Files

65 lines
2.5 KiB
PHP
Raw Permalink Normal View History

2026-08-29 15:53:53 +03:00
<?php
namespace App\Http\Controllers\Auth;
use App\Http\Controllers\Controller;
use App\Http\Middleware\SetLocale;
use App\Support\AuthenticatedRedirect;
use App\Support\PortalSession;
use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\RateLimiter;
use Illuminate\Support\Str;
use Illuminate\Validation\ValidationException;
use Illuminate\View\View;
class AuthenticatedSessionController extends Controller
{
public function create(): View
{
return view('auth.login');
}
/**
* Kimlik bilgilerini ve customer rolünü doğrulayıp müşteri oturumunu güvenle başlatır.
*
* @param Request $request Müşteri giriş formu ve oturum bilgileri.
* @param AuthenticatedRedirect $redirect Güvenli müşteri yönlendirmesini belirleyen yardımcı.
* @return RedirectResponse Güvenli intended adresine veya müşteri paneline yönlendirme.
*
* @author Gökhan Engin - İletişim : https://bit.ly/YazılımUzmanı
*/
public function store(Request $request, AuthenticatedRedirect $redirect): RedirectResponse
{
$credentials = $request->validate(['email' => ['required', 'email'], 'password' => ['required', 'string']]);
$key = Str::transliterate(Str::lower($credentials['email']).'|'.$request->ip());
if (RateLimiter::tooManyAttempts($key, 5)) {
throw ValidationException::withMessages(['email' => __('ui.errors.throttle')]);
}
if (! Auth::attempt([...$credentials, 'status' => 'active'], $request->boolean('remember'))) {
RateLimiter::hit($key, 60);
throw ValidationException::withMessages(['email' => __('ui.errors.credentials')]);
}
if (! Auth::user()->canAccessCustomerPortal()) {
RateLimiter::hit($key, 60);
app(PortalSession::class)->terminate($request);
throw ValidationException::withMessages(['email' => __('auth.portal_denied')]);
}
RateLimiter::clear($key);
$request->session()->regenerate();
if (! in_array(Auth::user()->locale, SetLocale::SUPPORTED, true)) {
Auth::user()->forceFill(['locale' => $request->session()->get('locale', 'tr')])->save();
}
return redirect()->to($redirect->intended($request) ?? $redirect->landing());
}
public function destroy(Request $request, PortalSession $sessions): RedirectResponse
{
$sessions->terminate($request);
return redirect()->route('home');
}
}