[feat AuthController, update UserController, User.php, EditAkun, Web.php

app/Http/Controllers/AuthController.php

@@ -0,0 +1,45 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use App\Models\User;
+
+class AuthController extends Controller
+{
+
+    public function login(Request $request)
+    {
+        $request->validate([
+            'nama' => 'required|string',
+            'password' => 'required|int',
+        ]);
+
+        // Cek kredensial
+        if (!Auth::attempt($request->only('nama', 'password'))) {
+            return response()->json([
+                'message' => 'Login gagal, periksa kembali nama atau password.'
+            ], 401);
+        }
+
+        $user = User::where('nama', $request->nama)->first();
+
+        $token = $user->createToken('auth_token')->plainTextToken;
+
+        return response()->json([
+            'message' => 'Login berhasil',
+            'user' => $user,
+            'token' => $token,
+        ]);
+    }
+
+    public function logout(Request $request)
+    {
+        $request->user()->currentAccessToken()->delete();
+
+        return response()->json([
+            'message' => 'Logout berhasil'
+        ]);
+    }
+}

app/Http/Controllers/UserController.php

@@ -41,22 +41,26 @@ class UserController extends Controller
         $user = User::findOrFail($id);
 
         $request->validate([
-            'nama'    => 'required|nama|unique:users,nama,' . $id,
-            'password' => 'required|min:6',
+            'nama'    => 'required|string|unique:users,nama,' . $id,
+            'password' => 'nullable|min:6',
             'role'     => 'required|in:owner,kasir',
         ]);
 
-        $user->update([
+        $data = [
             'nama' => $request->nama,
-            'password'    => $request->password,
             'role' => $request->role,
-        ]);
+        ];
 
-        return response()->json([
-            'message' => 'User berhasil diupdate'
-        ],200);
+        if ($request->filled('password')) {
+            $data['password'] = $request->password; 
         }
 
+        $user->update($data);
+
+        return response()->json(['message' => 'User berhasil diupdate', 'user' => $user], 200);
+    }
+
+
     public function destroy($id)
     {
         $user = User::findOrFail($id);

app/Models/User.php

@@ -6,11 +6,12 @@ namespace App\Models;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
+use Laravel\Sanctum\HasApiTokens;
 
 class User extends Authenticatable
 {
     /** @use HasFactory<\Database\Factories\UserFactory> */
-    use HasFactory, Notifiable;
+    use  HasApiTokens, HasFactory, Notifiable;
 
     /**
      * The attributes that are mass assignable.
@@ -45,4 +46,9 @@ class User extends Authenticatable
             'password' => 'hashed',
         ];
     }
+
+    public function getAuthIdentifierName()
+    {
+        return 'nama';
+    }
 }

composer.lock

@@ -9377,12 +9377,12 @@
     ],
     "aliases": [],
     "minimum-stability": "stable",
-    "stability-flags": {},
+    "stability-flags": [],
     "prefer-stable": true,
     "prefer-lowest": false,
     "platform": {
         "php": "^8.2"
     },
-    "platform-dev": {},
+    "platform-dev": [],
     "plugin-api-version": "2.6.0"
 }

resources/js/components/EditAkun.vue

@@ -101,7 +101,7 @@
           const payload = { ...this.form };
           if (!payload.password) delete payload.password;
 
-          await axios.put(`api/user/${this.akun.id}`, payload);
+          await axios.put(`/api/user/${this.akun.id}`, payload);
 
           this.$emit("refresh");
           this.$emit("close");

routes/web.php

@@ -1,17 +1,18 @@
-<?php
+    <?php
 
-use App\Http\Controllers\FotoSementaraController;
-use App\Http\Controllers\ItemController;
-use App\Http\Controllers\KategoriController;
-use App\Http\Controllers\NampanController;
-use App\Http\Controllers\ProdukController;
-use App\Http\Controllers\SalesController;
-use App\Http\Controllers\UserController;
-use App\Http\Controllers\TransaksiController;
-use Illuminate\Support\Facades\Route;
+    use App\Http\Controllers\AuthController;
+    use App\Http\Controllers\FotoSementaraController;
+    use App\Http\Controllers\ItemController;
+    use App\Http\Controllers\KategoriController;
+    use App\Http\Controllers\NampanController;
+    use App\Http\Controllers\ProdukController;
+    use App\Http\Controllers\SalesController;
+    use App\Http\Controllers\UserController;
+    use App\Http\Controllers\TransaksiController;
+    use Illuminate\Support\Facades\Route;
 
-// Backend API
-Route::prefix('api')->group(function () {
+    Route::prefix('api')->group(function () {
+    // Backend API
         Route::apiResource('nampan', NampanController::class);
         Route::apiResource('produk', ProdukController::class);
         Route::apiResource('item', ItemController::class);
@@ -28,9 +29,12 @@ Route::prefix('api')->group(function () {
         Route::delete('foto/hapus/{id}', [FotoSementaraController::class, 'hapus']);
         Route::get('foto/{user_id}', [FotoSementaraController::class, 'getAll']);
         Route::delete('foto/reset/{user_id}', [FotoSementaraController::class, 'reset']);
-});
 
-// Frontend SPA
-Route::get('/{any}', function () {
+        Route::post('/login',  [AuthController::class, 'login'])->middleware('guest')->name('login');
+        Route::post('/logout',  [AuthController::class, 'logout'])->middleware('auth');
+    });
+
+    // Frontend SPA
+    Route::get('/{any}', function () {
         return view('app');
-})->where('any', '^(?!storage|api).*$');
+    })->where('any', '^(?!storage|api).*$');