menambahkan authentication

Yunnie-pin · Jul 5, 2023 · 7b8b1d6 · 7b8b1d6
1 parent 0b8e752
commit 7b8b1d6
Show file tree

Hide file tree

Showing 7 changed files with 154 additions and 47 deletions.
diff --git a/app/Http/Kernel.php b/app/Http/Kernel.php
@@ -63,5 +63,9 @@ class Kernel extends HttpKernel
         'signed' => \App\Http\Middleware\ValidateSignature::class,
         'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
         'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
+        'superadmin' => \App\Http\Middleware\isSuperAdmin::class,
+        'administrasi' => \App\Http\Middleware\isAdministrasi::class,
+        'poli' => \App\Http\Middleware\isPoli::class,
+        'laborat' => \App\Http\Middleware\isLaborat::class,
     ];
 }
diff --git a/app/Http/Middleware/isAdministrasi.php b/app/Http/Middleware/isAdministrasi.php
@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class isAdministrasi
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        if ((!auth()->check()) || (auth()->user()->roles->name != 'Super Admin') && (auth()->user()->roles->name != 'Administrasi'  ) ){
+            abort(403);
+        }
+
+        return $next($request);
+    }
+}
diff --git a/app/Http/Middleware/isLaborat.php b/app/Http/Middleware/isLaborat.php
@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class isLaborat
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        if ((!auth()->check()) || (auth()->user()->roles->name != 'Super Admin') && (auth()->user()->roles->name != 'Laborat'  ) ){
+            abort(403);
+        }
+
+        return $next($request);
+    }
+}
diff --git a/app/Http/Middleware/isPoli.php b/app/Http/Middleware/isPoli.php
@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class isPoli
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        if ((!auth()->check()) || (auth()->user()->roles->name != 'Super Admin') && (auth()->user()->roles->name != 'Poli'  ) ){
+            abort(403);
+        }
+        return $next($request);
+    }
+}
diff --git a/app/Http/Middleware/isSuperAdmin.php b/app/Http/Middleware/isSuperAdmin.php
@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class isSuperAdmin
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        if (!auth()->check() || auth()->user()->roles->name != 'Super Admin') {
+            abort(403);
+        }
+
+        return $next($request);
+    }
+}
diff --git a/resources/views/partials/sidebar.blade.php b/resources/views/partials/sidebar.blade.php
@@ -16,35 +16,37 @@
         <hr>
 
 
-        <li class="nav-heading">Super Admin Pages</li>
-
-        <li class="nav-item">
-            <a class="nav-link " href="{{ route('list-user') }}">
-                <i class="bi bi-grid"></i>
-                <span>Data Petugas / User</span>
-            </a>
-        </li><!-- End Dashboard Nav -->
-        <li class="nav-item">
-            <a class="nav-link " href="{{ route('list-bidang') }}">
-                <i class="bi bi-grid"></i>
-                <span>Data Bidang Pemeriksaan</span>
-            </a>
-        </li><!-- End Dashboard Nav -->
-        <li class="nav-item">
-            <a class="nav-link " href="{{ route('list-metode') }}">
-                <i class="bi bi-grid"></i>
-                <span>Data Metode Pemeriksaan</span>
-            </a>
-        </li><!-- End Dashboard Nav -->
-        <li class="nav-item">
-            <a class="nav-link " href="{{ route('list-parameter') }}">
-                <i class="bi bi-grid"></i>
-                <span>Data Parameter </span>
-            </a>
-        </li><!-- End Dashboard Nav -->
+        @if (auth()->user()->roles->name == 'Super Admin' || auth()->user()->roles->name == 'Super Admin')
+            <li class="nav-heading">Super Admin Pages</li>
+
+            <li class="nav-item">
+                <a class="nav-link " href="{{ route('list-user') }}">
+                    <i class="bi bi-grid"></i>
+                    <span>Data Petugas / User</span>
+                </a>
+            </li><!-- End Dashboard Nav -->
+            <li class="nav-item">
+                <a class="nav-link " href="{{ route('list-bidang') }}">
+                    <i class="bi bi-grid"></i>
+                    <span>Data Bidang Pemeriksaan</span>
+                </a>
+            </li><!-- End Dashboard Nav -->
+            <li class="nav-item">
+                <a class="nav-link " href="{{ route('list-metode') }}">
+                    <i class="bi bi-grid"></i>
+                    <span>Data Metode Pemeriksaan</span>
+                </a>
+            </li><!-- End Dashboard Nav -->
+            <li class="nav-item">
+                <a class="nav-link " href="{{ route('list-parameter') }}">
+                    <i class="bi bi-grid"></i>
+                    <span>Data Parameter </span>
+                </a>
+            </li><!-- End Dashboard Nav -->
+        @endif
 
 
-
+        @if(auth()->user()->roles->name == 'Admininstrasi' || auth()->user()->roles->name == 'Super Admin')
         <li class="nav-heading">Administrasi Pages</li>
 
         <li class="nav-item">
@@ -59,9 +61,9 @@
                 <span>Hasil Pemeriksaan</span>
             </a>
         </li><!-- End Dashboard Nav -->
+        @endif
 
-
-
+        @if(auth()->user()->roles->name == 'Poli' || auth()->user()->roles->name == 'Super Admin')
         <li class="nav-heading">Poli Pages</li>
 
         <li class="nav-item">
@@ -77,7 +79,10 @@
             </a>
         </li><!-- End Dashboard Nav -->
 
+        @endif
+
 
+        @if(auth()->user()->roles->name == 'Laborat' || auth()->user()->roles->name == 'Super Admin')
         <li class="nav-heading">Laborat Pages</li>
 
         <li class="nav-item">
@@ -86,8 +91,7 @@
                 <span>Antrean Pemeriksaan</span>
             </a>
         </li><!-- End Dashboard Nav -->
-
-
+        @endif
 
     </ul>
 

diff --git a/routes/web.php b/routes/web.php
@@ -31,7 +31,11 @@
 */
 
 Route::get('/', function () {
-    return view('welcome');
+    if(!auth()->check()){
+        return redirect()->route('login');
+    }else{
+        return redirect()->route('dashboard');
+    }
 });
 
 Route::get('/login', [LoginController::class,'index'])->name('login')->middleware('guest');
@@ -41,66 +45,66 @@
 
 Route::get('/dashboard', [DashboardController::class,'index'])->name('dashboard')->middleware('auth');
 
-Route::get('/riwayat-pemeriksaan', [RiwayatPemeriksaanController::class, 'index'])->name('riwayat-pemeriksaan');
-Route::get('/riwayat-pemeriksaan/{search}', [RiwayatPemeriksaanController::class, 'search'])->name('riwayat-pemeriksaan-search');
+Route::get('/riwayat-pemeriksaan', [RiwayatPemeriksaanController::class, 'index'])->name('riwayat-pemeriksaan')->middleware('auth');
+Route::get('/riwayat-pemeriksaan/{search}', [RiwayatPemeriksaanController::class, 'search'])->name('riwayat-pemeriksaan-search')->middleware('auth');
 
 //Super Admin
 Route::resource('/list-user', ListUserController::class)->names([
     'index' => 'list-user',
     'create' => 'create-user',
     'store' => 'store-user'
-]);;
+])->middleware('superadmin');;
 
 Route::resource('/list-bidang', ListBidangController::class)->names([
     'index' => 'list-bidang',
     'create' => 'create-bidang',
     'store' => 'store-bidang',
-]);
+])->middleware('superadmin');;
 
 Route::resource('/list-metode', ListMetodeController::class)->names([
     'index' => 'list-metode',
     'create' => 'create-metode',
     'store' => 'store-metode'
-]);
+])->middleware('superadmin');;
 
 Route::resource('/list-parameter', ListParameterController::class)->names([
     'index' => 'list-parameter',
     'create' => 'create-parameter',
-]);
+])->middleware('superadmin');
 
 
 //Administrasi
 Route::resource('/list-pasien', ListPasienController::class)->names([
     'index' => 'list-pasien',
     'create' => 'create-pasien',
-]);
+])->middleware('administrasi');
 
 Route::resource('/hasil-pemeriksaan', HasilPemeriksaanController::class)->names([
     'index' => 'hasil-pemeriksaan'
-]);
+])->middleware('administrasi');
 
-Route::get('/cetak-hasil/{id}', [CetakHasilController::class, 'show'])->name('cetak-hasil');
-Route::get('/cetak-nota/{id}', [CetakNotaPemeriksaan::class, 'show'])->name('cetak-nota');
+Route::get('/cetak-hasil/{id}', [CetakHasilController::class, 'show'])->name('cetak-hasil')->middleware('administrasi');
+Route::get('/cetak-nota/{id}', [CetakNotaPemeriksaan::class, 'show'])->name('cetak-nota')->middleware('administrasi');
 
 
 //Poli
 Route::resource('/registrasi-pemeriksaan', RegistrasiPemeriksaanController::class)->names([
     'index' => 'registrasi-pemeriksaan',
     'store' => 'store-pemeriksaan'
-]);
+])->middleware('poli');
 
 Route::resource('/review-pemeriksaan', ReviewPemeriksaanController::class)->names([
     'index' => 'review-pemeriksaan',
-]);
+])->middleware('poli');
 
-Route::get('/dynamic-registrasi-pemeriksaan', DynamicRegistrasiPemeriksaan::class)->name('dynamic-registrasi-pemeriksaan');
+Route::get('/dynamic-registrasi-pemeriksaan', DynamicRegistrasiPemeriksaan::class)->name('dynamic-registrasi-pemeriksaan')->middleware('poli');
 
 //Laborat
 Route::resource('/antrean-pemeriksaan', PemeriksaanController::class)->names([
     'index' => 'list-antrean-pemeriksaan',
     'show' => 'show-antrean-pemeriksaan',
-]);
+])->middleware('laborat');
 
-Route::get('/getDataPasien/{id}', [RegistrasiPemeriksaanController::class, 'getDataPasien']);
+Route::get('/getDataPasien/{id}', [RegistrasiPemeriksaanController::class, 'getDataPasien'])->middleware('laborat');