Initial passport setup

key-value-versions-app/.env.example

@@ -63,3 +63,6 @@ AWS_BUCKET=
 AWS_USE_PATH_STYLE_ENDPOINT=false
 
 VITE_APP_NAME="${APP_NAME}"
+
+PASSPORT_PASSWORD_CLIENT_ID=01989503-1ce8-735f-a487-0729ef4f1d1b
+PASSPORT_PASSWORD_SECRET=WqkuICsupCfBL1xLt71TfBSaaLVlaiTd0iMSudpu

key-value-versions-app/app/Http/Controllers/Api/V1/AuthController.php

@@ -0,0 +1,90 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Http;
+use Illuminate\Validation\Rules;
+
+class AuthController extends Controller
+{
+    public function register(Request $request): JsonResponse
+    {
+        $request->validate([
+            'name' => 'required|string|max:255',
+            'email' => 'required|string|lowercase|email|max:255|unique:users,email',
+            'password' => ['required', 'confirmed', Rules\Password::defaults()],
+        ]);
+
+        User::create([
+            'name' => $request->name,
+            'email' => $request->email,
+            'password' => Hash::make($request->password),
+            'email_verified_at' => now(),
+        ]);
+
+        return response()->json(['message' => 'User registered successfully'], 201);
+    }
+
+    public function login(Request $request): JsonResponse
+    {
+        $request->validate([
+            'email' => ['required', 'string', 'email'],
+            'password' => ['required', 'string'],
+        ]);
+
+        if (!Auth::attempt($request->only('email', 'password'))) {
+            return response()->json(['message' => 'Invalid credentials'], 401);
+        }
+
+        $response = Http::asForm()->post(env('APP_URL') . '/oauth/token', [
+            'grant_type' => 'password',
+            'client_id' => env('PASSPORT_PASSWORD_CLIENT_ID'),
+            'client_secret' => env('PASSPORT_PASSWORD_SECRET'),
+            'username' => $request->email,
+            'password' => $request->password,
+            'scope' => '*',
+        ]);
+
+        return response()->json([
+            'user' => Auth::user(),
+            'token' => $response->json(),
+        ]);
+    }
+
+    public function me(): JsonResponse
+    {
+        $user = auth()->user();
+
+        return response()->json(['user' => $user]);
+    }
+
+    public function refreshToken(Request $request): JsonResponse
+    {
+        $formData = $request->validate([
+            'refresh_token' => ['required', 'string'],
+        ]);
+
+        $response = Http::asForm()->post(env('APP_URL') . '/oauth/token', [
+            'grant_type' => 'refresh_token',
+            'refresh_token' => $formData->refresh_token,
+            'client_id' => env('PASSPORT_PASSWORD_CLIENT_ID'),
+            'client_secret' => env('PASSPORT_PASSWORD_SECRET'),
+            'scope' => '*',
+        ]);
+
+        return response()->json(['token' => $response->json()]);
+    }
+
+    public function logout(): JsonResponse
+    {
+        Auth::user()->tokens()->delete();
+
+        return response()->json(['message' => 'User logged out successfully'], 204);
+    }
+}

key-value-versions-app/app/Models/User.php

@@ -6,11 +6,13 @@
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
+use Laravel\Passport\Contracts\OAuthenticatable;
+use Laravel\Passport\HasApiTokens;
 
-class User extends Authenticatable
+class User extends Authenticatable implements OAuthenticatable
 {
     /** @use HasFactory<\Database\Factories\UserFactory> */
-    use HasFactory, Notifiable;
+    use HasApiTokens, HasFactory, Notifiable;
 
     /**
      * The attributes that are mass assignable.

key-value-versions-app/app/Providers/AppServiceProvider.php

@@ -2,7 +2,9 @@
 
 namespace App\Providers;
 
+use Carbon\CarbonInterval;
 use Illuminate\Support\ServiceProvider;
+use Laravel\Passport\Passport;
 
 class AppServiceProvider extends ServiceProvider
 {
@@ -19,6 +21,10 @@ public function register(): void
      */
     public function boot(): void
     {
-        //
+        Passport::enablePasswordGrant();
+
+        Passport::tokensExpireIn(CarbonInterval::days(5));
+        Passport::refreshTokensExpireIn(CarbonInterval::days(10));
+        Passport::personalAccessTokensExpireIn(CarbonInterval::months(6));
     }
 }

key-value-versions-app/bootstrap/app.php

@@ -9,9 +9,11 @@
 
 return Application::configure(basePath: dirname(__DIR__))
     ->withRouting(
-        web: __DIR__.'/../routes/web.php',
-        commands: __DIR__.'/../routes/console.php',
+        web: __DIR__ . '/../routes/web.php',
+        api: __DIR__ . '/../routes/api.php',
+        commands: __DIR__ . '/../routes/console.php',
         health: '/up',
+        apiPrefix: 'api/v1',
     )
     ->withMiddleware(function (Middleware $middleware) {
         $middleware->encryptCookies(except: ['appearance', 'sidebar_state']);

key-value-versions-app/composer.json

@@ -12,6 +12,7 @@
         "php": "^8.2",
         "inertiajs/inertia-laravel": "^2.0",
         "laravel/framework": "^12.0",
+        "laravel/passport": "^13.0",
         "laravel/tinker": "^2.10.1",
         "tightenco/ziggy": "^2.4"
     },
@@ -83,4 +84,4 @@
     },
     "minimum-stability": "stable",
     "prefer-stable": true
-}
+}