feat: api admin users endpoints

api/routes/api.php

@@ -1,109 +1,82 @@
 <?php
+
 use App\Http\Controllers\AuthController;
 use App\Http\Controllers\GameController;
 use App\Http\Controllers\MatchController;
+use App\Http\Controllers\ProfileController;
 use App\Http\Controllers\UserController;
-use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Route;
 
-// Authentication Routes
-Route::post('/login', [AuthController::class, 'login']);
-Route::post('/register', [AuthController::class, 'register']);
+Route::prefix('v1')->group(function () {
+    // Public Routes
+    Route::post('/login', [AuthController::class, 'login']);
+    Route::post('/register', [AuthController::class, 'register']);
 
-Route::middleware('auth:sanctum')->group(function () {
-    Route::post('logout', [AuthController::class, 'logout']);
+    // Authenticated Routes
+    Route::middleware(['auth:sanctum', 'throttle:60,1'])->group(function () {
+        Route::post('/logout', [AuthController::class, 'logout']);
 
-    Route::prefix('users')->group(function () {
-        Route::get('/me', function (Request $request) {
-            return $request->user();
+        Route::prefix('users/me')->group(function () {
+            Route::get('/', [ProfileController::class, 'show']);
+            Route::put('/', [ProfileController::class, 'update']);
+            Route::delete('/', [ProfileController::class, 'destroy']);
+            Route::put('/password', [
+                ProfileController::class,
+                'updatePassword',
+            ]);
+            Route::post('/avatar', [ProfileController::class, 'uploadAvatar']);
         });
 
-        // Update user profile (name and nickname)
-        Route::put('/me', function (Request $request) {
-            $request->validate([
-                'name' => 'required|string|max:255',
-                'nickname' => 'required|string|max:255|unique:users,nickname,' . $request->user()->id,
-            ]);
-
-            $user = $request->user();
-            $user->name = $request->name;
-            $user->nickname = $request->nickname;
-            $user->save();
-
-            return response()->json($user);
-        });
-
-        // Change password
-        Route::put('/me/password', function (Request $request) {
-            $request->validate([
-                'current_password' => 'required',
-                'new_password' => 'required|min:8|confirmed',
-            ]);
-
-            $user = $request->user();
-
-            if (!\Hash::check($request->current_password, $user->password)) {
-                return response()->json([
-                    'message' => 'Current password is incorrect'
-                ], 422);
-            }
-
-            $user->password = \Hash::make($request->new_password);
-            $user->save();
-
-            return response()->json([
-                'message' => 'Password changed successfully'
+        // User Resources
+        Route::prefix('/users')->group(function () {
+            Route::get('/{user}', [UserController::class, 'show']);
+            Route::get('/{user}/matches', [
+                UserController::class,
+                'getMatches',
             ]);
         });
 
-        // Upload avatar
-        Route::post('/me/avatar', function (Request $request) {
-            $request->validate([
-                'avatar' => 'required|image|mimes:jpeg,png,jpg,gif|max:2048',
+        // Game Resources
+        Route::prefix('games')->group(function () {
+            Route::apiResource('/', GameController::class)->parameters([
+                '' => 'game',
             ]);
-
-            $user = $request->user();
-
-            // Delete old avatar if exists
-            if ($user->photo_avatar_filename) {
-                \Storage::disk('public')->delete('photos_avatars/' . $user->photo_avatar_filename);
-            }
-
-            // Store new avatar
-            $file = $request->file('avatar');
-            $filename = str_pad($user->id, 5, '0', STR_PAD_LEFT) . '_' . \Str::random(10) . '.' . $file->extension();
-            $file->storeAs('photos_avatars', $filename, 'public');
-
-            $user->photo_avatar_filename = $filename;
-            $user->save();
-
-            return response()->json($user);
+            Route::post('/{game}/join', [GameController::class, 'join']);
+            Route::post('/{game}/resign', [GameController::class, 'resign']);
         });
 
-        // Delete account
-        Route::delete('/me', function (Request $request) {
-            $user = $request->user();
-
-            $user->tokens()->delete();
-
-            $user->delete();
-
-            return response()->json([
-                'message' => 'Account deleted successfully'
+        // Match Resources
+        Route::prefix('matches')->group(function () {
+            Route::apiResource('/', MatchController::class)->parameters([
+                '' => 'match',
+            ]);
+            Route::post('/{match}/join', [
+                MatchController::class,
+                'join',
             ]);
         });
 
-        Route::get('/{user}/matches', [UserController::class, 'getMatches']);
-    });
-
-    Route::prefix('games')->group(function () {
-        Route::apiResource('/', GameController::class)->parameters(['' => 'game']);
-        Route::post('/{game}/resign', [GameController::class, 'resign']);
-        Route::post('/{game}/join', [GameController::class, 'join']);
-    });
-
-    Route::prefix('matches')->group(function () {
-        Route::apiResource('/', MatchController::class)->parameters(['' => 'match']);
-        Route::post('/{match}/join', [MatchController::class, 'join']);
+        // Admin Routes
+        Route::middleware('user.type:A')
+            ->prefix('admin')
+            ->group(function () {
+                Route::prefix('users')->group(function () {
+                    Route::get('/', [UserController::class, 'index']);
+                    Route::post('/', [UserController::class, 'store']);
+                    Route::put('/{user}', [UserController::class, 'update']);
+                    Route::delete('/{user}', [
+                        UserController::class,
+                        'destroy',
+                    ]);
+                    Route::post('/{user}/block', [
+                        UserController::class,
+                        'block',
+                    ]);
+                    Route::post('/{user}/unblock', [
+                        UserController::class,
+                        'unblock',
+                    ]);
+                });
+            });
     });
 });