initial

app/Http/Controllers/Api/ApiController.php

@@ -0,0 +1,172 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Enum\HttpResponseCodes;
+use App\Http\Controllers\Controller;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Support\Collection;
+use Illuminate\Support\Str;
+
+class ApiController extends Controller
+{
+    /**
+     * Resource name
+     * @var string
+     */
+    protected $resourceName = '';
+
+
+    /**
+     * Return generic json response with the given data.
+     *
+     * @param array   $data        Response data.
+     * @param integer $respondCode Response status code.
+     * @param array   $headers     Response headers.
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function respondJson(array $data, int $respondCode = HttpResponseCodes::HTTP_OK, array $headers = [])
+    {
+        return response()->json($data, $respondCode, $headers);
+    }
+
+    /**
+     * Return forbidden message
+     *
+     * @param string $message Response message.
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function respondForbidden(string $message = 'You do not have permission to access the resource.')
+    {
+        return response()->json(['message' => $message], HttpResponseCodes::HTTP_FORBIDDEN);
+    }
+
+    /**
+     * Return forbidden message
+     *
+     * @param string $message Response message.
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function respondNotFound(string $message = 'The resource was not found.')
+    {
+        return response()->json(['message' => $message], HttpResponseCodes::HTTP_NOT_FOUND);
+    }
+
+    /**
+     * Return too large message
+     *
+     * @param string $message Response message.
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function respondTooLarge(string $message = 'The request entity is too large.')
+    {
+        return response()->json(['message' => $message], HttpResponseCodes::HTTP_REQUEST_ENTITY_TOO_LARGE);
+    }
+
+    /**
+     * Return no content
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function respondNoContent()
+    {
+        return response()->json([], HttpResponseCodes::HTTP_NO_CONTENT);
+    }
+
+    /**
+     * Return created
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function respondCreated()
+    {
+        return response()->json([], HttpResponseCodes::HTTP_CREATED);
+    }
+
+    /**
+     * Return single error message
+     *
+     * @param string  $message      Error message.
+     * @param integer $responseCode Resource code.
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function respondError(string $message, int $responseCode = HttpResponseCodes::HTTP_UNPROCESSABLE_ENTITY)
+    {
+        return response()->json([
+            'message' => $message
+        ], $responseCode);
+    }
+
+    /**
+     * Return formatted errors
+     *
+     * @param array   $errors       Error messages.
+     * @param integer $responseCode Resource code.
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function respondWithErrors(array $errors, int $responseCode = HttpResponseCodes::HTTP_UNPROCESSABLE_ENTITY)
+    {
+        $keys = array_keys($errors);
+        $error = $errors[$keys[0]];
+
+        if (count($keys) > 1) {
+            $additional_errors = (count($keys) - 1);
+            $error .= sprintf(' (and %d more %s', $additional_errors, Str::plural('error', $additional_errors));
+        }
+
+        return response()->json([
+            'message' => $error,
+            'errors' => $errors
+        ], $responseCode);
+    }
+
+    /**
+     * Return resource data
+     *
+     * @param array|Model|Collection $data        Resource data.
+     * @param array|null             $appendData  Data to append to response.
+     * @param integer                $respondCode Resource code.
+     * @return \Illuminate\Http\JsonResponse
+     */
+    protected function respondAsResource(
+        mixed $data,
+        mixed $appendData = null,
+        int $respondCode = HttpResponseCodes::HTTP_OK
+    ) {
+        if ($data === null || ($data instanceof Collection && $data->count() === 0)) {
+            return $this->respondNotFound();
+        }
+
+        $resourceName = $this->resourceName;
+
+        if ($this->resourceName === '') {
+            $resourceName = get_class($this);
+            $resourceName = substr($resourceName, (strrpos($resourceName, '\\') + 1));
+            $resourceName = substr($resourceName, 0, strpos($resourceName, 'Controller'));
+            $resourceName = strtolower($resourceName);
+        }
+
+        $is_multiple = true;
+
+        $dataArray = [];
+        if ($data instanceof Collection) {
+            $dataArray = $data->toArray();
+        } elseif (is_array($data) === true) {
+            $dataArray = $data;
+        } elseif ($data instanceof Model) {
+            $is_multiple = false;
+            $dataArray = $data->toArray();
+        }
+
+        $resource = [];
+        if ($is_multiple === true) {
+            $resource = [Str::plural($resourceName) => $dataArray];
+        } else {
+            $resource = [Str::singular($resourceName) => $dataArray];
+        }
+
+        if ($appendData !== null) {
+            $resource += $appendData;
+        }
+
+        return response()->json($resource, $respondCode);
+    }
+}

app/Http/Controllers/Api/AuthController.php

@@ -0,0 +1,101 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Enum\HttpResponseCodes;
+use App\Http\Requests\AuthLoginRequest;
+use App\Models\User;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Http\JsonResponse;
+
+class AuthController extends ApiController
+{
+    /**
+     * Resource name
+     * @var string
+     */
+    protected $resourceName = 'user';
+
+
+    /**
+     * ApplicationController constructor.
+     */
+    public function __construct()
+    {
+        // $this->middleware('auth:sanctum')
+        //     ->only(['me']);
+    }
+
+    /**
+     * Current User details
+     *
+     * @param Request $request Current request data.
+     * @return JsonResponse
+     */
+    public function me(Request $request)
+    {
+        $user = $request->user()->makeVisible(['permissions']);
+        return $this->respondAsResource($user);
+    }
+
+    /**
+     * Login user with supplied creditials
+     *
+     * @param App\Http\Controllers\Api\AuthLoginRequest $request Created request data.
+     * @return JsonResponse|void
+     */
+    public function login(AuthLoginRequest $request)
+    {
+        $user = User::where('username', '=', $request->input('username'))->first();
+
+        if ($user !== null && Hash::check($request->input('password'), $user->password) === true) {
+            if ($user->email_verified_at === null) {
+                return $this->respondWithErrors([
+                    'username' => 'Email address has not been verified.'
+                ]);
+            }
+
+            if ($user->disabled === true) {
+                return $this->respondWithErrors([
+                    'username' => 'Account has been disabled.'
+                ]);
+            }
+
+            $token = $user->createToken('user_token')->plainTextToken;
+
+            $user->logins()->create([
+                'token' => $token,
+                'login' => now(),
+                'ip_address' => $request->ip(),
+                'user_agent' => $request->userAgent()
+            ]);
+
+            return $this->respondAsResource(
+                $user->makeVisible(['permissions']),
+                ['token' => $token]
+            );
+        }//end if
+
+        return $this->respondWithErrors([
+            'username' => 'Invalid username or password',
+            'password' => 'Invalid username or password',
+        ]);
+    }
+
+    /**
+     * Logout current user
+     *
+     * @param Request $request Current request data.
+     * @return JsonResponse
+     */
+    public function logout(Request $request)
+    {
+        $user = $request->user();
+
+        $user->logins()->where('token', $user->currentAccessToken())->update(['logout' => now()]);
+        $user->currentAccessToken()->delete();
+
+        return $this->respondNoContent();
+    }
+}

app/Http/Controllers/Api/ContactController.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Http\Requests\ContactSendRequest;
+use App\Jobs\SendEmailJob;
+use App\Mail\Contact;
+
+class ContactController extends ApiController
+{
+    /**
+     * Send the request to the site admin by email
+     *
+     * @param  \App\Http\Requests\User\ContactSendRequest $request Request data.
+     * @return \Illuminate\Http\Response
+     */
+    public function send(ContactSendRequest $request)
+    {
+        dispatch((new SendEmailJob(
+            config('contact.contact_address'),
+            new Contact(
+                $request->input('name'),
+                $request->input('email'),
+                $request->input('content')
+            )
+        )))->onQueue('mail');
+
+        return $this->respondCreated();
+    }
+}

app/Http/Controllers/Api/EventController.php

@@ -0,0 +1,88 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Enum\HttpResponseCodes;
+use App\Filters\EventFilter;
+use App\Http\Requests\EventRequest;
+use App\Models\Event;
+use Illuminate\Http\Request;
+
+class EventController extends ApiController
+{
+    /**
+     * ApplicationController constructor.
+     */
+    public function __construct()
+    {
+        $this->middleware('auth:sanctum')
+        ->only(['store','update','destroy']);
+    }
+
+    /**
+     * Display a listing of the resource.
+     *
+     * @param  EventFilter $filter The event filter.
+     * @return \Illuminate\Http\Response
+     */
+    public function index(EventFilter $filter)
+    {
+        return $this->respondAsResource(
+            $filter->filter(),
+            ['total' => $filter->foundTotal()]
+        );
+    }
+
+    /**
+     * Store a newly created resource in storage.
+     *
+     * @param  EventRequest $request The event store request.
+     * @return \Illuminate\Http\Response
+     */
+    public function store(EventRequest $request)
+    {
+        $event = Event::create($request->all());
+        return $this->respondAsResource(
+            (new EventFilter($request))->filter($event),
+            null,
+            HttpResponseCodes::HTTP_CREATED
+        );
+    }
+
+    /**
+     * Display the specified resource.
+     *
+     * @param  EventFilter       $filter The event filter.
+     * @param  \App\Models\Event $event  The specified event.
+     * @return \Illuminate\Http\Response
+     */
+    public function show(EventFilter $filter, Event $event)
+    {
+        return $this->respondAsResource($filter->filter($event));
+    }
+
+    /**
+     * Update the specified resource in storage.
+     *
+     * @param  EventRequest      $request The event update request.
+     * @param  \App\Models\Event $event   The specified event.
+     * @return \Illuminate\Http\Response
+     */
+    public function update(EventRequest $request, Event $event)
+    {
+        $event->update($request->all());
+        return $this->respondAsResource((new EventFilter($request))->filter($event));
+    }
+
+    /**
+     * Remove the specified resource from storage.
+     *
+     * @param  \App\Models\Event $event The specified event.
+     * @return \Illuminate\Http\Response
+     */
+    public function destroy(Event $event)
+    {
+        $event->delete();
+        return $this->respondNoContent();
+    }
+}

app/Http/Controllers/Api/MediaController.php

@@ -0,0 +1,247 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Enum\HttpResponseCodes;
+use App\Filters\MediaFilter;
+use App\Http\Requests\MediaStoreRequest;
+use App\Http\Requests\MediaUpdateRequest;
+use App\Models\Media;
+use Illuminate\Http\Request;
+use Illuminate\Support\Carbon;
+use Illuminate\Support\Facades\Storage;
+use Laravel\Sanctum\PersonalAccessToken;
+
+class MediaController extends ApiController
+{
+    /**
+     * ApplicationController constructor.
+     */
+    public function __construct()
+    {
+        $this->middleware('auth:sanctum')
+        ->only(['store','update','destroy']);
+    }
+
+    /**
+     * Display a listing of the resource.
+     *
+     * @param \App\Filters\MediaFilter $filter Created filter object.
+     * @return \Illuminate\Http\Response
+     */
+    public function index(MediaFilter $filter)
+    {
+        return $this->respondAsResource(
+            $filter->filter(),
+            ['total' => $filter->foundTotal()]
+        );
+    }
+
+    /**
+     * Display the specified resource.
+     *
+     * @param  MediaFilter $filter The request filter.
+     * @param  Media       $medium The request media.
+     * @return \Illuminate\Http\Response
+     */
+    public function show(MediaFilter $filter, Media $medium)
+    {
+        return $this->respondAsResource($filter->filter($medium));
+    }
+
+    /**
+     * Store a new media resource
+     *
+     * @param  MediaStoreRequest $request The uploaded media.
+     * @return \Illuminate\Http\Response
+     */
+    public function store(MediaStoreRequest $request)
+    {
+        $file = $request->file('file');
+        if ($file === null) {
+            return $this->respondError(['file' => 'An error occurred uploading the file to the server.']);
+        }
+
+        if ($file->isValid() !== true) {
+            switch ($file->getError()) {
+                case UPLOAD_ERR_INI_SIZE:
+                case UPLOAD_ERR_FORM_SIZE:
+                    return $this->respondTooLarge();
+                case UPLOAD_ERR_PARTIAL:
+                    return $this->respondError(['file' => 'The file upload was interrupted.']);
+                default:
+                    return $this->respondError(['file' => 'An error occurred uploading the file to the server.']);
+            }
+        }
+
+        if ($file->getSize() > Media::maxUploadSize()) {
+            return $this->respondTooLarge();
+        }
+
+        $title = $file->getClientOriginalName();
+        $mime = $file->getMimeType();
+        $fileInfo = Media::store($file, empty($request->input('permission')));
+        if ($fileInfo === null) {
+            return $this->respondError(
+                ['file' => 'The file could not be stored on the server'],
+                HttpResponseCodes::HTTP_INTERNAL_SERVER_ERROR
+            );
+        }
+
+        $request->merge([
+            'title' => $title,
+            'mime' => $mime,
+            'name' => $fileInfo['name'],
+            'size' => filesize($fileInfo['path'])
+        ]);
+
+        $media = $request->user()->media()->create($request->all());
+        return $this->respondAsResource((new MediaFilter($request))->filter($media));
+    }
+
+    /**
+     * Update the media resource in storage.
+     *
+     * @param  MediaUpdateRequest $request The update request.
+     * @param  \App\Models\Media  $medium  The specified media.
+     * @return \Illuminate\Http\Response
+     */
+    public function update(MediaUpdateRequest $request, Media $medium)
+    {
+        if ((new MediaFilter($request))->filter($medium) === null) {
+            return $this->respondNotFound();
+        }
+
+        $file = $request->file('file');
+        if ($file !== null) {
+            if ($file->getSize() > Media::maxUploadSize()) {
+                return $this->respondTooLarge();
+            }
+
+            $oldPath = $medium->path();
+            $fileInfo = Media::store($file, empty($request->input('permission')));
+            if ($fileInfo === null) {
+                return $this->respondError(
+                    ['file' => 'The file could not be stored on the server'],
+                    HttpResponseCodes::HTTP_INTERNAL_SERVER_ERROR
+                );
+            }
+
+            if (file_exists($oldPath) === true) {
+                unlink($oldPath);
+            }
+
+            $request->merge([
+                'title' => $file->getClientOriginalName(),
+                'mime' => $file->getMimeType(),
+                'name' => $fileInfo['name'],
+                'size' => filesize($fileInfo['path'])
+            ]);
+        }//end if
+
+        $medium->update($request->all());
+        return $this->respondWithTransformer($file);
+    }
+
+
+
+    /**
+     * Remove the specified resource from storage.
+     *
+     * @param Request           $request Request instance.
+     * @param  \App\Models\Media $medium  Specified media file.
+     * @return \Illuminate\Http\Response
+     */
+    public function destroy(Request $request, Media $medium)
+    {
+        if ((new MediaFilter($request))->filter($medium) !== null) {
+            if (file_exists($medium->path()) === true) {
+                unlink($medium->path());
+            }
+
+            $medium->delete();
+            return $this->respondNoContent();
+        }
+
+        return $this->respondNotFound();
+    }
+
+    /**
+     * Display the specified resource.
+     *
+     * @param  Request           $request Request instance.
+     * @param  \App\Models\Media $medium  Specified media.
+     * @return \Illuminate\Http\Response
+     */
+    public function download(Request $request, Media $medium)
+    {
+        $respondJson = in_array('application/json', explode(',', $request->header('Accept', 'application/json')));
+
+        $headers = [];
+        $path = $medium->path();
+
+        /* File exists */
+        if (file_exists($path) === false) {
+            if ($respondJson === false) {
+                return redirect('/not-found');
+            } else {
+                return $this->respondNotFound();
+            }
+        }
+
+        $updated_at = Carbon::parse(filemtime($path));
+
+        $headerPragma = 'no-cache';
+        $headerCacheControl = 'max-age=0, must-revalidate';
+        $headerExpires = $updated_at->toRfc2822String();
+
+        if (empty($medium->permission) === true) {
+            if ($request->user() === null && $request->has('token') === true) {
+                $accessToken = PersonalAccessToken::findToken(urldecode($request->input('token')));
+
+                if (
+                    $accessToken !== null && (config('sanctum.expiration') === null ||
+                    $accessToken->created_at->lte(now()->subMinutes(config('sanctum.expiration'))) === false)
+                ) {
+                    $user = $accessToken->tokenable;
+                }
+            }
+            if ($request->user() === null || $user->hasPermission($medium->permission) === false) {
+                if ($respondJson === false) {
+                    return redirect('/login?redirect=' . $request->path());
+                } else {
+                    return $this->respondForbidden();
+                }
+            }
+        } else {
+            $headerPragma = 'public';
+            $headerExpires = $updated_at->addMonth()->toRfc2822String();
+        }//end if
+
+        $headerEtag = md5($updated_at->format('U'));
+        $headerLastModified = $updated_at->toRfc2822String();
+
+        $headers = [
+            'Cache-Control' => $headerCacheControl,
+            'Content-Disposition' => sprintf('inline; filename="%s"', basename($path)),
+            'Etag' => $headerEtag,
+            'Expires' => $headerExpires,
+            'Last-Modified' => $headerLastModified,
+            'Pragma' => $headerPragma,
+        ];
+
+        $server = request()->server;
+
+        $requestModifiedSince = $server->has('HTTP_IF_MODIFIED_SINCE') &&
+        $server->get('HTTP_IF_MODIFIED_SINCE') === $headerLastModified;
+
+        $requestNoneMatch = $server->has('HTTP_IF_NONE_MATCH') &&
+        $server->get('HTTP_IF_NONE_MATCH') === $headerEtag;
+
+        if ($requestModifiedSince === true || $requestNoneMatch === true) {
+            return response()->make('', 304, $headers);
+        }
+
+        return response()->file($path, $headers);
+    }
+}

app/Http/Controllers/Api/PostController.php

@@ -0,0 +1,93 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Enum\HttpResponseCodes;
+use App\Filters\PostFilter;
+use App\Http\Requests\PostStoreRequest;
+use App\Http\Requests\PostUpdateRequest;
+use App\Models\Post;
+use Illuminate\Http\Request;
+
+class PostController extends ApiController
+{
+    /**
+     * ApplicationController constructor.
+     */
+    public function __construct()
+    {
+        $this->middleware('auth:sanctum')
+            ->only([
+                'store',
+                'update',
+                'delete'
+            ]);
+    }
+
+    /**
+     * Display a listing of the resource.
+     *
+     * @param \App\Filters\PostFilter $filter Post filter request.
+     * @return \Illuminate\Http\Response
+     */
+    public function index(PostFilter $filter)
+    {
+        return $this->respondAsResource(
+            $filter->filter(),
+            ['total' => $filter->foundTotal()]
+        );
+    }
+
+    /**
+     * Display the specified resource.
+     *
+     * @param  PostFilter       $filter The filter request.
+     * @param  \App\Models\Post $post   The post model.
+     * @return \Illuminate\Http\Response
+     */
+    public function show(PostFilter $filter, Post $post)
+    {
+        return $this->respondAsResource($filter->filter($post));
+    }
+
+    /**
+     * Store a newly created resource in storage.
+     *
+     * @param  PostStoreRequest $request The post store request.
+     * @return \Illuminate\Http\Response
+     */
+    public function store(PostStoreRequest $request)
+    {
+        $post = Post::create($request->all());
+        return $this->respondAsResource(
+            (new PostFilter($request))->filter($post),
+            null,
+            HttpResponseCodes::HTTP_CREATED
+        );
+    }
+
+    /**
+     * Update the specified resource in storage.
+     *
+     * @param  PostUpdateRequest $request The post update request.
+     * @param  \App\Models\Post  $post    The specified post.
+     * @return \Illuminate\Http\Response
+     */
+    public function update(PostUpdateRequest $request, Post $post)
+    {
+        $post->update($request->all());
+        return $this->respondAsResource((new PostFilter($request))->filter($post));
+    }
+
+    /**
+     * Remove the specified resource from storage.
+     *
+     * @param  \App\Models\Post $post The specified post.
+     * @return \Illuminate\Http\Response
+     */
+    public function destroy(Post $post)
+    {
+        $post->delete();
+        return $this->respondNoContent();
+    }
+}

app/Http/Controllers/Api/SubscriptionController.php

@@ -0,0 +1,126 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Enum\HttpResponseCodes;
+use App\Filters\UserFilter;
+use App\Http\Requests\UserUpdateRequest;
+use App\Http\Requests\UserStoreRequest;
+use App\Http\Requests\UserForgotPasswordRequest;
+use App\Http\Requests\UserForgotUsernameRequest;
+use App\Http\Requests\UserRegisterRequest;
+use App\Http\Requests\UserResendVerifyEmailRequest;
+use App\Http\Requests\UserResetPasswordRequest;
+use App\Http\Requests\UserVerifyEmailRequest;
+use App\Jobs\SendEmailJob;
+use App\Mail\ChangedEmail;
+use App\Mail\ChangedPassword;
+use App\Mail\ChangeEmailVerify;
+use App\Mail\ForgotUsername;
+use App\Mail\ForgotPassword;
+use App\Mail\EmailVerify;
+use App\Models\User;
+use App\Models\UserCode;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+
+class SubscriptionController extends ApiController
+{
+    /**
+     * ApplicationController constructor.
+     */
+    public function __construct()
+    {
+        $this->middleware('auth:sanctum')
+        ->except([]);
+    }
+
+    /**
+     * Display a listing of the resource.
+     *
+     * @param \App\Filters\UserFilter $filter Filter object.
+     * @return \Illuminate\Http\Response
+     */
+    public function index(UserFilter $filter)
+    {
+        $collection = $filter->filter();
+        return $this->respondAsResource(
+            $collection,
+            ['total' => $filter->foundTotal()]
+        );
+    }
+
+    /**
+     * Store a newly created user in the database.
+     *
+     * @param  UserStoreRequest $request The user update request.
+     * @return \Illuminate\Http\Response
+     */
+    public function store(UserStoreRequest $request)
+    {
+        if ($request->user()->hasPermission('admin/user') !== true) {
+            return $this->respondForbidden();
+        }
+
+        $user = User::create($request->all());
+        return $this->respondAsResource((new UserFilter($request))->filter($user), [], HttpResponseCodes::HTTP_CREATED);
+    }
+
+
+    /**
+     * Display the specified user.
+     *
+     * @param  UserFilter $filter The user filter.
+     * @param  User       $user   The user model.
+     * @return \Illuminate\Http\Response
+     */
+    public function show(UserFilter $filter, User $user)
+    {
+        return $this->respondAsResource($filter->filter($user));
+    }
+
+    /**
+     * Update the specified resource in storage.
+     *
+     * @param  UserUpdateRequest $request The user update request.
+     * @param  User              $user    The specified user.
+     * @return \Illuminate\Http\Response
+     */
+    public function update(UserUpdateRequest $request, User $user)
+    {
+        $input = [];
+        $updatable = ['username', 'first_name', 'last_name', 'email', 'phone', 'password'];
+
+        if ($request->user()->hasPermission('admin/user') === true) {
+            $updatable = array_merge($updatable, ['email_verified_at']);
+        } elseif ($request->user()->is($user) !== true) {
+            return $this->respondForbidden();
+        }
+
+        $input = $request->only($updatable);
+        if (array_key_exists('password', $input) === true) {
+            $input['password'] = Hash::make($request->input('password'));
+        }
+
+        $user->update($input);
+
+        return $this->respondAsResource((new UserFilter($request))->filter($user));
+    }
+
+
+    /**
+     * Remove the user from the database.
+     *
+     * @param  User $user The specified user.
+     * @return \Illuminate\Http\Response
+     */
+    public function destroy(User $user)
+    {
+        if ($user->hasPermission('admin/user') === false) {
+            return $this->respondForbidden();
+        }
+
+        $user->delete();
+        return $this->respondNoContent();
+    }
+}

app/Http/Controllers/Api/UserController.php

@@ -0,0 +1,337 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Enum\HttpResponseCodes;
+use App\Filters\UserFilter;
+use App\Http\Requests\UserUpdateRequest;
+use App\Http\Requests\UserStoreRequest;
+use App\Http\Requests\UserForgotPasswordRequest;
+use App\Http\Requests\UserForgotUsernameRequest;
+use App\Http\Requests\UserRegisterRequest;
+use App\Http\Requests\UserResendVerifyEmailRequest;
+use App\Http\Requests\UserResetPasswordRequest;
+use App\Http\Requests\UserVerifyEmailRequest;
+use App\Jobs\SendEmailJob;
+use App\Mail\ChangedEmail;
+use App\Mail\ChangedPassword;
+use App\Mail\ChangeEmailVerify;
+use App\Mail\ForgotUsername;
+use App\Mail\ForgotPassword;
+use App\Mail\EmailVerify;
+use App\Models\User;
+use App\Models\UserCode;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+
+class UserController extends ApiController
+{
+    /**
+     * ApplicationController constructor.
+     */
+    public function __construct()
+    {
+        $this->middleware('auth:sanctum')
+        ->except([
+            'index',
+            'show',
+            'register',
+            'exists',
+            'forgotPassword',
+            'forgotUsername',
+            'resetPassword',
+            'verifyEmail',
+            'resendVerifyEmailCode'
+        ]);
+    }
+
+    /**
+     * Display a listing of the resource.
+     *
+     * @param \App\Filters\UserFilter $filter Filter object.
+     * @return \Illuminate\Http\Response
+     */
+    public function index(UserFilter $filter)
+    {
+        $collection = $filter->filter();
+        return $this->respondAsResource(
+            $collection,
+            ['total' => $filter->foundTotal()]
+        );
+    }
+
+    /**
+     * Store a newly created user in the database.
+     *
+     * @param  UserStoreRequest $request The user update request.
+     * @return \Illuminate\Http\Response
+     */
+    public function store(UserStoreRequest $request)
+    {
+        if ($request->user()->hasPermission('admin/user') !== true) {
+            return $this->respondForbidden();
+        }
+
+        $user = User::create($request->all());
+        return $this->respondAsResource((new UserFilter($request))->filter($user), [], HttpResponseCodes::HTTP_CREATED);
+    }
+
+
+    /**
+     * Display the specified user.
+     *
+     * @param  UserFilter $filter The user filter.
+     * @param  User       $user   The user model.
+     * @return \Illuminate\Http\Response
+     */
+    public function show(UserFilter $filter, User $user)
+    {
+        return $this->respondAsResource($filter->filter($user));
+    }
+
+    /**
+     * Update the specified resource in storage.
+     *
+     * @param  UserUpdateRequest $request The user update request.
+     * @param  User              $user    The specified user.
+     * @return \Illuminate\Http\Response
+     */
+    public function update(UserUpdateRequest $request, User $user)
+    {
+        $input = [];
+        $updatable = ['username', 'first_name', 'last_name', 'email', 'phone', 'password'];
+
+        if ($request->user()->hasPermission('admin/user') === true) {
+            $updatable = array_merge($updatable, ['email_verified_at']);
+        } elseif ($request->user()->is($user) !== true) {
+            return $this->respondForbidden();
+        }
+
+        $input = $request->only($updatable);
+        if (array_key_exists('password', $input) === true) {
+            $input['password'] = Hash::make($request->input('password'));
+        }
+
+        $user->update($input);
+
+        return $this->respondAsResource((new UserFilter($request))->filter($user));
+    }
+
+
+    /**
+     * Remove the user from the database.
+     *
+     * @param  User $user The specified user.
+     * @return \Illuminate\Http\Response
+     */
+    public function destroy(User $user)
+    {
+        if ($user->hasPermission('admin/user') === false) {
+            return $this->respondForbidden();
+        }
+
+        $user->delete();
+        return $this->respondNoContent();
+    }
+
+    /**
+     * Register a new user
+     *
+     * @param UserRegisterRequest $request The register user request.
+     * @return \Illuminate\Http\Response
+     */
+    public function register(UserRegisterRequest $request)
+    {
+        try {
+            $user = User::create([
+                'first_name' => $request->input('first_name'),
+                'last_name' => $request->input('last_name'),
+                'username' => $request->input('username'),
+                'email' => $request->input('email'),
+                'phone' => $request->input('phone'),
+                'password' => Hash::make($request->input('password'))
+            ]);
+
+            $code = $user->codes()->create([
+                'action' => 'verify-email',
+            ]);
+
+            dispatch((new SendEmailJob($user->email, new EmailVerify($user, $code->code))))->onQueue('mail');
+
+            return response()->json([
+                'message' => 'Check your email for a welcome code.'
+            ]);
+        } catch (\Exception $e) {
+            return response()->json([
+                'message' => 'A server error occurred. Please try again later' . $e
+            ], 500);
+        }//end try
+    }
+
+    /**
+     * Sends an email with all the usernames registered at that address
+     *
+     * @param UserForgotUsernameRequest $request The forgot username request.
+     * @return \Illuminate\Http\Response
+     */
+    public function forgotUsername(UserForgotUsernameRequest $request)
+    {
+        $users = User::where('email', $request->input('email'))->whereNotNull('email_verified_at')->get();
+        if ($users->count() > 0) {
+            dispatch((new SendEmailJob(
+                $users->first()->email,
+                new ForgotUsername($users->pluck('username')->toArray())
+            )))->onQueue('mail');
+            return $this->respondNoContent();
+        }
+
+        return $this->respondJson(['message' => 'Username send to the email address if registered']);
+    }
+
+    /**
+     * Generates a new reset password code
+     *
+     * @param UserForgotPasswordRequest $request The reset password request.
+     * @return \Illuminate\Http\Response
+     */
+    public function forgotPassword(UserForgotPasswordRequest $request)
+    {
+        $user = User::where('username', $request->input('username'))->first();
+        if ($user !== null) {
+            $user->codes()->where('action', 'reset-password')->delete();
+            $code = $user->codes()->create([
+                'action' => 'reset-password'
+            ]);
+
+            dispatch((new SendEmailJob($user->email, new ForgotPassword($user, $code->code))))->onQueue('mail');
+            return $this->respondNoContent();
+        }
+
+        return $this->respondNotFound();
+    }
+
+    /**
+     * Resets a user password
+     *
+     * @param UserResetPasswordRequest $request The reset password request.
+     * @return \Illuminate\Http\Response
+     */
+    public function resetPassword(UserResetPasswordRequest $request)
+    {
+        UserCode::clearExpired();
+
+        $code = UserCode::where('code', $request->input('code'))->where('action', 'reset-password')->first();
+        if ($code !== null) {
+            $user = $code->user()->first();
+
+            $code->delete();
+            $user->codes()->where('action', 'verify-email')->delete();
+
+            $user->password = Hash::make($request->input('password'));
+
+            if ($user->email_verified_at === null) {
+                $user->email_verified_at = now();
+            }
+
+            $user->save();
+
+            dispatch((new SendEmailJob($user->email, new ChangedPassword($user))))->onQueue('mail');
+            return $this->respondNoContent();
+        }
+
+        return $this->respondError([
+            'code' => 'The code was not found or has expired'
+        ]);
+    }
+
+    /**
+     * Verify an email code
+     *
+     * @param UserVerifyEmailRequest $request The verify email request.
+     * @return \Illuminate\Http\Response
+     */
+    public function verifyEmail(UserVerifyEmailRequest $request)
+    {
+        UserCode::clearExpired();
+
+        $code = UserCode::where('code', $request->input('code'))->where('action', 'verify-email')->first();
+        if ($code !== null) {
+            $user = $code->user()->first();
+            $new_email = $code->data;
+
+            if ($new_email === null) {
+                if ($user->email_verified_at === null) {
+                    $user->email_verified_at = now();
+                }
+            } else {
+                dispatch((new SendEmailJob($user->email, new ChangedEmail($user, $user->email, $new_email))))
+                    ->onQueue('mail');
+
+                $user->email = $new_email;
+                $user->email_verified_at = now();
+            }
+
+            $code->delete();
+            $user->save();
+
+            return $this->respondNoContent();
+        }//end if
+
+        return $this->respondWithErrors([
+            'code' => 'The code was not found or has expired'
+        ]);
+    }
+
+    /**
+     * Resend a new verify email
+     *
+     * @param UserResendVerifyEmailRequest $request The resend verify email request.
+     * @return \Illuminate\Http\Response
+     */
+    public function resendVerifyEmail(UserResendVerifyEmailRequest $request)
+    {
+        UserCode::clearExpired();
+
+        $user = User::where('username', $request->input('username'))->first();
+        if ($user !== null) {
+            $code = $user->codes()->where('action', 'verify-email')->first();
+            $code->regenerate();
+            $code->save();
+
+            if ($code->data === null) {
+                dispatch((new SendEmailJob($user->email, new EmailVerify($user, $code->code))))->onQueue('mail');
+            } else {
+                dispatch((new SendEmailJob($user->email, new ChangeEmailVerify($user, $code->code, $code->data))))
+                    ->onQueue('mail');
+            }
+        }
+
+        return response()->json(['message' => 'Verify email sent if user registered and required']);
+    }
+
+    /**
+     * Resend verification email
+     *
+     * @param UserResendVerifyEmailRequest $request The resend user request.
+     * @return \Illuminate\Http\Response
+     */
+    public function resendVerifyEmailCode(UserResendVerifyEmailRequest $request)
+    {
+        $user = User::where('username', $request->input('username'))->first();
+        if ($user !== null) {
+            $user->codes()->where('action', 'verify-email')->delete();
+
+            if ($user->email_verified_at === null) {
+                $code = $user->codes()->create([
+                    'action' => 'verify-email'
+                ]);
+
+                dispatch((new SendEmailJob($user->email, new EmailVerify($user, $code->code))))->onQueue('mail');
+            }
+
+            return $this->respondNoContent();
+        }
+
+        return $this->respondNotFound();
+    }
+}