improve code and fix their bugs

backend/app/Models/User.php

@@ -30,4 +30,5 @@ class User extends Authenticatable
             'password' => 'hashed',
         ];
     }
+    protected $guarded = ['id'];
 }

backend/app/Traits/ApiResponse.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Traits;
+
+use Illuminate\Http\JsonResponse;
+
+trait ApiResponse
+{
+    public function successResponse(mixed $data = null, string $message = null, int $statusCode = 200): JsonResponse
+    {
+        if (!is_null($data)) {
+            return response()->json([
+                'data' => $data
+            ], $statusCode);
+        }
+
+        $message = $message ?? __('messages.successful');
+
+        return response()->json([
+            'message' => $message
+        ], $statusCode);
+    }
+
+    public function errorResponse(string $message, string $type = 'logical_exception', int $statusCode = 422): JsonResponse
+    {
+        return response()->json([
+            'type' => $type,
+            'message' => $message
+        ], $statusCode);
+    }
+}

backend/app/User/Controller/Auth/AuthController.php

@@ -0,0 +1,66 @@
+<?php
+
+namespace App\User\Controller\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use App\Traits\ApiResponse;
+use App\User\Requests\Auth\LoginRequest;
+use App\User\Requests\Auth\RegisterRequest;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+
+class AuthController extends Controller
+{
+    use ApiResponse;
+
+    public function register(RegisterRequest $request): JsonResponse
+    {
+        $user = User::query()->create([
+            'username' => $request->username,
+            'email' => $request->email,
+            'password' => Hash::make($request->password),
+        ]);
+
+        $token = $user->createToken('Register Token')->accessToken;
+
+        return $this->successResponse([
+            'token_type' => 'Bearer',
+            'access_token' => $token,
+        ]);
+    }
+
+    public function login(LoginRequest $request): JsonResponse
+    {
+        $user = null;
+
+        if ($request->filled('email')) {
+            $user = User::query()
+                ->where('email', $request->email)
+                ->first();
+        } elseif ($request->filled('username')) {
+            $user = User::query()
+                ->where('username', $request->username)
+                ->first();
+        }
+
+        if (!$user || !Hash::check($request->password, $user->password)) {
+            return $this->errorResponse('');
+        }
+
+        $token = $user->createToken('Login Token')->accessToken;
+
+        return $this->successResponse([
+            'token_type' => 'Bearer',
+            'access_token' => $token,
+        ]);
+    }
+
+    public function logout(Request $request): JsonResponse
+    {
+        $request->user()->token()->revoke();
+
+        return $this->successResponse();
+    }
+}

backend/app/User/Requests/Auth/LoginRequest.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\User\Requests\Auth;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class LoginRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'username' => 'required_without:email|string',
+            'email' => 'required_without:name|email',
+            'password' => 'required|string',
+        ];
+    }
+}

backend/app/User/Requests/Auth/RegisterRequest.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\User\Requests\Auth;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class RegisterRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'username' => 'required_without:email|unique:users,name',
+            'email' => 'required_without:name|email|unique:users,email',
+            'password' => 'required|string|regex:/^(?=.*[a-zA-Z])(?=.*\d).+$/|min:8',
+        ];
+    }
+}

backend/routes/api.php

@@ -1,8 +1,20 @@
 <?php
 
+use App\User\Controller\Auth\AuthController;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Route;
 
 Route::get('/user', function (Request $request) {
     return $request->user();
 })->middleware('auth:api');
+
+Route::prefix('user')->group(function () {
+    Route::prefix('Auth')
+        ->name('Auth')
+        ->controller(AuthController::class)
+        ->group(function () {
+            Route::post('register', 'register')->name('register');
+            Route::post('login', 'login')->name('login');
+            Route::post('logout', 'logout')->middleware('auth:api')->name('logout');
+        });
+});