27 application report (#33)

* test laravel cloud

* refactor: 1NF to 3 NF

* refactor: test case

* update readme

* feat: update readme and license

* feat: update on github workflow

* feat: fix trigger on sqlite database testing

* feat: fix trigger on sqlite database testing

* feat: remove update database

* feat: github workflow update

* feat: github workflow update

* feat: github workflow update

* feat: github workflow update

* feat: github workflow update

Author: ArRahmaan17

.env.example

@@ -15,6 +15,7 @@ DB_PORT=3306
 DB_DATABASE=
 DB_USERNAME=root
 DB_PASSWORD=
+DATABASE_URL=
 
 BROADCAST_DRIVER=log
 CACHE_DRIVER=file

.env.testing

@@ -0,0 +1,66 @@
+APP_NAME=Dpos
+APP_ENV=local
+APP_KEY=base64:nfghI37KMmoF9uQLoJklvbFU16RSoJUIC8+H3AUzYZI=
+APP_DEBUG=true
+APP_URL=http://localhost
+APP_SECRET="Doglex"
+APP_SUBS="OFF"
+LOG_DEPRECATIONS_CHANNEL=null
+LOG_LEVEL=debug
+NIGHTWATCH_TOKEN=
+LOG_CHANNEL=nightwatch
+NIGHTWATCH_REQUEST_SAMPLE_RATE=0.1
+
+DB_CONNECTION=sqlite
+# DB_HOST=127.0.0.1
+# DB_PORT=3306
+DB_DATABASE=
+DATABASE_URL="/database/database.sqlite"
+DB_FOREIGN_KEYS="true"
+
+BROADCAST_DRIVER=log
+CACHE_DRIVER=array
+FILESYSTEM_DISK=local
+QUEUE_CONNECTION=sync
+SESSION_DRIVER=array
+SESSION_LIFETIME=240
+
+MEMCACHED_HOST=127.0.0.1
+
+REDIS_HOST=127.0.0.1
+REDIS_USERNAME=
+REDIS_PASSWORD=
+REDIS_PREFIX=
+REDIS_DB=
+REDIS_PORT=
+REDIS_TTL=
+
+MAIL_MAILER=smtp
+MAIL_HOST=mailpit
+MAIL_PORT=1025
+MAIL_USERNAME=null
+MAIL_PASSWORD=null
+MAIL_ENCRYPTION=null
+MAIL_FROM_ADDRESS="hello@example.com"
+MAIL_FROM_NAME="${APP_NAME}"
+
+AWS_ACCESS_KEY_ID=
+AWS_SECRET_ACCESS_KEY=
+AWS_DEFAULT_REGION=us-east-1
+AWS_BUCKET=
+AWS_USE_PATH_STYLE_ENDPOINT=false
+
+PUSHER_APP_ID=
+PUSHER_APP_KEY=
+PUSHER_APP_SECRET=
+PUSHER_HOST=
+PUSHER_PORT=443
+PUSHER_SCHEME=https
+PUSHER_APP_CLUSTER=mt1
+
+VITE_APP_NAME="${APP_NAME}"
+VITE_PUSHER_APP_KEY="${PUSHER_APP_KEY}"
+VITE_PUSHER_HOST="${PUSHER_HOST}"
+VITE_PUSHER_PORT="${PUSHER_PORT}"
+VITE_PUSHER_SCHEME="${PUSHER_SCHEME}"
+VITE_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}"

.github/workflows/laravel-local.yml

@@ -8,29 +8,30 @@ on:
 jobs:
   laravel-local-test:
     runs-on: self-hosted
-
-    env:
-      DB_CONNECTION: mysql
-      DB_HOST: 127.0.0.1
-      DB_PORT: 3306
-      DB_DATABASE: laravel_pos
-      DB_USERNAME: root
-      DB_PASSWORD: Dbmaman17
-
+    defaults:
+      run:
+        working-directory: /srv/http
+    if: success()
     steps:
       - name: 🧾 Checkout code
-        uses: actions/checkout@v3
+        run: |
+          cd /srv/http
+          git fetch --all
+          git pull 
 
       - name: 🧰 Install PHP dependencies
-        run: composer install --no-interaction --prefer-dist
+        run: composer install -q --no-ansi --no-interaction --no-scripts --no-progress --prefer-dist
+
+      # - name: ⚙️ Copy .env.testing
+      #   run: cp .env.example .env
 
-      - name: ⚙️ Copy .env
-        run: cp .env.example .env
+      # - name: 🔐 Generate app key
+      #   run: php artisan key:generate
 
-      - name: 🔐 Generate app key
-        run: php artisan key:generate
+      # - name: Directory Permissions
+      #   run: chmod -R 777 storage bootstrap/cache
 
       # - name: 🗄️ Run database migrations
-        # run: php artisan migrate --force
+      #   run: php artisan migrate::fresh
       # - name: ✅ Run Laravel tests
-      #   run: php artisan test
+      #   run: php artisan test  

API_AUTH_DOCUMENTATION.md

@@ -0,0 +1,214 @@
+# API Authentication Documentation
+
+This document describes the API authentication endpoints using Laravel Sanctum.
+
+## Base URL
+All API endpoints are prefixed with `/api`
+
+## Authentication Flow
+
+### 1. Login
+**POST** `/api/login`
+
+Request body:
+```json
+{
+    "username": "user@example.com",
+    "password": "password123"
+}
+```
+
+Response:
+```json
+{
+    "message": "Login successful",
+    "token": "1|abc123...",
+    "user": {
+        "user": {
+            "id": 1,
+            "name": "John Doe",
+            "username": "johndoe",
+            "email": "user@example.com"
+        },
+        "role": {
+            "id": 1,
+            "name": "Manager"
+        },
+        "user_id": 1,
+        "company": {
+            "id": 1,
+            "name": "Company Name",
+            "address": {
+                "place": "Building",
+                "address": "Street Address",
+                "city": "City",
+                "province": "Province",
+                "zip_code": "12345"
+            }
+        }
+    },
+    "token_type": "Bearer"
+}
+```
+
+### 2. Using the Token
+Include the token in the Authorization header for all protected endpoints:
+```
+Authorization: Bearer 1|abc123...
+```
+
+## Protected Endpoints
+
+### Get Current User
+**GET** `/api/me`
+
+Returns the current authenticated user's information.
+
+### Logout
+**POST** `/api/logout`
+
+Revokes the current token.
+
+### Logout All Devices
+**POST** `/api/logout-all`
+
+Revokes all tokens for the current user.
+
+### Select Company
+**POST** `/api/select-company`
+
+Request body:
+```json
+{
+    "company_id": 1
+}
+```
+
+### Login As Another User
+**POST** `/api/login-as/{user_id}`
+
+Request body:
+```json
+{
+    "company_id": 1
+}
+```
+
+Returns a new token for the target user.
+
+### Change Password
+**POST** `/api/change-password`
+
+Request body:
+```json
+{
+    "current_password": "oldpassword",
+    "new_password": "newpassword123",
+    "confirm_password": "newpassword123"
+}
+```
+
+### Activate Access Pin
+**POST** `/api/activate-access-pin`
+
+Request body:
+```json
+{
+    "current_access_pin": "123456",
+    "access_pin": "654321",
+    "confirm_access_pin": "654321"
+}
+```
+
+### Unlock Screen
+**POST** `/api/unlock-screen`
+
+Request body:
+```json
+{
+    "access_pin": "123456"
+}
+```
+
+### Get Customer Companies
+**GET** `/api/customer-companies`
+
+Returns list of companies associated with the current user.
+
+## Public Endpoints
+
+### Register
+**POST** `/api/register`
+
+Request body:
+```json
+{
+    "user": {
+        "name": "John Doe",
+        "username": "johndoe",
+        "email": "user@example.com",
+        "phone_number": "08123456789",
+        "password": "password123"
+    },
+    "company": {
+        "name": "Company Name",
+        "email": "company@example.com",
+        "phone_number": "08123456789"
+    },
+    "address": {
+        "place": "Building",
+        "address": "Street Address",
+        "city": "City",
+        "province": "Province",
+        "zip_code": "12345"
+    }
+}
+```
+
+### Check Available User
+**GET** `/api/check-available-user`
+
+Query parameters:
+- `name`
+- `username`
+- `email`
+- `phone_number`
+
+### Get Company Types
+**GET** `/api/company-types`
+
+### Check Company Availability
+**GET** `/api/check-company-availability`
+
+Query parameters:
+- `name`
+- `email`
+- `phone_number`
+- `bussiness_id`
+
+## Error Responses
+
+All endpoints return appropriate HTTP status codes:
+
+- `200` - Success
+- `201` - Created (for registration)
+- `400` - Bad Request
+- `401` - Unauthorized
+- `403` - Forbidden
+- `404` - Not Found
+- `422` - Validation Error
+- `500` - Server Error
+
+Error response format:
+```json
+{
+    "message": "Error description",
+    "errors": {
+        "field": ["Error message"]
+    }
+}
+```
+
+## Rate Limiting
+
+All endpoints are rate limited to 100 requests per minute per IP address.

CaddyFile

@@ -0,0 +1,17 @@
+{
+	log {
+		level INFO
+	}
+}
+:8000 {
+	root public/
+	encode zstd br gzip
+	@blockPHP {
+        path_regexp blockphp .*\.php$
+    }
+    respond @blockPHP "Forbidden" 403
+	php_server {
+		try_files {path} index.php	
+	}
+	header /assets/* Cache-Control "public, max-age=31536000, immutable"
+}