Added: Laratrust for multiauth. Validation 404, 403 Page

Author: fhmiibrhimdev

backend/app/Http/Controllers/Api/LoginController.php

@@ -35,14 +35,24 @@ public function __invoke(Request $request)
         if(!$token = JWTAuth::attempt($credentials)) {
             return response()->json([
                 'success' => false,
-                'message' => 'Email atau Password Anda salah'
+                'message' => 'Your email or password is wrong!'
             ], 401);
         }
 
+        $user = auth()->user();
+
+        $role = '';
+        if ($user->hasRole('admin')) {
+            $role = 'admin';
+        } else if ($user->hasRole('user')) {
+            $role = 'user';
+        }
+
         //if auth success
         return response()->json([
             'success' => true,
-            'user'    => auth()->user(),    
+            'user'    => $user,   
+            'role'    => $role, 
             'token'   => $token   
         ], 200);
     }

backend/app/Http/Controllers/Api/RegisterController.php

@@ -36,11 +36,14 @@ public function __invoke(Request $request)
             'password'  => bcrypt($request->password)
         ]);
 
+        $user->addRole($request->role);
+
         //return response JSON user is created
         if($user) {
             return response()->json([
                 'success' => true,
-                'user'    => $user,  
+                'user'    => $user,
+                'role'    => $request->role
             ], 201);
         }
 

backend/app/Models/Permission.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Laratrust\Models\Permission as PermissionModel;
+
+class Permission extends PermissionModel
+{
+    public $guarded = [];
+}

backend/app/Models/Role.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Laratrust\Models\Role as RoleModel;
+
+class Role extends RoleModel
+{
+    public $guarded = [];
+}

backend/app/Models/User.php

@@ -8,9 +8,13 @@
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
 use Laravel\Sanctum\HasApiTokens;
+use Laratrust\Contracts\LaratrustUser;
+use Laratrust\Traits\HasRolesAndPermissions;
 
-class User extends Authenticatable implements JWTSubject
+
+class User extends Authenticatable implements JWTSubject, LaratrustUser
 {
+    use HasRolesAndPermissions;
     use HasApiTokens, HasFactory, Notifiable;
 
     /**

backend/composer.json

@@ -10,6 +10,7 @@
         "laravel/framework": "^10.0",
         "laravel/sanctum": "^3.2",
         "laravel/tinker": "^2.8",
+        "santigarcor/laratrust": "^8.1",
         "tymon/jwt-auth": "^2.0"
     },
     "require-dev": {