feat: api admin user and game policies

api/app/Http/Controllers/GameController.php

@@ -14,7 +14,20 @@ class GameController extends Controller
 
     public function index(Request $request)
     {
+        $this->authorize('viewAny', Game::class);
+        
+        $user = Auth::user();
         $query = Game::query()->with(["winner", "player1", "player2"]);
+        
+        // Filter games based on user type
+        if ($user->type !== 'A') {
+            // Players can only see games they participate in
+            $query->where(function ($q) use ($user) {
+                $q->where('player1_user_id', $user->id)
+                  ->orWhere('player2_user_id', $user->id);
+            });
+        }
+        // Admins see all games (no filter needed)
 
         if ($request->has("type") && in_array($request->type, ["3", "9"])) {
             $query->where("type", $request->type);
@@ -43,6 +56,8 @@ class GameController extends Controller
 
     public function store(Request $request)
     {
+        $this->authorize('create', Game::class);
+        
         $validated = $request->validate([
             "type" => "required|in:3,9",
         ]);
@@ -81,6 +96,8 @@ class GameController extends Controller
 
     public function join(Game $game)
     {
+        $this->authorize('join', $game);
+        
         $user = Auth::user();
 
         if ($game->player1_user_id == $user->id) {
@@ -107,12 +124,16 @@ class GameController extends Controller
 
     public function show(Game $game)
     {
+        $this->authorize('view', $game);
+        
         $game->load(["player1", "player2", "winner"]);
         return response()->json($game);
     }
 
     public function update(Request $request, Game $game)
     {
+        $this->authorize('update', $game);
+        
         if ($game->status == "Ended") {
             return response()->json(["message" => "Game already ended"], 400);
         }
@@ -135,4 +156,25 @@ class GameController extends Controller
 
         return response()->json($game);
     }
+
+    public function resign(Game $game)
+    {
+        $this->authorize('resign', $game);
+        
+        $user = Auth::user();
+        
+        $game->update([
+            'status' => 'Ended',
+            'winner_user_id' => $game->player1_user_id === $user->id 
+                ? $game->player2_user_id 
+                : $game->player1_user_id,
+            'loser_user_id' => $user->id,
+            'ended_at' => now(),
+        ]);
+
+        return response()->json([
+            'message' => 'You have resigned from the game',
+            'game' => $game->fresh(),
+        ]);
+    }
 }