'
];
$validator = Validator::make($request->all(), $rules, $messages);
if($validator->fails()){
return redirect()->back()->withErrors($validator)->withInput($request->all);
if ($validator->fails()) {
return redirect()->back()->withErrors($validator)->withInput($request->all());
}
$user = new User;
$user->name = ucwords(strtolower($request->name));
$user->nrk = strtolower($request->nrk);
$user->password = Hash::make($request->password);
// $user->email_verified_at = \Carbon\Carbon::now();
$simpan = $user->save();
$roleUser = new RoleUser;
@@ -117,7 +118,7 @@ class AuthController extends Controller
$roleUser->user_id = $user->id;
$roleUser->save();
if($simpan){
if ($simpan) {
Session::flash('success', 'Register berhasil! Silahkan login untuk mengakses data');
return redirect()->route('login');
} else {
@@ -126,9 +127,13 @@ class AuthController extends Controller
}
}
public function logout()
public function logout(Request $request)
{
Auth::logout(); // menghapus session yang aktif
Auth::logout();
$request->session()->invalidate();
$request->session()->regenerateToken();
return redirect()->route('login');
}
}
}