email_verification

Author: EmanElhelaly11

README.md

@@ -29,7 +29,6 @@
 ```bash
   composer install
   php artisan key:generate
-
 ```
 4- Run database migrations
 

app/Http/Controllers/Api/Auth/EmailVerificationController.php

@@ -0,0 +1,63 @@
+<?php
+
+namespace App\Http\Controllers\Api\Auth;
+
+use App\Traits\ApiTrait;
+use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
+use Illuminate\Support\Facades\Auth;
+use App\Http\Requests\Auth\CodeRequest;
+use App\Mail\VerificationCode;
+use App\Models\User;
+use Illuminate\Support\Facades\Mail;
+
+class EmailVerificationController extends Controller
+{
+    public function send(Request $request)
+    {
+        $user = Auth::guard('sanctum')->user();
+        $token = $request->header('Authorization');
+        $code = rand(1000, 9999); // Generate a 4-digit code
+        $user->code = $code;
+        $user->code_expired_at = now()->addMinutes(config('auth.code_timeout'));
+        $user->save();
+
+        try {
+            Mail::to($user)->send(new VerificationCode($user));
+        } catch (\Exception $e) {
+            return ApiTrait::errorMessage(['mail' => $e->getMessage()], 'Please Try Again Later');
+        }
+
+        // Remove "Bearer" prefix from token
+        $token = str_replace('Bearer ', '', $token);
+
+        $user->token = $token;
+
+        return ApiTrait::data(['data' => ['user' => $user]], "Mail Sent Successfully", 200);
+    }
+
+    public function verify(CodeRequest $request)
+    {
+        $user = Auth::guard('sanctum')->user();
+        $token = $request->header('Authorization');
+        $now = now();
+        
+        if ($user->code != $request->code) {
+            return ApiTrait::errorMessage(['code' => 'Wrong Code'], "Invalid Code", 422);
+        }
+        
+        if ($now > $user->code_expired_at) {
+            return ApiTrait::errorMessage(['code' => 'Expired Code'], "Invalid Code", 422);
+        }
+        
+        $user->email_verified_at = $now;
+        $user->save();
+        $token = str_replace('Bearer ', '', $token);
+
+        $user->token = $token;
+        
+        return ApiTrait::data(['data' => ['user' => $user]], "Correct Code", 200);
+    }
+}
+
+

app/Http/Requests/Auth/CodeRequest.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Http\Requests\Auth;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class CodeRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     *
+     * @return bool
+     */
+    public function authorize()
+    {
+        return true;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, mixed>
+     */
+    public function rules()
+    {
+        return [
+            'code'=>['required','numeric','digits:4','exists:users']
+        ];
+    }
+}

app/Mail/VerificationCode.php

@@ -0,0 +1,62 @@
+<?php
+
+namespace App\Mail;
+
+use App\Models\User;
+use Illuminate\Bus\Queueable;
+use Illuminate\Contracts\Queue\ShouldQueue;
+use Illuminate\Mail\Mailable;
+use Illuminate\Mail\Mailables\Address;
+use Illuminate\Mail\Mailables\Content;
+use Illuminate\Mail\Mailables\Envelope;
+use Illuminate\Queue\SerializesModels;
+
+class VerificationCode extends Mailable
+{
+    use Queueable, SerializesModels;
+
+    /**
+     * Create a new message instance.
+     *
+     * @return void
+     */
+    public function __construct(public User $user)
+    {
+        
+    }
+
+    /**
+     * Get the message envelope.
+     *
+     * @return \Illuminate\Mail\Mailables\Envelope
+     */
+    public function envelope()
+    {
+        return new Envelope(
+            from: new Address('[email protected]', 'CodeLink Support'),
+            subject: 'CodeLink | Verification Code',
+        );
+    }
+
+    /**
+     * Get the message content definition.
+     *
+     * @return \Illuminate\Mail\Mailables\Content
+     */
+    public function content()
+    {
+        return new Content(
+            view: 'mails.VerificationCode',
+        );
+    }
+
+    /**
+     * Get the attachments for the message.
+     *
+     * @return array
+     */
+    public function attachments()
+    {
+        return [];
+    }
+}

app/Traits/ApiTrait.php

@@ -7,7 +7,7 @@ trait ApiTrait{
     public static function successMessage(string $message="",int $statusCode = 200)
     {
         return response()->json([
-            'success'=>true,
+            'result'=>true,
             'message'=>$message,
             'data'=>(object)[],
             'errors'=>(object)[]
@@ -17,7 +17,7 @@ public static function successMessage(string $message="",int $statusCode = 200)
     public static function errorMessage(array $errors,string$message="",int $statusCode = 422)
     {
         return response()->json([
-            'success'=>false,
+            'result'=>false,
             'message'=>$message,
             'data'=>(object)[],
             'errors'=>(object)$errors
@@ -28,7 +28,7 @@ public static function errorMessage(array $errors,string$message="",int $statusC
     public static function data(array $data,string $message = "",int $statusCode = 200)
     {
         return response()->json([
-            'success'=>true,
+            'result'=>true,
             'message'=>$message,
             'data'=>(object)$data,
             'errors'=>(object)[]

config/auth.php

@@ -107,5 +107,5 @@
     */
 
     'password_timeout' => 10800,
-
+    'code_timeout'=>600
 ];

config/sanctum.php

@@ -26,7 +26,7 @@
     |
     | This array contains the authentication guards that will be checked when
     | Sanctum is trying to authenticate a request. If none of these guards
-    | are able to authenticate the request, Sanctum will use the bearer
+    | are able to authenticate the request, Sanctum will use the er
     | token that's present on an incoming request for authentication.
     |
     */

database/migrations/2014_10_12_000000_create_users_table.php

@@ -17,6 +17,8 @@ public function up()
             $table->id();
             $table->string('name');
             $table->string('email')->unique();
+            $table->integer('code')->nullable();
+            $table->timestamp('code_expired_at')->nullable();
             $table->timestamp('email_verified_at')->nullable();
             $table->string('password');
             $table->rememberToken();

resources/views/mails/VerificationCode.blade.php

@@ -0,0 +1,28 @@
+<!DOCTYPE html>
+<html lang="en" xmlns="http://www.w3.org/1999/xhtml">
+
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>CodeLink | Verification Code</title>
+</head>
+
+<body style="margin: 0; padding: 0; font-family: Arial, sans-serif; background-color: #f4f4f4;">
+
+    <div style="max-width: 600px; margin: 0 auto; padding: 20px; background-color: #ffffff;">
+
+        <h3 style="font-size: 24px; color: #333;">Hello {{ $user->name }},</h3>
+
+        <p style="font-size: 16px; color: #666;">Your Verification Code: <strong>{{ $user->code }}</strong></p>
+
+        <p style="font-size: 16px; color: #666;">
+            It will expire after {{ config('auth.code_timeout')/60 }} minutes</strong>
+        </p>
+
+        <p style="font-size: 16px; color: #666;">Thank you!</p>
+
+    </div>
+
+</body>
+
+</html>

routes/api.php

@@ -4,6 +4,8 @@
 use Illuminate\Support\Facades\Route;
 use App\Http\Controllers\Api\Auth\LoginController;
 use App\Http\Controllers\Api\Auth\SignupController;
+use App\Http\Controllers\Api\Auth\ResetPasswordController;
+use App\Http\Controllers\Api\Auth\EmailVerificationController;
 
 /*
 |--------------------------------------------------------------------------
@@ -20,9 +22,16 @@
     return $request->user();
 });
 
+
 Route::prefix('user')->group(function () {
     Route::post('/signup', SignupController::class);  // guest
 
+    Route::group(['controller' => EmailVerificationController::class, 'middleware' => 'auth:sanctum'], function () {
+        Route::get('/send-mail', 'send'); //auth
+        Route::post('/check-code', 'verify'); //auth
+    });
+
+
     Route::controller(LoginController::class)->group(function () {
         Route::middleware('auth:sanctum')->group(function () {
             Route::get('/logout', 'logout'); //auth