create forgote password

Reviewed-on: #28

backend/app/Admin/Controllers/AuthController.php

@@ -16,19 +16,6 @@ class AuthController extends Controller
 {
     use ApiResponse;
 
-    public function register(RegisterRequest $request): JsonResponse
-    {
-        Expert::query()->create([
-            'username' => $request->username,
-            'email' => $request->email,
-            'password' => Hash::make($request->password),
-        ]);
-
-        $request->session()->regenerate();
-
-        return $this->successResponse();
-    }
-
     public function login(LoginRequest $request): JsonResponse
     {
         $credentials = ['password' => $request->password];
@@ -39,8 +26,7 @@ class AuthController extends Controller
             $credentials['username'] = $request->login;
         }
 
-        if (Auth::attempt($credentials))
-        {
+        if (Auth::guard('expert')->attempt($credentials)) {
             $request->session()->regenerate();
 
             return $this->successResponse();

backend/app/Admin/Controllers/ForgotPasswordOtpController.php

@@ -0,0 +1,89 @@
+<?php
+
+namespace App\Admin\Controllers;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use App\Services\Auth\PasswordResetOtpService;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\RateLimiter;
+use Illuminate\Validation\ValidationException;
+
+class ForgotPasswordOtpController extends Controller
+{
+    public function __construct(
+        private readonly PasswordResetOtpService $otpService
+    ) {}
+
+    public function sendOtp(Request $request): JsonResponse
+    {
+        $validated = $request->validate([
+            'email' => ['required', 'email', 'exists:users,email'],
+        ]);
+
+        $email = $validated['email'];
+
+        $key = 'user-forgot-password-otp:' . $email . ':' . $request->ip();
+
+        if (RateLimiter::tooManyAttempts($key, 3)) {
+            throw ValidationException::withMessages([
+                'email' => ['Too many OTP requests. Please try again later.'],
+            ]);
+        }
+
+        RateLimiter::hit($key, 600);
+
+        $user = User::query()->where('email', $email)->firstOrFail();
+
+        $this->otpService->sendOtp($user, 'user');
+
+        return response()->json([
+            'message' => 'OTP sent to your email.',
+        ]);
+    }
+
+    public function verifyOtp(Request $request): JsonResponse
+    {
+        $validated = $request->validate([
+            'email' => ['required', 'email', 'exists:users,email'],
+            'otp' => ['required', 'digits:6'],
+        ]);
+
+        $this->otpService->verifyOtp(
+            email: $validated['email'],
+            otp: $validated['otp'],
+            guard: 'user'
+        );
+
+        return response()->json([
+            'message' => 'OTP verified successfully.',
+        ]);
+    }
+
+    public function resetPassword(Request $request): JsonResponse
+    {
+        $validated = $request->validate([
+            'email' => ['required', 'email', 'exists:users,email'],
+            'password' => ['required', 'confirmed',],
+        ]);
+
+        $record = $this->otpService->ensureVerified(
+            email: $validated['email'],
+            guard: 'user'
+        );
+
+        $user = User::query()->where('email', $validated['email'])->firstOrFail();
+
+        $user->update([
+            'password' => Hash::make($validated['password']),
+        ]);
+
+        $record->delete();
+
+        return response()->json([
+            'message' => 'User password reset successfully.',
+        ]);
+    }
+}

backend/app/Enums/BusinessTypeEnum.php

@@ -41,7 +41,7 @@ enum BusinessTypeEnum: int
         };
     }
 
-    public function name($id): string
+    public static function name($id): string
     {
         $mapArray = [
             1 => 'medical',

backend/app/Models/Expert.php

@@ -5,17 +5,19 @@ namespace App\Models;
 use Database\Factories\ExpertFactory;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
+use Illuminate\Notifications\Notifiable;
+use Illuminate\Foundation\Auth\User as Authenticatable;
 use Spatie\Permission\Traits\HasRoles;
 
 /**
  * @method roles()
  * @method permissions()
  */
-class Expert extends Model
+class Expert extends Authenticatable
 {
     /** @use HasFactory<ExpertFactory> */
-    use HasFactory;
-    use HasRoles;
+
+    use Notifiable,HasFactory,HasRoles;
 
     protected $guarded = ['id'];
     protected string $guard_name = 'web';

backend/app/Models/PasswordResetOtp.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class PasswordResetOtp extends Model
+{
+    protected $guarded = ['id'];
+}

backend/app/Notifications/ResetPasswordOtpNotification.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Notifications;
+
+use Illuminate\Bus\Queueable;
+use Illuminate\Notifications\Messages\MailMessage;
+use Illuminate\Notifications\Notification;
+
+class ResetPasswordOtpNotification extends Notification
+{
+    use Queueable;
+
+    public function __construct(
+        private readonly string $otp
+    ) {}
+
+    public function via(object $notifiable): array
+    {
+        return ['mail'];
+    }
+
+    public function toMail(object $notifiable): MailMessage
+    {
+        return (new MailMessage)
+            ->subject('Reset Password OTP')
+            ->greeting('Hello!')
+            ->line('Your password reset code is:')
+            ->line($this->otp)
+            ->line('This code will expire in 10 minutes.')
+            ->line('If you did not request password reset, ignore this email.');
+    }
+}

backend/app/Services/Auth/PasswordResetOtpService.php

@@ -0,0 +1,103 @@
+<?php
+
+namespace App\Services\Auth;
+
+use App\Models\PasswordResetOtp;
+use App\Notifications\ResetPasswordOtpNotification;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\ValidationException;
+
+class PasswordResetOtpService
+{
+    public function sendOtp(Model $user, string $guard = 'user'): void
+    {
+        $otp = (string) random_int(100000, 999999);
+
+        PasswordResetOtp::query()->where('email', $user->email)
+            ->where('guard', $guard)
+            ->delete();
+
+        PasswordResetOtp::query()->create([
+            'email' => $user->email,
+            'guard' => $guard,
+            'otp' => Hash::make($otp),
+            'expires_at' => now()->addMinutes(10),
+        ]);
+
+        $user->notify(new ResetPasswordOtpNotification($otp));
+    }
+
+    public function verifyOtp(string $email, string $otp, string $guard = 'user'): void
+    {
+        $record = PasswordResetOtp::query()->where('email', $email)
+            ->where('guard', $guard)
+            ->latest()
+            ->first();
+
+        if (! $record) {
+            throw ValidationException::withMessages([
+                'otp' => ['Invalid OTP.'],
+            ]);
+        }
+
+        if ($record->isExpired()) {
+            $record->delete();
+
+            throw ValidationException::withMessages([
+                'otp' => ['OTP has expired.'],
+            ]);
+        }
+
+        if ($record->attempts >= 5) {
+            $record->delete();
+
+            throw ValidationException::withMessages([
+                'otp' => ['Too many wrong attempts. Please request a new OTP.'],
+            ]);
+        }
+
+        if (! Hash::check($otp, $record->otp)) {
+            $record->increment('attempts');
+
+            throw ValidationException::withMessages([
+                'otp' => ['Invalid OTP.'],
+            ]);
+        }
+
+        $record->update([
+            'verified_at' => now(),
+        ]);
+    }
+
+    public function ensureVerified(string $email, string $guard = 'user'): PasswordResetOtp
+    {
+        $record = PasswordResetOtp::query()->where('email', $email)
+            ->where('guard', $guard)
+            ->latest()
+            ->first();
+
+        if (! $record || ! $record->isVerified()) {
+            throw ValidationException::withMessages([
+                'otp' => ['Please verify OTP first.'],
+            ]);
+        }
+
+        if ($record->isExpired()) {
+            $record->delete();
+
+            throw ValidationException::withMessages([
+                'otp' => ['OTP has expired.'],
+            ]);
+        }
+
+        return $record;
+    }
+
+    public function deleteOtp(string $email, string $guard = 'user'): void
+    {
+        PasswordResetOtp::query()->where('email', $email)
+            ->where('guard', $guard)
+            ->delete();
+    }
+}

backend/app/User/Controllers/CityController.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\User\Controllers;
+
+use App\Http\Controllers\Controller;
+use App\Models\City;
+use App\Models\Province;
+use App\Traits\ApiResponse;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class CityController extends Controller
+{
+    use ApiResponse;
+
+    public function list(Request $request): JsonResponse
+    {
+        $cities = City::query()
+            ->where('province_id', '=', $request->query('province_id'))
+            ->get(['id', 'name']);
+
+        return $this->successResponse($cities);
+    }
+}

backend/app/User/Controllers/ForgotPasswordOtpController.php

@@ -0,0 +1,89 @@
+<?php
+
+namespace App\User\Controllers;
+
+use App\Http\Controllers\Controller;
+use App\Models\Expert;
+use Illuminate\Http\Request;
+use App\Services\Auth\PasswordResetOtpService;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\RateLimiter;
+use Illuminate\Validation\ValidationException;
+
+class ForgotPasswordOtpController extends Controller
+{
+    public function __construct(
+        private readonly PasswordResetOtpService $otpService
+    ) {}
+
+    public function sendOtp(Request $request): JsonResponse
+    {
+        $validated = $request->validate([
+            'email' => ['required', 'email', 'exists:experts,email'],
+        ]);
+
+        $email = $validated['email'];
+
+        $key = 'expert-forgot-password-otp:' . $email . ':' . $request->ip();
+
+        if (RateLimiter::tooManyAttempts($key, 3)) {
+            throw ValidationException::withMessages([
+                'email' => ['Too many OTP requests. Please try again later.'],
+            ]);
+        }
+
+        RateLimiter::hit($key, 600);
+
+        $expert = Expert::query()->where('email', $email)->firstOrFail();
+
+        $this->otpService->sendOtp($expert, 'expert');
+
+        return response()->json([
+            'message' => 'OTP sent to your email.',
+        ]);
+    }
+
+    public function verifyOtp(Request $request): JsonResponse
+    {
+        $validated = $request->validate([
+            'email' => ['required', 'email', 'exists:experts,email'],
+            'otp' => ['required', 'digits:6'],
+        ]);
+
+        $this->otpService->verifyOtp(
+            email: $validated['email'],
+            otp: $validated['otp'],
+            guard: 'expert'
+        );
+
+        return response()->json([
+            'message' => 'OTP verified successfully.',
+        ]);
+    }
+
+    public function resetPassword(Request $request): JsonResponse
+    {
+        $validated = $request->validate([
+            'email' => ['required', 'email', 'exists:experts,email'],
+            'password' => ['required', 'confirmed'],
+        ]);
+
+        $record = $this->otpService->ensureVerified(
+            email: $validated['email'],
+            guard: 'expert'
+        );
+
+        $expert = Expert::query()->where('email', $validated['email'])->firstOrFail();
+
+        $expert->update([
+            'password' => Hash::make($validated['password']),
+        ]);
+
+        $record->delete();
+
+        return response()->json([
+            'message' => 'Expert password reset successfully.',
+        ]);
+    }
+}

backend/app/User/Controllers/ProfileController.php

@@ -46,7 +46,7 @@ class ProfileController extends Controller
             $user->update([
                 'first_name' => $request->first_name,
                 'last_name' => $request->last_name,
-                'national_id' => $request->national_id,
+                'national_id' => $user->kyc_status == 0 ? $request->national_id : $user->national_id,
                 'address' => $request->address,
                 'postal_code' => $request->postal_code,
                 'phone_number' => $request->phone_number,

backend/app/User/Controllers/ProvinceController.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\User\Controllers;
+
+use App\Http\Controllers\Controller;
+use App\Models\Province;
+use App\Traits\ApiResponse;
+use Illuminate\Http\JsonResponse;
+
+class ProvinceController extends Controller
+{
+    use ApiResponse;
+    public function list(): JsonResponse
+    {
+        return $this->successResponse(Province::all(['id', 'name']));
+    }
+}

backend/app/User/Resources/UserResource.php

@@ -24,12 +24,13 @@ class UserResource extends JsonResource
             'address' => $this->address,
             'postal_code' => $this->postal_code,
             'phone_number' => $this->phone_number,
-            'province_id' => $this->provonce_id,
+            'province_id' => $this->province_id,
             'province_name' => $this->province_name,
             'city_id' => $this->city_id,
             'city_name' => $this->city_name,
             'birth_date' => $this->birth_date,
             'kyc_status' => $this->kyc_status,
+            'authority_level' => $this->authority_level,
         ];
     }
 }

backend/config/auth.php

@@ -1,5 +1,6 @@
 <?php
 
+use App\Models\Expert;
 use App\Models\User;
 
 return [

backend/database/migrations/2026_06_01_062350_create_password_reset_otps_table.php

@@ -0,0 +1,30 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::create('password_reset_otps', function (Blueprint $table) {
+        $table->id();
+        $table->string('email')->index();
+        $table->string('otp');
+        $table->string('guard_name');
+        $table->timestamp('expires_at');
+        $table->timestamp('verified_at')->nullable();
+        $table->unsignedTinyInteger('attempts')->default(0);
+        $table->timestamps();
+        });
+        }
+
+        public function down(): void
+        {
+        Schema::dropIfExists('password_reset_otps');
+        }
+};

backend/database/seeders/CitySeeder.php

@@ -4,6 +4,7 @@ namespace Database\Seeders;
 
 use Illuminate\Database\Console\Seeds\WithoutModelEvents;
 use Illuminate\Database\Seeder;
+use Illuminate\Support\Facades\DB;
 
 class CitySeeder extends Seeder
 {
@@ -12,6 +13,125 @@ class CitySeeder extends Seeder
      */
     public function run(): void
     {
-        //
+        DB::table('cities')->insert([
+            // Baghdad
+            ['province_id' => 1, 'name' => 'Baghdad', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 1, 'name' => 'Sadr City', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 1, 'name' => 'Kadhimiya', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 1, 'name' => 'Adhamiyah', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 1, 'name' => 'Abu Ghraib', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 1, 'name' => 'Mahmudiya', 'created_at' => now(), 'updated_at' => now()],
+
+            // Basra
+            ['province_id' => 2, 'name' => 'Basra', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 2, 'name' => 'Al-Zubair', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 2, 'name' => 'Umm Qasr', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 2, 'name' => 'Al-Qurnah', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 2, 'name' => 'Shatt Al-Arab', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 2, 'name' => 'Abu Al-Khaseeb', 'created_at' => now(), 'updated_at' => now()],
+
+            // Nineveh
+            ['province_id' => 3, 'name' => 'Mosul', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 3, 'name' => 'Tal Afar', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 3, 'name' => 'Sinjar', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 3, 'name' => 'Al-Hamdaniya', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 3, 'name' => 'Bashiqa', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 3, 'name' => 'Qayyarah', 'created_at' => now(), 'updated_at' => now()],
+
+            // Erbil
+            ['province_id' => 4, 'name' => 'Erbil', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 4, 'name' => 'Shaqlawa', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 4, 'name' => 'Soran', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 4, 'name' => 'Koya', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 4, 'name' => 'Makhmur', 'created_at' => now(), 'updated_at' => now()],
+
+            // Sulaymaniyah
+            ['province_id' => 5, 'name' => 'Sulaymaniyah', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 5, 'name' => 'Halabja', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 5, 'name' => 'Ranya', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 5, 'name' => 'Kalar', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 5, 'name' => 'Chamchamal', 'created_at' => now(), 'updated_at' => now()],
+
+            // Duhok
+            ['province_id' => 6, 'name' => 'Duhok', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 6, 'name' => 'Zakho', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 6, 'name' => 'Amedi', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 6, 'name' => 'Akre', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 6, 'name' => 'Semel', 'created_at' => now(), 'updated_at' => now()],
+
+            // Kirkuk
+            ['province_id' => 7, 'name' => 'Kirkuk', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 7, 'name' => 'Hawija', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 7, 'name' => 'Dibis', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 7, 'name' => 'Daquq', 'created_at' => now(), 'updated_at' => now()],
+
+            // Diyala
+            ['province_id' => 8, 'name' => 'Baqubah', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 8, 'name' => 'Khanaqin', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 8, 'name' => 'Muqdadiyah', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 8, 'name' => 'Balad Ruz', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 8, 'name' => 'Jalawla', 'created_at' => now(), 'updated_at' => now()],
+
+            // Anbar
+            ['province_id' => 9, 'name' => 'Ramadi', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 9, 'name' => 'Fallujah', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 9, 'name' => 'Haditha', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 9, 'name' => 'Hit', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 9, 'name' => 'Al-Qaim', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 9, 'name' => 'Rutba', 'created_at' => now(), 'updated_at' => now()],
+
+            // Salah al-Din
+            ['province_id' => 10, 'name' => 'Tikrit', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 10, 'name' => 'Samarra', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 10, 'name' => 'Balad', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 10, 'name' => 'Baiji', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 10, 'name' => 'Tuz Khurmatu', 'created_at' => now(), 'updated_at' => now()],
+
+            // Karbala
+            ['province_id' => 11, 'name' => 'Karbala', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 11, 'name' => 'Al-Hindiya', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 11, 'name' => 'Ain Al-Tamur', 'created_at' => now(), 'updated_at' => now()],
+
+            // Najaf
+            ['province_id' => 12, 'name' => 'Najaf', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 12, 'name' => 'Kufa', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 12, 'name' => 'Al-Manathera', 'created_at' => now(), 'updated_at' => now()],
+
+            // Babil
+            ['province_id' => 13, 'name' => 'Hillah', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 13, 'name' => 'Al-Mahawil', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 13, 'name' => 'Al-Musayyib', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 13, 'name' => 'Hashimiya', 'created_at' => now(), 'updated_at' => now()],
+
+            // Wasit
+            ['province_id' => 14, 'name' => 'Kut', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 14, 'name' => 'Al-Hayy', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 14, 'name' => 'Al-Numaniyah', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 14, 'name' => 'Badra', 'created_at' => now(), 'updated_at' => now()],
+
+            // Maysan
+            ['province_id' => 15, 'name' => 'Amarah', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 15, 'name' => 'Ali Al-Sharqi', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 15, 'name' => 'Al-Majarr Al-Kabir', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 15, 'name' => 'Qalat Saleh', 'created_at' => now(), 'updated_at' => now()],
+
+            // Dhi Qar
+            ['province_id' => 16, 'name' => 'Nasiriyah', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 16, 'name' => 'Al-Shatrah', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 16, 'name' => 'Suq Al-Shuyukh', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 16, 'name' => 'Rifai', 'created_at' => now(), 'updated_at' => now()],
+
+            // Muthanna
+            ['province_id' => 17, 'name' => 'Samawah', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 17, 'name' => 'Rumaitha', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 17, 'name' => 'Al-Khidhir', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 17, 'name' => 'Salman', 'created_at' => now(), 'updated_at' => now()],
+
+            // Al-Qadisiyyah
+            ['province_id' => 18, 'name' => 'Diwaniyah', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 18, 'name' => 'Afak', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 18, 'name' => 'Al-Shamiya', 'created_at' => now(), 'updated_at' => now()],
+            ['province_id' => 18, 'name' => 'Hamza', 'created_at' => now(), 'updated_at' => now()],
+        ]);
     }
 }

backend/database/seeders/DatabaseSeeder.php

@@ -22,5 +22,9 @@ class DatabaseSeeder extends Seeder
             'email' => 'test@example.com',
             'password' => 'password123@',
         ]);
+        $this->call([
+            ProvinceSeeder::class,
+            CitySeeder::class,
+        ]);
     }
 }

backend/database/seeders/ProvinceSeeder.php

@@ -4,6 +4,7 @@ namespace Database\Seeders;
 
 use Illuminate\Database\Console\Seeds\WithoutModelEvents;
 use Illuminate\Database\Seeder;
+use Illuminate\Support\Facades\DB;
 
 class ProvinceSeeder extends Seeder
 {
@@ -12,6 +13,25 @@ class ProvinceSeeder extends Seeder
      */
     public function run(): void
     {
-        //
+        DB::table('provinces')->insert([
+            ['id' => 1,  'name' => 'Baghdad', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 2,  'name' => 'Basra', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 3,  'name' => 'Nineveh', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 4,  'name' => 'Erbil', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 5,  'name' => 'Sulaymaniyah', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 6,  'name' => 'Duhok', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 7,  'name' => 'Kirkuk', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 8,  'name' => 'Diyala', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 9,  'name' => 'Anbar', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 10, 'name' => 'Salah al-Din', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 11, 'name' => 'Karbala', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 12, 'name' => 'Najaf', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 13, 'name' => 'Babil', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 14, 'name' => 'Wasit', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 15, 'name' => 'Maysan', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 16, 'name' => 'Dhi Qar', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 17, 'name' => 'Muthanna', 'created_at' => now(), 'updated_at' => now()],
+            ['id' => 18, 'name' => 'Al-Qadisiyyah', 'created_at' => now(), 'updated_at' => now()],
+            ]);
     }
 }

backend/routes/expert.php

@@ -12,7 +12,6 @@ Route::prefix('auth')
     ->name('auth.')
     ->controller(AuthController::class)
     ->group(function () {
-        Route::post('register', 'register')->name('register');
         Route::post('login', 'login')->name('login');
         Route::post('logout', 'logout')->name('logout');
 });

backend/routes/web.php

@@ -6,7 +6,9 @@ use App\Admin\Controllers\RoleManagementController;
 use App\Admin\Controllers\UserManagementController;
 use App\User\Controllers\AuthController;
 use App\User\Controllers\GatewayManagementController;
+use App\User\Controllers\CityController;
 use App\User\Controllers\ProfileController;
+use App\User\Controllers\ProvinceController;
 use Illuminate\Support\Facades\Route;
 
 Route::prefix('auth')
@@ -39,3 +41,17 @@ Route::prefix('user_gateway')
         Route::post('/{gateway}', 'update')->name('update');
         Route::delete('/{gateway}', 'destroy')->name('destroy');
     });
+
+Route::prefix('province')
+    ->name('province.')
+    ->controller(ProvinceController::class)
+    ->group(function () {
+        Route::get('list', 'list')->name('list');
+    });
+
+Route::prefix('city')
+    ->name('city.')
+    ->controller(CityController::class)
+    ->group(function () {
+        Route::get('list', 'list')->name('list');
+    });