obsidian/MyObsidianVault/Knowledgebase/WebDev/2 CodeIgniter/API Project setup/02.) Create Auth Controller.md

```bash
php spark make:controller Api/Auth --suffix --restful
```


Api/AuthController.php
```php
<?php

namespace App\Controllers\Api;

use CodeIgniter\HTTP\ResponseInterface;
use CodeIgniter\RESTful\ResourceController;
use CodeIgniter\Shield\Models\UserModel;
use CodeIgniter\Shield\Entities\User;

class AuthController extends ResourceController
{
	//Post
	public function register()
	{
		$rules = [
		"username" => "required|is_unique[users.username]",
		"email" => "required|valid_email|is_unique[auth_identities.secret]", // gets written to secret field in user table
		"password" => "required" // gets written to secret 2 field in user table
		];
	
		if (!$this->validate($rules))
		{
			return $this->respondCreated([
				"status" => false,
				"message" => $this->validator->getErrors(),
				"data" => []
				]);
		}
	
		$um = new UserModel(); // coming from Shield
		$userEntity = new User([
			"username" => $this->request->getVar("username"),
			"email" => $this->request->getVar("email"),
			"password" => $this->request->getVar("password")
		]);
	
		$um->save($userEntity);
	
		return $this->respondCreated( [
			"status" => true,
			"message" => "User saved successfully",
			"data" => []
		]);
	}
	
	//////////////////////////////////////
	// Post
	public function login()
	{	
		if(auth()->loggedIn()) {
			auth()->logout();
		}
	
		$rules = [
		"email" => "required|valid_email",
		"password" => "required"
		];
	
		if (!$this->validate($rules)) {
			return $this->respondCreated([
				"status" => false,
				"message" => $this->validator->getErrors(),
				"data" => []
			]);
		}
		
		// success
		$credentials = [
		"email" => $this->request->getVar("email"),
		"password" => $this->request->getVar("password")
		];
		
		$loginAttempt = auth()->attempt($credentials);
		
		if (!$loginAttempt->isOK()) {
			return $this->respondCreated([
				"status" => false,
				"message" => "Invalid login details",
				"data" => []
			]);
		}
		
		// We have a valid data set
		
		$um = new UserModel();
		$userData = $um->findById(auth()->id());
		$token = $userData->generateAccessToken("thisismysecretkey");
		$auth_token = $token->raw_token; // Only available after generation
		
		return $this->respondCreated( [
				"status" => true,
				"message" => "User logged in successfully",
				"data" => [
				"token" => $auth_token
			]
		]);
	}
	
	////////////////////////
	
	public function logout() 
	{
		auth()->logout();
		auth()->user()->revokeAllAccessTokens();
		return $this->respondCreated([
				"status" => true,
				"message" => "User logged out successfully",			
				"data" => []
		]);
	}
	
	//Get
	public function profile()
	{
		$userId = auth()->id();
		return $this->respondCreated([
			"status" => true,	
			"message" => "Profile api called",
			"data" => []
		]);
	}
		
	public function accessDenied()		
	{
		return $this->respondCreated([	
			"status" => false,
			"message" => "Invalid access",
			"data" => []
		]);
	}
}
```