profile dan lahan

This commit is contained in:
2026-04-13 11:53:45 +07:00
parent 502c3be5bf
commit 298c591a20
7 changed files with 196 additions and 65 deletions
+115 -9
View File
@@ -4,12 +4,16 @@ namespace App\Http\Controllers\Api;
use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use App\Models\Profile;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\DB;
use Illuminate\Http\JsonResponse;
use Symfony\Component\HttpFoundation\BinaryFileResponse;
use Illuminate\Support\Facades\Gate;
use Illuminate\Validation\Rule;
use Illuminate\Support\Facades\Hash;
use App\Models\Profile;
use App\Models\User;
use App\Http\Resources\ProfileResource;
class ProfileController extends Controller
@@ -17,9 +21,56 @@ class ProfileController extends Controller
/**
* Display a listing of the resource.
*/
public function index()
public function index(Request $request)
{
//
Gate::authorize('fasilitator');
$user = Auth::user();
$profile = $user->profile;
$desaKelurahanId = null;
if ($profile->role === 'fasilitator') {
$desaKelurahanId = $profile->desa_kelurahan_id;
}
$size = $request->integer('size') ?: 10;
$listProfile = Profile::when($request->search, function ($q, $search) {
$search = strtolower($search);
$q->whereRaw('lower(nama) like ?', ["%{$search}%"]);
})
->when($desaKelurahanId ?? $request->desa_kelurahan_id, fn($q,$v) => $q->where('desa_kelurahan_id',$v))
->when($request->kecamatan_id, fn ($q, $v) =>
$q->whereHas('desaKelurahan', fn ($k) =>
$k->where('kecamatan_id', $v)
)
)
->when($request->kabupaten_kota_id, fn ($q, $v) =>
$q->whereHas('desaKelurahan.kecamatan', fn ($k) =>
$k->where('kabupaten_kota_id', $v)
)
)
->when($request->provinsi_id, fn ($q, $v) =>
$q->whereHas('desaKelurahan.kecamatan.kabupatenKota', fn ($k) =>
$k->where('provinsi_id', $v)
)
);
if ($request->filled('sort')) {
$dir = str_starts_with($request->sort, '-') ? 'desc' : 'asc';
$column = ltrim($request->sort, '-');
$allowed = ['id', 'nama'];
if (in_array($column, $allowed)) {
$listProfile->orderBy($column, $dir);
}
} else {
$listProfile->orderBy('nama', 'asc');
}
$listProfile = $listProfile->paginate($size);
return ProfileResource::collection($listProfile);
}
/**
@@ -35,7 +86,40 @@ class ProfileController extends Controller
*/
public function store(Request $request)
{
//
Gate::authorize('fasilitator');
$validated = $request->validate([
'nama' => ['required', 'string', 'max:255'],
'email' => ['required', 'email', 'max:255', 'unique:users,email'],
'telepon' => ['nullable', 'string'],
'alamat' => ['nullable', 'string'],
'kk' => ['nullable', 'string'],
'ktp' => ['nullable', 'string'],
'file_kk' => ['nullable', 'file', 'mimes:jpg,jpeg,png,pdf', 'max:2048'],
'file_ktp' => ['nullable', 'file', 'mimes:jpg,jpeg,png,pdf', 'max:2048'],
'desa_kelurahan_id' => ['nullable', 'exists:master_desa_kelurahan,id'],
]);
$user = User::create([
'name' => $validated['nama'],
'email' => $validated['email'],
'password' => Hash::make('password123'), // Set default password or generate random
'role' => 'petani',
'email_verified_at' => now(),
'created_by' => Auth::id(),
'updated_by' => Auth::id(),
]);
$profile = Profile::create([
...$validated,
'user_id' => $user->id,
'created_by' => Auth::id(),
'updated_by' => Auth::id(),
]);
return (new ProfileResource($profile))
->response()
->setStatusCode(201);
}
/**
@@ -43,6 +127,10 @@ class ProfileController extends Controller
*/
public function show(string $id): JSONResponse
{
if (!Gate::any(['petani', 'fasilitator'])) {
abort(403);
}
$profile = Profile::with('desaKelurahan')->where('user_id', Auth::id())->first();
return response()->json(new ProfileResource($profile));
}
@@ -60,9 +148,26 @@ class ProfileController extends Controller
*/
public function update(Request $request, string $id): JSONResponse
{
if (!Gate::any(['petani', 'fasilitator'])) {
abort(403);
}
$user = Auth::user();
if ($user->role === 'petani' && $user->profile->id != $id) {
abort(403, 'Unauthorized');
}
$profile = Profile::findOrFail($id);
if ($user->role === 'fasilitator' && $profile->desa_kelurahan_id != $user->profile->desa_kelurahan_id) {
abort(403, 'Unauthorized');
}
$emailRule = Rule::unique('users', 'email')->ignore($profile->user_id);
$validated = $request->validate([
'nama' => ['required', 'string', 'max:255'],
'email' => ['required', 'email', 'max:255', 'unique:users,email,' . Auth::id()],
'email' => ['required', 'email', 'max:255', $emailRule],
'telepon' => ['nullable', 'string'],
'alamat' => ['nullable', 'string'],
'kk' => ['nullable', 'string'],
@@ -72,8 +177,6 @@ class ProfileController extends Controller
'desa_kelurahan_id' => ['nullable', 'exists:master_desa_kelurahan,id'],
]);
$profile = Profile::where('user_id', Auth::id())->first();
if ($request->hasFile('file_kk')) {
$validated['file_kk'] = $request->file('file_kk')->getClientOriginalName();
$kkPath = $request->file('file_kk')->store('uploads/profile/' . $profile->id, 'public');
@@ -84,9 +187,8 @@ class ProfileController extends Controller
$ktpPath = $request->file('file_ktp')->store('uploads/profile/' . $profile->id, 'public');
$validated['path_ktp'] = $ktpPath;
}
$validated['updated_by'] = Auth::id();
$user = Auth::user();
$validated['updated_by'] = $user->id();
DB::transaction(function () use ($profile, $user, $validated) {
$profile->update($validated);
@@ -110,6 +212,10 @@ class ProfileController extends Controller
public function downloadFile(string $id, string $type): JsonResponse | BinaryFileResponse
{
if (!Gate::any(['petani', 'fasilitator'])) {
abort(403);
}
$profile = Profile::where('user_id', Auth::id())->first();
if (!$profile) {