refinement registrasi-verifikasi role & rbac

app/Http/Controllers/Api/Konfigurasi/AuthController.php

@@ -13,7 +13,7 @@ use App\Http\Resources\UserResource;
 
 class AuthController extends Controller
 {
-    public function login(Request $request): JSONResponse
+    public function login(Request $request): JsonResponse
     {
         $credentials = $request->validate([
             'email' => ['required', 'email'],
@@ -27,6 +27,13 @@ class AuthController extends Controller
         }
 
         $user = Auth::user();
+
+        if ($user->status === 'pending') {
+            return response()->json([
+                'message' => 'Akun Anda masih berstatus pending. Silakan tunggu verifikasi dari Super Admin.'
+            ], 403); 
+        }
+
         $user->tokens()->delete();
 
         $token = $user->createToken('mobile-token')->plainTextToken;
@@ -37,14 +44,13 @@ class AuthController extends Controller
         ]);
     }
 
-    public function signup(Request $request): JSONResponse
+    public function signup(Request $request): JsonResponse
     {
         $credentials = $request->validate([
             'name' => ['required', 'string', 'max:255'],
             'email' => ['required', 'email', 'max:255', 'unique:users'],
             'password' => ['required', 'string', 'min:8', 'confirmed'],
             'username' => ['required', 'string', 'max:255'],
-            'role' => ['string'],
             'uid' => ['required','string', 'unique:users'],
         ]);
 
@@ -53,35 +59,27 @@ class AuthController extends Controller
             'email' => $credentials['email'],
             'password' => Hash::make($credentials['password']),
             'username' => $credentials['username'],
-            'role' => $credentials['role'],
             'uid' => $credentials['uid'],
+            'role' => null, 
+            'status' => 'pending', 
         ]);
 
         $profile = Profile::create([
             'nama' => $credentials['name'],
             'email' => $credentials['email'],
-            'role' => $credentials['role'],
             'user_uid' => $credentials['uid'],
             'user_id' => $user->id,
             'created_by' => $user->id,
             'updated_by' => $user->id,
+            
+            
+            'role' => null, 
         ]);
 
-        if (!Auth::attempt($credentials)) {
-            return response()->json([
-                'message' => 'Email dan/atau password tidak sesuai'
-            ], 401);
-        }
-
-        $user = Auth::user();
-        $user->tokens()->delete();
-
-        $token = $user->createToken('mobile-token')->plainTextToken;
-
+      
         return response()->json([
-            'access_token' => $token,
-            'token_type' => 'Bearer',
-        ]);
+            'message' => 'Registrasi berhasil. Akun Anda berstatus pending dan sedang menunggu verifikasi Super Admin.'
+        ], 201); 
     }
 
     public function me(Request $request): JSONResponse