68 lines
2.3 KiB
PHP
68 lines
2.3 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Enums\InstallationStatus;
|
|
use App\Models\ApplicationInstallation;
|
|
use App\Models\User;
|
|
use Illuminate\Http\RedirectResponse;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Illuminate\View\View;
|
|
|
|
class PlatformAuthController extends Controller
|
|
{
|
|
public function showLogin(Request $request): View|RedirectResponse
|
|
{
|
|
if ($request->user()?->isSuperAdmin) {
|
|
return redirect()->route('manager.dashboard');
|
|
}
|
|
|
|
if (! ApplicationInstallation::query()->where('status', InstallationStatus::Installed)->exists()) {
|
|
return redirect()->route('install');
|
|
}
|
|
|
|
return view('auth.platform-sign-in');
|
|
}
|
|
|
|
public function login(Request $request): RedirectResponse
|
|
{
|
|
$credentials = $request->validate([
|
|
'email' => ['required', 'email', 'max:190'],
|
|
'password' => ['required', 'string'],
|
|
]);
|
|
|
|
if (! Auth::attempt($credentials, $request->boolean('remember'))) {
|
|
Auth::logout();
|
|
|
|
return back()->withErrors(['email' => 'Those platform administrator details do not match our records.'])->onlyInput('email');
|
|
}
|
|
|
|
$user = $request->user();
|
|
if (! $user?->isSuperAdmin) {
|
|
$installation = ApplicationInstallation::query()
|
|
->where('status', InstallationStatus::Installed)
|
|
->first();
|
|
|
|
$canUpgradeLegacyAdmin = ! User::query()->where('isSuperAdmin', true)->exists()
|
|
&& $installation?->initialAdminUserId === $user?->id;
|
|
|
|
if (! $canUpgradeLegacyAdmin) {
|
|
Auth::logout();
|
|
|
|
return back()->withErrors(['email' => 'Those platform administrator details do not match our records.'])->onlyInput('email');
|
|
}
|
|
|
|
// Existing installations created before platform administration
|
|
// was separated may have only an initial business owner. Promote
|
|
// that exact recorded account once so the migration is usable.
|
|
$user->forceFill(['isSuperAdmin' => true])->save();
|
|
Auth::setUser($user->fresh());
|
|
}
|
|
|
|
$request->session()->regenerate();
|
|
|
|
return redirect()->intended(route('manager.dashboard'));
|
|
}
|
|
}
|