Init

app/Http/Controllers/Auth/CompleteProfileController.php

@@ -0,0 +1,68 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Auth\Events\Registered;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Str;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class CompleteProfileController extends Controller
+{
+    /**
+     * Display the complete profile view.
+     */
+    public function create(Request $request): Response|RedirectResponse
+    {
+        $socialiteUser = session('socialite_user');
+
+        if (! $socialiteUser) {
+            return redirect()->route('login');
+        }
+
+        return Inertia::render('Auth/CompleteProfile', [
+            'socialiteUser' => $socialiteUser,
+        ]);
+    }
+
+    /**
+     * Handle the complete profile request.
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $socialiteUser = session('socialite_user');
+
+        if (! $socialiteUser) {
+            return redirect()->route('login');
+        }
+
+        $request->validate([
+            'username' => ['required', 'string', 'max:255', 'alpha_dash', 'unique:'.User::class],
+            'first_name' => ['required', 'string', 'max:255'],
+            'last_name' => ['required', 'string', 'max:255'],
+        ]);
+
+        $user = User::create([
+            'username' => $request->username,
+            'first_name' => $request->first_name,
+            'last_name' => $request->last_name,
+            'email' => $socialiteUser['email'],
+            'password' => Hash::make(Str::random(24)),
+            'email_verified_at' => now(),
+        ]);
+
+        session()->forget('socialite_user');
+
+        event(new Registered($user));
+
+        Auth::login($user, remember: true);
+
+        return redirect()->intended(config('auth-ui.redirects.login', '/'));
+    }
+}

app/Http/Controllers/Auth/ForgotPasswordController.php

@@ -0,0 +1,49 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Password;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class ForgotPasswordController extends Controller
+{
+    /**
+     * Display the password reset link request view.
+     */
+    public function create(): Response
+    {
+        if (! config('auth-ui.features.password_reset')) {
+            abort(404);
+        }
+
+        return Inertia::render('Auth/ForgotPassword');
+    }
+
+    /**
+     * Handle an incoming password reset link request.
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        if (! config('auth-ui.features.password_reset')) {
+            abort(404);
+        }
+
+        $request->validate([
+            'email' => ['required', 'email'],
+        ]);
+
+        $status = Password::sendResetLink(
+            $request->only('email')
+        );
+
+        if ($status === Password::RESET_LINK_SENT) {
+            return back()->with('status', __($status));
+        }
+
+        return back()->withErrors(['email' => __($status)]);
+    }
+}

app/Http/Controllers/Auth/LoginController.php

@@ -0,0 +1,60 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Validation\ValidationException;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class LoginController extends Controller
+{
+    /**
+     * Display the login view.
+     */
+    public function create(): Response
+    {
+        return Inertia::render('Auth/Login');
+    }
+
+    /**
+     * Handle an incoming authentication request.
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $credentials = $request->validate([
+            'email' => ['required', 'string', 'email'],
+            'password' => ['required', 'string'],
+        ]);
+
+        $remember = config('auth-ui.features.remember_me')
+            ? $request->boolean('remember')
+            : false;
+
+        if (! Auth::attempt($credentials, $remember)) {
+            throw ValidationException::withMessages([
+                'email' => __('auth.failed'),
+            ]);
+        }
+
+        $request->session()->regenerate();
+
+        return redirect()->intended(config('auth-ui.redirects.login', '/'));
+    }
+
+    /**
+     * Destroy an authenticated session.
+     */
+    public function destroy(Request $request): RedirectResponse
+    {
+        Auth::logout();
+
+        $request->session()->invalidate();
+        $request->session()->regenerateToken();
+
+        return redirect(config('auth-ui.redirects.logout', '/'));
+    }
+}

app/Http/Controllers/Auth/RegisterController.php

@@ -0,0 +1,61 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Auth\Events\Registered;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\Rules;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class RegisterController extends Controller
+{
+    /**
+     * Display the registration view.
+     */
+    public function create(): Response
+    {
+        if (! config('auth-ui.features.registration')) {
+            abort(404);
+        }
+
+        return Inertia::render('Auth/Register');
+    }
+
+    /**
+     * Handle an incoming registration request.
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        if (! config('auth-ui.features.registration')) {
+            abort(404);
+        }
+
+        $request->validate([
+            'username' => ['required', 'string', 'max:255', 'alpha_dash', 'unique:'.User::class],
+            'first_name' => ['required', 'string', 'max:255'],
+            'last_name' => ['required', 'string', 'max:255'],
+            'email' => ['required', 'string', 'lowercase', 'email', 'max:255', 'unique:'.User::class],
+            'password' => ['required', 'confirmed', Rules\Password::defaults()],
+        ]);
+
+        $user = User::create([
+            'username' => $request->username,
+            'first_name' => $request->first_name,
+            'last_name' => $request->last_name,
+            'email' => $request->email,
+            'password' => Hash::make($request->password),
+        ]);
+
+        event(new Registered($user));
+
+        Auth::login($user);
+
+        return redirect(config('auth-ui.redirects.register', '/'));
+    }
+}

app/Http/Controllers/Auth/ResetPasswordController.php

@@ -0,0 +1,66 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Auth\Events\PasswordReset;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Password;
+use Illuminate\Support\Str;
+use Illuminate\Validation\Rules;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class ResetPasswordController extends Controller
+{
+    /**
+     * Display the password reset view.
+     */
+    public function create(Request $request): Response
+    {
+        if (! config('auth-ui.features.password_reset')) {
+            abort(404);
+        }
+
+        return Inertia::render('Auth/ResetPassword', [
+            'email' => $request->email,
+            'token' => $request->route('token'),
+        ]);
+    }
+
+    /**
+     * Handle an incoming new password request.
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        if (! config('auth-ui.features.password_reset')) {
+            abort(404);
+        }
+
+        $request->validate([
+            'token' => ['required'],
+            'email' => ['required', 'email'],
+            'password' => ['required', 'confirmed', Rules\Password::defaults()],
+        ]);
+
+        $status = Password::reset(
+            $request->only('email', 'password', 'password_confirmation', 'token'),
+            function ($user) use ($request) {
+                $user->forceFill([
+                    'password' => Hash::make($request->password),
+                    'remember_token' => Str::random(60),
+                ])->save();
+
+                event(new PasswordReset($user));
+            }
+        );
+
+        if ($status === Password::PASSWORD_RESET) {
+            return redirect()->route('login')->with('status', __($status));
+        }
+
+        return back()->withErrors(['email' => __($status)]);
+    }
+}

app/Http/Controllers/Auth/SocialiteController.php

@@ -0,0 +1,109 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Str;
+use Laravel\Socialite\Facades\Socialite;
+
+class SocialiteController extends Controller
+{
+    /**
+     * Suggest a username based on social profile.
+     */
+    protected function suggestUsername($socialUser): string
+    {
+        return Str::slug(
+            $socialUser->getNickname() ?? explode('@', $socialUser->getEmail())[0],
+            '_'
+        );
+    }
+
+    /**
+     * Get enabled providers from config.
+     */
+    protected function getEnabledProviders(): array
+    {
+        return collect(config('auth-ui.providers', []))
+            ->filter(fn ($provider) => $provider['enabled'] ?? false)
+            ->keys()
+            ->all();
+    }
+
+    /**
+     * Redirect the user to the provider authentication page.
+     */
+    public function redirect(string $provider): RedirectResponse
+    {
+        if (! in_array($provider, $this->getEnabledProviders())) {
+            abort(404, 'Provider not enabled');
+        }
+
+        return Socialite::driver($provider)->redirect();
+    }
+
+    /**
+     * Obtain the user information from provider.
+     */
+    public function callback(string $provider): RedirectResponse
+    {
+        if (! in_array($provider, $this->getEnabledProviders())) {
+            abort(404, 'Provider not enabled');
+        }
+
+        try {
+            $socialUser = Socialite::driver($provider)->user();
+        } catch (\Exception $e) {
+            return redirect()->route('login')->withErrors([
+                'email' => 'Unable to authenticate with '.$provider.'. Please try again.',
+            ]);
+        }
+
+        // Find existing user by provider ID or email
+        $user = User::where('email', $socialUser->getEmail())->first();
+
+        if (! $user) {
+            // Create new user if registration is enabled
+            if (! config('auth-ui.features.registration')) {
+                return redirect()->route('login')->withErrors([
+                    'email' => 'Registration is disabled. Please contact an administrator.',
+                ]);
+            }
+
+            $name = $socialUser->getName() ?? $socialUser->getNickname() ?? 'User';
+            $nameParts = explode(' ', $name, 2);
+            $suggestedUsername = $this->suggestUsername($socialUser);
+
+            // Check if username is already taken
+            if (User::where('username', $suggestedUsername)->exists()) {
+                // Store social data in session and redirect to complete profile
+                session()->put('socialite_user', [
+                    'email' => $socialUser->getEmail(),
+                    'first_name' => $nameParts[0],
+                    'last_name' => $nameParts[1] ?? '',
+                    'suggested_username' => $suggestedUsername,
+                    'provider' => $provider,
+                ]);
+
+                return redirect()->route('auth.complete-profile');
+            }
+
+            $user = User::create([
+                'username' => $suggestedUsername,
+                'first_name' => $nameParts[0],
+                'last_name' => $nameParts[1] ?? '',
+                'email' => $socialUser->getEmail(),
+                'password' => Hash::make(Str::random(24)),
+                'email_verified_at' => now(),
+            ]);
+        }
+
+        Auth::login($user, remember: true);
+
+        return redirect()->intended(config('auth-ui.redirects.login', '/'));
+    }
+}

app/Http/Controllers/Controller.php

@@ -0,0 +1,8 @@
+<?php
+
+namespace App\Http\Controllers;
+
+abstract class Controller
+{
+    //
+}

app/Http/Middleware/HandleInertiaRequests.php

@@ -0,0 +1,84 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Http\Request;
+use Inertia\Middleware;
+
+class HandleInertiaRequests extends Middleware
+{
+    /**
+     * The root template that's loaded on the first page visit.
+     *
+     * @see https://inertiajs.com/server-side-setup#root-template
+     *
+     * @var string
+     */
+    protected $rootView = 'app';
+
+    /**
+     * Determines the current asset version.
+     *
+     * @see https://inertiajs.com/asset-versioning
+     */
+    public function version(Request $request): ?string
+    {
+        return parent::version($request);
+    }
+
+    /**
+     * Define the props that are shared by default.
+     *
+     * @see https://inertiajs.com/shared-data
+     *
+     * @return array<string, mixed>
+     */
+    public function share(Request $request): array
+    {
+        return [
+            ...parent::share($request),
+            'auth' => [
+                'user' => $request->user(),
+            ],
+            'flash' => [
+                'success' => fn () => $request->session()->get('success'),
+                'error' => fn () => $request->session()->get('error'),
+                'message' => fn () => $request->session()->get('message'),
+                'status' => fn () => $request->session()->get('status'),
+            ],
+            'authConfig' => $this->getAuthConfig(),
+        ];
+    }
+
+    /**
+     * Get the auth UI configuration for the frontend.
+     *
+     * @return array<string, mixed>
+     */
+    protected function getAuthConfig(): array
+    {
+        $config = config('auth-ui');
+
+        // Filter enabled providers
+        $providers = collect($config['providers'] ?? [])
+            ->filter(fn ($provider) => $provider['enabled'] ?? false)
+            ->map(fn ($provider, $key) => [
+                'key' => $key,
+                'label' => $provider['label'],
+                'icon' => $provider['icon'],
+            ])
+            ->values()
+            ->all();
+
+        return [
+            'appName' => $config['app_name'] ?? config('app.name'),
+            'features' => $config['features'],
+            'login' => $config['login'],
+            'register' => $config['register'],
+            'forgotPassword' => $config['forgot_password'],
+            'resetPassword' => $config['reset_password'],
+            'providers' => $providers,
+            'legal' => $config['legal'],
+        ];
+    }
+}