feat: google login

app/Http/Controllers/AuthController.php

@@ -2,6 +2,7 @@
 
 namespace App\Http\Controllers;
 
+use App\Actions\RevokeSocialAuthorizations;
 use App\Http\Requests\EmailVerificationNotificationRequest;
 use App\Http\Requests\ForgotPasswordRequest;
 use App\Http\Requests\LoginRequest;
@@ -295,8 +296,11 @@ class AuthController extends Controller
         ]);
     }
 
-    public function destroy(Request $request, RevenueCatService $revenueCat): JsonResponse
-    {
+    public function destroy(
+        Request $request,
+        RevenueCatService $revenueCat,
+        RevokeSocialAuthorizations $revokeSocialAuthorizations,
+    ): JsonResponse {
         $user = $request->user();
         $identityVerificationRequest = $user->identityVerificationRequest()->first();
         $storagePaths = collect([$user->avatar_url])
@@ -305,6 +309,8 @@ class AuthController extends Controller
             ->values()
             ->all();
 
+        $revokeSocialAuthorizations->execute($user);
+
         try {
             $revenueCat->deleteCustomer($user);
         } catch (Throwable $exception) {
@@ -388,7 +394,7 @@ class AuthController extends Controller
     {
         $user = User::where('email', strtolower((string) $data['email']))->first();
 
-        if (! $user || ! Hash::check((string) $data['password'], $user->password)) {
+        if (! $user || ! is_string($user->password) || ! Hash::check((string) $data['password'], $user->password)) {
             return response()->json([
                 'code' => 'INVALID_CREDENTIALS',
             ], 401);

app/Http/Controllers/MobileSocialAuthController.php

@@ -0,0 +1,42 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Actions\AuthenticateSocialUser;
+use App\Enums\SocialProvider;
+use App\Http\Requests\MobileSocialLoginRequest;
+use App\Http\Requests\MobileSocialNonceRequest;
+use App\Http\Resources\UserResource;
+use App\Services\SocialAuthenticationNonce;
+use Illuminate\Http\JsonResponse;
+
+class MobileSocialAuthController extends Controller
+{
+    public function nonce(
+        MobileSocialNonceRequest $request,
+        SocialAuthenticationNonce $socialAuthenticationNonce,
+    ): JsonResponse {
+        $provider = SocialProvider::from($request->validated('provider'));
+
+        return response()->json([
+            'nonce' => $socialAuthenticationNonce->issue($provider),
+        ]);
+    }
+
+    public function store(
+        MobileSocialLoginRequest $request,
+        AuthenticateSocialUser $authenticateSocialUser,
+    ): JsonResponse {
+        $data = $request->validated();
+        $user = $authenticateSocialUser->execute($data);
+        $deviceName = $data['device_name'] ?? null;
+        $tokenName = is_string($deviceName) && trim($deviceName) !== ''
+            ? trim($deviceName)
+            : 'mobile';
+
+        return response()->json([
+            'token' => $user->createToken($tokenName)->plainTextToken,
+            'user' => new UserResource($user),
+        ]);
+    }
+}