<?php
namespace App\Http\Controllers;
use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
class AuthController extends Controller
{
public function login(Request $request){
return view('auth.login');
}
public function logout(Request $request){
Auth::logout();
$request->session()->invalidate();
$request->session()->regenerateToken();
return redirect('/');
}
public function loginPost(Request $request){
$request->validate([
'email' => 'required|email',
'password' => 'required',
]);
if (Auth::attempt(['email' => $request->email, 'password' => $request->password])) {
if(Auth::user()->is_admin == 1){
return redirect('/');
}else{
Auth::logout();
return back()->withErrors([
'email' => 'You are not authorized to login.',
]);
}
}
return back()->withErrors([
'email' => 'The provided credentials do not match our records.',
]);
}
}