#4 - Login + reset password

app/Http/Controllers/AuthenticateSessionController.php

@@ -0,0 +1,48 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\Auth\AuthenticateSessionRequest;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Support\Facades\Redirect;
+use Illuminate\Validation\ValidationException;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class AuthenticateSessionController extends Controller
+{
+    public function create(): Response
+    {
+        return Inertia::render("Auth/Login");
+    }
+
+    /**
+     * @throws ValidationException
+     */
+    public function authenticate(AuthenticateSessionRequest $request): RedirectResponse
+    {
+        $credentials = $request->only("email", "password");
+
+        if (auth()->attempt($credentials)) {
+            $request->session()->regenerate();
+
+            return Redirect::route("home")->with("success");
+        }
+
+        throw ValidationException::withMessages([
+            "email" => "Wrong email or password",
+        ]);
+    }
+
+    public function logout(): RedirectResponse
+    {
+        auth()->logout();
+
+        request()->session()->invalidate();
+        request()->session()->regenerateToken();
+
+        return Redirect::route("home")->with("success");
+    }
+}

app/Http/Controllers/ContestController.php

@@ -0,0 +1,16 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers;
+
+use Inertia\Inertia;
+use Inertia\Response;
+
+class ContestController extends Controller
+{
+    public function index(): Response
+    {
+        return Inertia::render("Welcome");
+    }
+}

app/Http/Controllers/EmailVerifyController.php

@@ -0,0 +1,34 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers;
+
+use Illuminate\Foundation\Auth\EmailVerificationRequest;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Redirect;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class EmailVerifyController extends Controller
+{
+    public function __invoke(EmailVerificationRequest $request): RedirectResponse
+    {
+        $request->fulfill();
+
+        return Redirect::route("home");
+    }
+
+    public function create(): Response
+    {
+        return Inertia::render("Auth/Verify-Email");
+    }
+
+    public function send(Request $request): RedirectResponse
+    {
+        $request->user()->sendEmailVerificationNotification();
+
+        return back()->with("message", "Verification link sent!");
+    }
+}

app/Http/Controllers/PasswordResetLinkController.php

@@ -0,0 +1,62 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\Auth\ForgotPasswordRequest;
+use App\Http\Requests\Auth\ResetPasswordRequest;
+use App\Models\User;
+use Illuminate\Auth\Events\PasswordReset;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Password;
+use Illuminate\Support\Str;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class PasswordResetLinkController extends Controller
+{
+    public function create(): Response
+    {
+        return Inertia::render("Auth/Forgot-Password");
+    }
+
+    public function store(ForgotPasswordRequest $request): RedirectResponse
+    {
+        $request->only("email");
+
+        $status = Password::sendResetLink(
+            $request->only("email"),
+        );
+
+        return $status === Password::RESET_LINK_SENT
+            ? back()->with(["status" => __($status)])
+            : back()->withErrors(["email" => __($status)]);
+    }
+
+    public function resetCreate(string $token): Response
+    {
+        return Inertia::render("Auth/Reset-Password", ["token" => $token]);
+    }
+
+    public function resetStore(ResetPasswordRequest $request): RedirectResponse
+    {
+        $status = Password::reset(
+            $request->only("email", "password", "password_confirmation", "token"),
+            function (User $user, string $password): void {
+                $user->forceFill([
+                    "password" => Hash::make($password),
+                ])->setRememberToken(Str::random(60));
+
+                $user->save();
+
+                event(new PasswordReset($user));
+            },
+        );
+
+        return $status === Password::PASSWORD_RESET
+            ? redirect()->route("login")->with("status", __($status))
+            : back()->withErrors(["email" => [__($status)]]);
+    }
+}

app/Http/Controllers/RegisterUserController.php

@@ -0,0 +1,35 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\Auth\RegisterUserRequest;
+use App\Models\User;
+use Illuminate\Auth\Events\Registered;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Redirect;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class RegisterUserController extends Controller
+{
+    public function create(): Response
+    {
+        return Inertia::render("Auth/Register");
+    }
+
+    public function store(RegisterUserRequest $request): RedirectResponse
+    {
+        $user = new User($request->validated());
+        $user->password = Hash::make($request->password);
+        $user->save();
+
+        event(new Registered($user));
+        Auth::login($user);
+
+        return Redirect::route("home");
+    }
+}

app/Http/Requests/Auth/AuthenticateSessionRequest.php

@@ -0,0 +1,43 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Requests\Auth;
+
+use Illuminate\Contracts\Validation\ValidationRule;
+use Illuminate\Foundation\Http\FormRequest;
+
+class AuthenticateSessionRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, ValidationRule|array|string>
+     */
+    public function rules(): array
+    {
+        return [
+            "email" => "required|email|max:255",
+            "password" => "required|string",
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            "email" => [
+                "required" => "The email field is required.",
+                "max" => "Your email is too long. It must not be greater than 255 characters.",
+                "unique" => "The email has already been taken.",
+                "email" => "Your email is invalid.",
+            ],
+
+            "password" => [
+                "required" => "The password field is required.",
+            ],
+        ];
+    }
+}

app/Http/Requests/Auth/ForgotPasswordRequest.php

@@ -0,0 +1,37 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Requests\Auth;
+
+use Illuminate\Contracts\Validation\ValidationRule;
+use Illuminate\Foundation\Http\FormRequest;
+
+class ForgotPasswordRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, ValidationRule|array|string>
+     */
+    public function rules(): array
+    {
+        return [
+            "email" => "required|string|email:dns|max:255",
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            "email" => [
+                "required" => "The email field is required.",
+                "max" => "Your email is too long. It must not be greater than 255 characters.",
+                "email" => "Your email is invalid.",
+            ],
+        ];
+    }
+}

app/Http/Requests/Auth/RegisterUserRequest.php

@@ -0,0 +1,59 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Requests\Auth;
+
+use App\Models\User;
+use Illuminate\Contracts\Validation\ValidationRule;
+use Illuminate\Foundation\Http\FormRequest;
+
+class RegisterUserRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, ValidationRule|array|string>
+     */
+    public function rules(): array
+    {
+        return [
+            "email" => "required|string|email:rfc,dns|max:255|unique:" . User::class,
+            "name" => "required|string|max:255",
+            "surname" => "required|string|max:255",
+            "password" => "required|string|min:8",
+            "school_id" => "required|integer|exists:schools,id",
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            "email" => [
+                "required" => "The email field is required.",
+                "max" => "Your email is too long. It must not be greater than 255 characters.",
+                "unique" => "The email has already been taken.",
+                "email" => "Your email is invalid.",
+            ],
+            "name" => [
+                "required" => "The name field is required",
+                "max" => "Your name is too long. It must not be greater than 255 characters.",
+            ],
+            "surname" => [
+                "required" => "The surname field is required",
+                "max" => "Your surname is too long. It must not be greater than 255 characters.",
+            ],
+            "password" => [
+                "required" => "The password field is required.",
+                "min" => "Your password is too short. It must be at least 8 characters.",
+            ],
+            "school_id" => [
+                "required" => "The school field is required.",
+                "exists" => "Your school is invalid. Check it again.",
+            ],
+        ];
+    }
+}

app/Http/Requests/Auth/ResetPasswordRequest.php

@@ -0,0 +1,47 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Requests\Auth;
+
+use Illuminate\Contracts\Validation\ValidationRule;
+use Illuminate\Foundation\Http\FormRequest;
+
+class ResetPasswordRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, ValidationRule|array|string>
+     */
+    public function rules(): array
+    {
+        return [
+            "token" => "required",
+            "email" => "required|email|max:255",
+            "password" => "required|min:8|confirmed:password_confirmation",
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            "token" => [
+                "required" => "The token field is required.",
+            ],
+            "email" => [
+                "required" => "The email field is required.",
+                "max" => "Your email is too long. It must not be greater than 255 characters.",
+                "email" => "Your email is invalid.",
+            ],
+            "password" => [
+                "required" => "The password field is required.",
+                "min" => "Your password is too short. It must be at least 8 characters.",
+                "confirmed" => "The password field confirmation does not match.",
+            ],
+        ];
+    }
+}