admin
dc297d4cd7
Closes Module 1: 9 auth endpoints under /api/v1/auth, OTP via SMS (Semaphore + log + fake drivers), role middleware, role + admin seeders, 27 feature tests passing. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
35 lines
1.0 KiB
PHP
35 lines
1.0 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api\V1\Auth;
|
|
|
|
use App\Http\Controllers\Api\V1\ApiController;
|
|
use App\Http\Requests\Auth\ForgotPasswordRequest;
|
|
use App\Models\OtpCode;
|
|
use App\Models\User;
|
|
use App\Services\Otp\OtpService;
|
|
use Illuminate\Http\JsonResponse;
|
|
|
|
class ForgotPasswordController extends ApiController
|
|
{
|
|
public function __invoke(ForgotPasswordRequest $request, OtpService $otp): JsonResponse
|
|
{
|
|
$phone = $request->validated('phone');
|
|
$user = User::where('phone', $phone)->first();
|
|
|
|
$debugCode = null;
|
|
if ($user) {
|
|
$issue = $otp->issue(
|
|
destination: $phone,
|
|
purpose: OtpCode::PURPOSE_PASSWORD_RESET,
|
|
user: $user,
|
|
);
|
|
$debugCode = $issue->plainCode;
|
|
}
|
|
|
|
return $this->ok([
|
|
'otp_destination' => $phone,
|
|
'debug_code' => app()->environment('local', 'testing') ? $debugCode : null,
|
|
], 'If an account exists for that phone, a reset code has been sent.');
|
|
}
|
|
}
|