cssd-back/app/Http/Controllers/UserController.php

<?php



namespace App\Http\Controllers;



use Illuminate\Http\Request;

use App\Http\Requests\StoreUserRequest;
use App\MedicalCenter;
use App\User;



class UserController extends Controller
{

    public function index(Request $request)
    {
        $user = auth('api')->user();
        if ($user->cant('list', User::class)) {
            return \MessageResponse::error(trans('messages.access_denied'));
        }

        if ($user->hasRole('Supervisor')) {
            $medical_center_id = $user->medical_center_id;
        }
        elseif($request->has('medical_center_id') && $request->medical_center_id) {
            $medical_center_id = $request->medical_center_id;
        } else {
            $medical_center_id = null;
        }
        $Users = User::when($request->has('name') && $request->name, function($query) use($request){
            $query->where('name', 'LIKE', '%'.$request->name.'%');
        })
        ->when($request->has('date') && $request->date, function($query) use($request){
            $Date = ($request->date) ? date($request->date . ' 23:59:59') : date('Y-m-d' . ' 23:59:59');
            $query->where('created_at', $Date);
        })
        ->when($medical_center_id, function($query) use ($medical_center_id){
            $query->where('medical_center_id', $medical_center_id);
        })
        ->with(['medical_center', 'roles'])->paginate(10);
        return \MessageResponse::data($Users);

    }

    public function store(StoreUserRequest $request)
    {
        if (auth('api')->user()->cant('store', User::class)) {
            return \MessageResponse::error(trans('messages.failed'));
        }
        $UserData = [
            'name' => $request->name ,
            'cell_number' => $request->cell_number ,
            'medical_center_id' => $request->medical_center_id ,
            'status' => 'PreRegister',
            'verified' => 1,
            'password' => bcrypt($request->password),
        ];
        User::create($UserData);
        return \MessageResponse::success(trans('messages.success'));
    }

    public function edit(User $User)
    {
        return \MessageResponse::data($User);
    }

    public function update(StoreUserRequest $request, User $User)
    {
        if (auth('api')->user()->cant('update', $User)) {
            return \MessageResponse::error(trans('messages.failed'));
        }
        $UserData = [
            'name' => $request->name ,
            'cell_number' => $request->cell_number ,
            'medical_center_id' => $request->medical_center_id ,
            'status' => 'PreRegister',
            'verified' => 1,
            'password' => bcrypt($request->password),
        ];
        $User->update($UserData);
        return \MessageResponse::success(trans('messages.success'));
    }

    public function destroy(User $User)
    {
        if (auth('api')->user()->cant('delete', $User)) {
            return \MessageResponse::error(trans('messages.failed'));
        }
        $User->delete();
        return \MessageResponse::success(trans('messages.success'));
    }



    public function getByMedicalCenter(MedicalCenter $MedicalCenter)
    {
        $user = auth('api')->user();
        if (auth('api')->user()->cant('getByMedicalCenter', $MedicalCenter)) {
            return \MessageResponse::error(trans('messages.failed'));
        }
        $MedicalCenter = $MedicalCenter->load(['users' => function ($query) use ($user) {
            if ($user->hasRole('User')) {
                return $query->select(['id', 'medical_center_id', 'name', 'cell_number', 'status'])->where('id', $user->id);
            } else {
                return $query->select(['id', 'medical_center_id', 'name', 'cell_number', 'status']);
            }
        }, 'users.roles']);
        return \MessageResponse::data($MedicalCenter);
    }

    public function changeStatus(User $User)
    {
        if (auth('api')->user()->cant('changeStatus', User::class)) {
          return \MessageResponse::error(trans('messages.access_denied'));
        }
        if ($User->status == 'Active') {
            $User->status = 'Suspended';
            $tokens = \DB::table('oauth_access_tokens')->where('user_id', $User->id);
            foreach($tokens->get() as $token) {
                \DB::table('oauth_refresh_tokens')->where('access_token_id', $token->id)->delete();
            }
            $tokens->delete();
        } else {
            $User->status = 'Active';
        }
        $User->save();
        return \MessageResponse::data($User);
    }

    public function changeRole(User $User, Request $request)
    {
        if (auth('api')->user()->cant('changeRole', User::class)) {
          return \MessageResponse::error(trans('messages.access_denied'));
        }
        $User->syncRoles($request->roles);
        return \MessageResponse::data($User);
    }

    public function updateInfo(Request $request)
    {
        auth('api')->user()->update($request->all());
        return \MessageResponse::success(trans('messages.success'));
    }

    public function getInfo()
    {
        return \MessageResponse::data([ 'user' => auth('api')->user(), 'roles' => auth('api')->user()->getRoleNames() ]);
    }

}