feat: basic auth

NikarashiHatsu · NikarashiHatsu · commit 187fcf10126b · 2022-01-23T13:09:03.000+07:00
diff --git a/app/Config/App.php b/app/Config/App.php
@@ -36,7 +36,7 @@ class App extends BaseConfig
      *
      * @var string
      */
-    public $indexPage = 'index.php';
+    public $indexPage = '';
 
     /**
      * --------------------------------------------------------------------------
@@ -55,7 +55,7 @@ class App extends BaseConfig
      *
      * @var string
      */
-    public $uriProtocol = 'REQUEST_URI';
+    public $uriProtocol = 'PATH_INFO';
 
     /**
      * --------------------------------------------------------------------------
diff --git a/app/Config/Filters.php b/app/Config/Filters.php
@@ -2,6 +2,7 @@
 
 namespace Config;
 
+use App\Filters\AuthenticationFilter;
 use CodeIgniter\Config\BaseConfig;
 use CodeIgniter\Filters\CSRF;
 use CodeIgniter\Filters\DebugToolbar;
@@ -19,6 +20,7 @@ class Filters extends BaseConfig
         'csrf'     => CSRF::class,
         'toolbar'  => DebugToolbar::class,
         'honeypot' => Honeypot::class,
+        'auth'     => AuthenticationFilter::class,
     ];
 
     /**
diff --git a/app/Config/Routes.php b/app/Config/Routes.php
@@ -21,7 +21,7 @@
 $routes->setDefaultMethod('index');
 $routes->setTranslateURIDashes(false);
 $routes->set404Override();
-$routes->setAutoRoute(true);
+$routes->setAutoRoute(false);
 
 /*
  * --------------------------------------------------------------------
@@ -33,6 +33,16 @@
 // route since we don't have to scan directories.
 $routes->get('/', 'Home::index');
 
+$routes->get('/login', 'Auth\LoginController::index');
+$routes->post('/login', 'Auth\LoginController::auth');
+$routes->get('/register', 'Auth\RegisterController::index');
+$routes->post('/register', 'Auth\RegisterController::register');
+$routes->post('/logout', 'Auth\LogoutController::logout');
+
+$routes->group('dashboard', ['filter' => 'auth'], function ($routes) {
+    $routes->get('/', 'DashboardController::index');
+});
+
 /*
  * --------------------------------------------------------------------
  * Additional Routing
diff --git a/app/Config/Validation.php b/app/Config/Validation.php
@@ -40,4 +40,15 @@ class Validation
     //--------------------------------------------------------------------
     // Rules
     //--------------------------------------------------------------------
+    public $register = [
+        'name' => 'required|min_length[6]|max_length[255]',
+        'username' => 'required|min_length[6]|max_length[255]',
+        'password' => 'required|min_length[6]|max_length[255]',
+        'password_confirmation' => 'required|min_length[6]|max_length[255]|matches[password]',
+    ];
+
+    public $login = [
+        'username' => 'required|min_length[6]|max_length[255]',
+        'password' => 'required|min_length[6]|max_length[255]',
+    ];
 }
diff --git a/app/Controllers/Auth/LoginController.php b/app/Controllers/Auth/LoginController.php
@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Controllers\Auth;
+
+use App\Controllers\BaseController;
+use App\Services\Auth\LogInUser;
+use Config\Services;
+
+class LoginController extends BaseController
+{
+    public function index()
+    {
+        return view('auth/login');
+    }
+
+    public function auth()
+    {
+        $validator = Services::validation();
+        $validator->run($this->request->getPost(), 'login');
+
+        if ($validator->getErrors()) {
+            return redirect()->back()->with('errors', $validator->getErrors());
+        }
+
+        try {
+            new LogInUser($this->request);
+        } catch (\Throwable $th) {
+            return redirect()->back()->with('error', 'An error has occured: ' . $th->getMessage());
+        }
+
+        return redirect()->to('/dashboard')->with('success', 'You have successfully logged in.');
+    }
+}
diff --git a/app/Controllers/Auth/LogoutController.php b/app/Controllers/Auth/LogoutController.php
@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Controllers\Auth;
+
+use App\Controllers\BaseController;
+use App\Services\Auth\LogOutUser;
+
+class LogoutController extends BaseController
+{
+    public function logout()
+    {
+        try {
+            new LogOutUser();
+        } catch (\Throwable $th) {
+            return redirect()->back()->with('error', 'An error occured: ' . $th->getMessage());
+        }
+
+        return redirect()->to('/login')->with('success', 'Logged out successfully.');
+    }
+}
diff --git a/app/Controllers/Auth/RegisterController.php b/app/Controllers/Auth/RegisterController.php
@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Controllers\Auth;
+
+use App\Controllers\BaseController;
+use App\Services\Auth\RegisterUser;
+use CodeIgniter\Config\Services;
+
+class RegisterController extends BaseController
+{
+    public function index()
+    {
+        return view('auth/register');
+    }
+
+    public function register()
+    {
+        $validator = Services::validation();
+        $validator->run($this->request->getPost(), 'register');
+
+        if ($validator->getErrors()) {
+            return redirect()->back()->with('errors', $validator->getErrors());
+        }
+
+        try {
+            new RegisterUser($this->request->getPost());
+        } catch (\Throwable $th) {
+            return redirect()->back()->with('error', 'An error has occured: ' . $th->getMessage());
+        }
+
+        return redirect()->to('/login')->with('success', 'You have successfully registered. Please login.');
+    }
+}
diff --git a/app/Controllers/DashboardController.php b/app/Controllers/DashboardController.php
@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Controllers;
+
+use App\Controllers\BaseController;
+
+class DashboardController extends BaseController
+{
+    public function index()
+    {
+        return view('dashboard/index');
+    }
+}
diff --git a/app/Database/Migrations/2022-01-23-045400_CreateUsersTable.php b/app/Database/Migrations/2022-01-23-045400_CreateUsersTable.php
@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Database\Migrations;
+
+use CodeIgniter\Database\Migration;
+
+class CreateUsersTable extends Migration
+{
+    public function up()
+    {
+        $this->forge->addField([
+            'id INT(11) PRIMARY KEY AUTO_INCREMENT',
+            'name VARCHAR(255) NOT NULL',
+            'username VARCHAR(255) NOT NULL',
+            'password VARCHAR(255) NOT NULL',
+            'role VARCHAR(255) NOT NULL DEFAULT "user"',
+            'created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP()',
+            'updated_at TIMESTAMP NULL ON UPDATE CURRENT_TIMESTAMP()',
+        ]);
+
+        $this->forge->createTable('users');
+    }
+
+    public function down()
+    {
+        $this->forge->dropTable('users');
+    }
+}
diff --git a/app/Filters/AuthenticationFilter.php b/app/Filters/AuthenticationFilter.php
@@ -0,0 +1,49 @@
+<?php
+
+namespace App\Filters;
+
+use CodeIgniter\Filters\FilterInterface;
+use CodeIgniter\HTTP\RequestInterface;
+use CodeIgniter\HTTP\ResponseInterface;
+
+class AuthenticationFilter implements FilterInterface
+{
+    /**
+     * Do whatever processing this filter needs to do.
+     * By default it should not return anything during
+     * normal execution. However, when an abnormal state
+     * is found, it should return an instance of
+     * CodeIgniter\HTTP\Response. If it does, script
+     * execution will end and that Response will be
+     * sent back to the client, allowing for error pages,
+     * redirects, etc.
+     *
+     * @param RequestInterface $request
+     * @param array|null       $arguments
+     *
+     * @return mixed
+     */
+    public function before(RequestInterface $request, $arguments = null)
+    {
+        if (!session()->user) {
+            return redirect()->to('/login')->with('error', 'You have to be logged in.');
+        }
+    }
+
+    /**
+     * Allows After filters to inspect and modify the response
+     * object as needed. This method does not allow any way
+     * to stop execution of other after filters, short of
+     * throwing an Exception or Error.
+     *
+     * @param RequestInterface  $request
+     * @param ResponseInterface $response
+     * @param array|null        $arguments
+     *
+     * @return mixed
+     */
+    public function after(RequestInterface $request, ResponseInterface $response, $arguments = null)
+    {
+        //
+    }
+}
diff --git a/app/Models/User.php b/app/Models/User.php
@@ -0,0 +1,46 @@
+<?php
+
+namespace App\Models;
+
+use CodeIgniter\Model;
+
+class User extends Model
+{
+    protected $DBGroup              = 'default';
+    protected $table                = 'users';
+    protected $primaryKey           = 'id';
+    protected $useAutoIncrement     = true;
+    protected $insertID             = 0;
+    protected $returnType           = 'object';
+    protected $useSoftDeletes       = false;
+    protected $protectFields        = true;
+    protected $allowedFields        = [
+        'name',
+        'username',
+        'password',
+    ];
+
+    // Dates
+    protected $useTimestamps        = false;
+    protected $dateFormat           = 'datetime';
+    protected $createdField         = 'created_at';
+    protected $updatedField         = 'updated_at';
+    protected $deletedField         = 'deleted_at';
+
+    // Validation
+    protected $validationRules      = [];
+    protected $validationMessages   = [];
+    protected $skipValidation       = false;
+    protected $cleanValidationRules = true;
+
+    // Callbacks
+    protected $allowCallbacks       = true;
+    protected $beforeInsert         = [];
+    protected $afterInsert          = [];
+    protected $beforeUpdate         = [];
+    protected $afterUpdate          = [];
+    protected $beforeFind           = [];
+    protected $afterFind            = [];
+    protected $beforeDelete         = [];
+    protected $afterDelete          = [];
+}
diff --git a/app/Services/Auth/LogInUser.php b/app/Services/Auth/LogInUser.php
@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Services\Auth;
+
+use App\Models\User;
+use CodeIgniter\HTTP\IncomingRequest;
+
+class LogInUser {
+    public function __construct(IncomingRequest $request, $username = 'username')
+    {
+        $user = new User();
+        $user = $user->where($username, $request->getPost($username));
+
+        if ($user->countAll() == 0) {
+            throw new \Exception('User not found.');
+        }
+
+        $user = $user->asObject()->first();
+        unset($user->password);
+
+        session()->set('user', $user);
+    }
+}
diff --git a/app/Services/Auth/LogOutUser.php b/app/Services/Auth/LogOutUser.php
@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Services\Auth;
+
+class LogOutUser {
+    public function __construct()
+    {
+        session()->destroy('user');
+    }
+}
diff --git a/app/Services/Auth/RegisterUser.php b/app/Services/Auth/RegisterUser.php
@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Services\Auth;
+
+use App\Models\User;
+
+class RegisterUser {
+    public function __construct($request)
+    {
+        $user = new User;
+        $user->insert([
+            'name' => $request['name'],
+            'username' => $request['username'],
+            'password' => password_hash($request['password'], PASSWORD_DEFAULT),
+        ]);
+    }
+}
diff --git a/app/Views/auth/login.php b/app/Views/auth/login.php
diff --git a/app/Views/auth/register.php b/app/Views/auth/register.php
diff --git a/app/Views/components/alerts.php b/app/Views/components/alerts.php
diff --git a/app/Views/dashboard/index.php b/app/Views/dashboard/index.php
diff --git a/app/Views/layouts/app.php b/app/Views/layouts/app.php
diff --git a/app/Views/layouts/auth.php b/app/Views/layouts/auth.php
diff --git a/public/icon.svg b/public/icon.svg
