Fix: complete authentication and routing setup for /sidata subpath prefix

app/Http/Controllers/AuthController.php

@@ -4,21 +4,19 @@ namespace App\Http\Controllers;
 
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
-use Validator;
-use Hash;
-use Session;
+use Illuminate\Support\Facades\Validator;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Session;
 use App\Models\User;
 use App\Models\RoleUser;
-use Illuminate\Contracts\Session\Session as SessionSession;
 
 class AuthController extends Controller
 {
     public function showFormLogin()
     {
         if (Auth::check()) { 
-            // True sekalian session field di users nanti bisa dipanggil via Auth
-            // Login Success
-            return redirect()->route('home');
+            // Jika sudah login, langsung alihkan ke home
+            return redirect()->intended(route('home'));
         }
         return view('login');
     }
@@ -40,39 +38,43 @@ class AuthController extends Controller
         $validator = Validator::make($request->all(), $rules, $messages);
         
         if ($validator->fails()) {
-            return redirect()->back()->withErrors($validator)->withInput($request->all);
+            return redirect()->back()->withErrors($validator)->withInput($request->all());
         }
   
-        $data = [
+        $credentials = [
             'nrk'      => $request->input('nrk'),
             'password' => $request->input('password'),
         ];
         
-        Auth::attempt($data);
-  
-        if (Auth::check()) { 
-            if (Auth::user()->status_lock == 1)
-            {
+        if (Auth::attempt($credentials)) {
+            // Cek jika akun terkunci
+            if (Auth::user()->status_lock == 1) {
                 Auth::logout();
+                $request->session()->invalidate();
+                $request->session()->regenerateToken();
+
                 Session::flash('eror', 'Data Terkunci Silahkan Hubungi Admin');
                 return redirect()->route('login');
             }
-            // True sekalian session field di users nanti bisa dipanggil via Auth
-            // Login Success
+
+            // Regenerasi session ID untuk keamanan (mencegah Session Fixation)
+            $request->session()->regenerate();
+
+            // Set List Tahun Anggaran ke Session
             $taValue = [];
             for ($i = 2022; $i <= date("Y"); $i++) {
                 $taValue[] = $i;
             }
             Session::put('listTA', $taValue);
-            return redirect()->route('home');
+
+            // Alihkan ke URL yang dituju atau ke route home bawaan
+            return redirect()->intended(route('home'));
 
         } else { 
-            // False
-            // Login Fail
+            // Login Gagal
             Session::flash('error', 'NRK atau password salah');
             return redirect()->route('login');
         }
-  
     }
 
     public function showFormRegister()
@@ -102,14 +104,13 @@ class AuthController extends Controller
         $validator = Validator::make($request->all(), $rules, $messages);
   
         if ($validator->fails()) {
-            return redirect()->back()->withErrors($validator)->withInput($request->all);
+            return redirect()->back()->withErrors($validator)->withInput($request->all());
         }
   
         $user = new User;
         $user->name = ucwords(strtolower($request->name));
         $user->nrk = strtolower($request->nrk);
         $user->password = Hash::make($request->password);
-        // $user->email_verified_at = \Carbon\Carbon::now();
         $simpan = $user->save();
   
         $roleUser = new RoleUser;
@@ -126,9 +127,13 @@ class AuthController extends Controller
         }
     }
   
-    public function logout()
+    public function logout(Request $request)
     {
-        Auth::logout(); // menghapus session yang aktif
+        Auth::logout();
+        
+        $request->session()->invalidate();
+        $request->session()->regenerateToken();
+
         return redirect()->route('login');
     }
 }

app/Providers/RouteServiceProvider.php

@@ -17,7 +17,7 @@ class RouteServiceProvider extends ServiceProvider
      *
      * @var string
      */
-    public const HOME = '/home';
+    public const HOME = '/sidata/home';
 
     /**
      * The controller namespace for the application.