feat(mobile): add mobile app with Expo/React Native and Laravel API endpoints

app/Http/Controllers/Api/AuthController.php

@@ -0,0 +1,124 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Validation\ValidationException;
+
+class AuthController extends Controller
+{
+    public function login(Request $request)
+    {
+        $request->validate([
+            'email' => 'required|email',
+            'password' => 'required',
+            'device_name' => 'nullable|string',
+        ]);
+
+        $user = User::where('email', $request->email)->first();
+
+        if (!$user || !Hash::check($request->password, $user->password)) {
+            return response()->json([
+                'success' => false,
+                'data' => null,
+                'message' => 'Invalid email or password',
+                'errors' => ['email' => ['Invalid email or password']],
+            ], 401);
+        }
+
+        if ($user->is_enable_login == 0 || $user->status === 'inactive') {
+            return response()->json([
+                'success' => false,
+                'data' => null,
+                'message' => 'Your account login is disabled',
+                'errors' => null,
+            ], 403);
+        }
+
+        $deviceName = $request->device_name ?? 'mobile_app';
+        $token = $user->createToken($deviceName)->plainTextToken;
+
+        return response()->json([
+            'success' => true,
+            'token' => $token,
+            'user' => $user->load('employee'),
+            'data' => [
+                'token' => $token,
+                'user' => $user,
+            ],
+            'message' => 'Login successful',
+            'errors' => null,
+        ]);
+    }
+
+    public function logout(Request $request)
+    {
+        if ($request->user() && $request->user()->currentAccessToken()) {
+            $request->user()->currentAccessToken()->delete();
+        }
+
+        return response()->json([
+            'success' => true,
+            'data' => null,
+            'message' => 'Successfully logged out',
+            'errors' => null,
+        ]);
+    }
+
+    public function user(Request $request)
+    {
+        $user = $request->user()->load('employee');
+
+        return response()->json([
+            'success' => true,
+            'user' => $user,
+            'data' => [
+                'id' => $user->id,
+                'name' => $user->name,
+                'email' => $user->email,
+                'user' => $user,
+                'employee' => $user->employee,
+            ],
+            'message' => null,
+            'errors' => null,
+        ]);
+    }
+
+    public function updateProfile(Request $request)
+    {
+        $user = $request->user();
+
+        $request->validate([
+            'name' => 'nullable|string|max:255',
+            'email' => 'nullable|email|unique:users,email,' . $user->id,
+            'avatar' => 'nullable|image|mimes:jpeg,png,jpg,webp|max:5120',
+        ]);
+
+        if ($request->filled('name')) {
+            $user->name = $request->name;
+        }
+
+        if ($request->filled('email')) {
+            $user->email = $request->email;
+        }
+
+        if ($request->hasFile('avatar')) {
+            $avatarPath = $request->file('avatar')->store('avatars', 'public');
+            $user->avatar = asset('storage/' . $avatarPath);
+        }
+
+        $user->save();
+
+        return response()->json([
+            'success' => true,
+            'message' => 'Profile updated successfully',
+            'user' => $user->fresh('employee'),
+            'data' => $user->fresh('employee'),
+            'errors' => null,
+        ]);
+    }
+}