added support for inviting list collaborators

app/Http/Controllers/AuthController.php

@@ -3,11 +3,14 @@
 namespace App\Http\Controllers;
 
 use App\Http\Requests\LoginRequest;
+use App\Http\Requests\PasswordResetRequest;
 use App\Http\Requests\RegisterRequest;
+use App\Models\Invitation;
 use App\Models\User;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Password;
 
 class AuthController extends Controller
 {
@@ -15,13 +18,55 @@ class AuthController extends Controller
     {
         $user = User::create($request->validated());
 
-        Auth::login($user);
-
-        $request->session()->regenerate();
+        Password::sendResetLink(['email' => $user->email]);
+        $this->processAcceptedInvitations($user);
 
         return response()->json($user, 201);
     }
 
+    private function processAcceptedInvitations(User $user)
+    {
+        $invitations = Invitation::query()
+            ->where('status', 'accepted_login_pending')
+            ->where('email', $user->email)
+            ->get();
+
+        foreach ($invitations as $invitation) {
+            $user->sharedLists()->attach($invitation->movie_list_id);
+            $invitation->update(['status' => 'accepted']);
+            $invitation->delete();
+        }
+    }
+
+    public function forgotPassword(Request $request)
+    {
+        $request->validate(['email' => 'required|email']);
+
+        Password::sendResetLink(['email' => $request->email]);
+
+        return response()->json(['message' => 'Password reset link sent!']);
+    }
+
+    public function resetPassword(PasswordResetRequest $request)
+    {
+        $updatedUser = null;
+
+        $status = Password::reset($request->validated(), function (User $user, string $password) use (&$updatedUser) {
+            $user->forceFill(['password' => $password])->save();
+            $updatedUser = $user;
+        });
+
+        if ($status === Password::PASSWORD_RESET && $updatedUser) {
+            Auth::login($updatedUser);
+
+            return response()->json(['message' => 'Password reset successfully.']);
+        } elseif ($status === Password::INVALID_TOKEN) {
+            return response()->json(['message' => 'Token expired'], 401);
+        }
+
+        return response()->json(['message' => 'Unable to reset password'], 400);
+    }
+
     public function login(LoginRequest $request): JsonResponse
     {
         if (! Auth::attempt($request->validated())) {
@@ -29,8 +74,10 @@ class AuthController extends Controller
         }
 
         $request->session()->regenerate();
+        $user = Auth::user();
+        $this->processAcceptedInvitations($user);
 
-        return response()->json(Auth::user());
+        return response()->json($user);
     }
 
     public function logout(Request $request): JsonResponse

app/Http/Controllers/InvitationController.php

@@ -2,11 +2,28 @@
 
 namespace App\Http\Controllers;
 
+use App\Http\Requests\CreateInvitationRequest;
+use App\Mail\ListCollaboratorInvite;
 use App\Models\Invitation;
+use Exception;
+use Illuminate\Database\Eloquent\ModelNotFoundException;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Log;
+use Illuminate\Support\Facades\Mail;
+use Illuminate\Support\Str;
+use Throwable;
 
 class InvitationController extends Controller
 {
+    private Invitation $invitation;
+
+    public function __construct(Invitation $invitation)
+    {
+        $this->invitation = $invitation;
+    }
+
     /**
      * Display a listing of the resource.
      */
@@ -16,19 +33,32 @@ class InvitationController extends Controller
     }
 
     /**
-     * Store a newly created resource in storage.
+     * Display a listing of the resource.
      */
-    public function store(Request $request)
+    public function accept(Request $request, string $token)
     {
-        //
-    }
+        try {
+            $invitation = $this->invitation::where('token', $token)->firstOrFail();
+        } catch (ModelNotFoundException $e) {
+            return response()->json(['message' => 'Invitation not found', 'status' => 'not_found'], 404);
+        } catch (Throwable $e) {
+            Log::error('Failed to accept invitation: '.$e->getMessage());
 
-    /**
-     * Display the specified resource.
-     */
-    public function show(Invitation $invitation)
-    {
-        //
+            return response()->json(['message' => 'Failed to accept invitation', 'status' => 'failed'], 500);
+        }
+
+        $user = Auth::user();
+        if ($user) {
+            $user->sharedLists()->attach($invitation->movie_list_id, ['role' => 'viewer']);
+            $invitation->update(['status' => 'accepted']);
+            $invitation->delete();
+        } else {
+            $invitation->update(['status' => 'accepted_login_pending']);
+
+            return response()->json(['message' => 'Unauthorized', 'status' => 'pending'], 401);
+        }
+
+        return response()->json(['message' => 'Invitation accepted', 'status' => 'accepted']);
     }
 
     /**
@@ -39,6 +69,54 @@ class InvitationController extends Controller
         //
     }
 
+    /**
+     * Display a listing of the resource.
+     */
+    public function decline()
+    {
+        //
+    }
+
+    /**
+     * Store a newly created resource in storage.
+     */
+    public function store(CreateInvitationRequest $request)
+    {
+        $validated = $request->validated();
+        $invitations = [];
+
+        try {
+            DB::transaction(function () use ($validated, &$invitations) {
+                foreach ($validated['emails'] as $email) {
+                    $invitations[] = Invitation::create([
+                        'email' => $email,
+                        'movie_list_id' => $validated['movie_list_id'],
+                        'token' => Str::uuid(),
+                        'expires_at' => now()->addDays(Invitation::EXPIRATION_DAYS),
+                    ]);
+                }
+            });
+        } catch (Exception $e) {
+            logger()->error('Failed to create invitation: '.$e->getMessage());
+
+            return response()->json(['message' => 'Failed to create invitations.'], 500);
+        }
+
+        foreach ($invitations as $invitation) {
+            Mail::to($invitation->email)->queue(new ListCollaboratorInvite(Auth::user(), $invitation));
+        }
+
+        return response()->json(['message' => 'Invitation created successfully'], 201);
+    }
+
+    /**
+     * Display the specified resource.
+     */
+    public function show(Invitation $invitation)
+    {
+        //
+    }
+
     /**
      * Remove the specified resource from storage.
      */

app/Http/Controllers/MovieListController.php

@@ -9,6 +9,7 @@ use App\Models\Movie;
 use App\Models\MovieList;
 use Illuminate\Database\Eloquent\ModelNotFoundException;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
 use Illuminate\Support\Str;
 
 class MovieListController extends Controller
@@ -18,7 +19,13 @@ class MovieListController extends Controller
      */
     public function index()
     {
-        return MovieList::all();
+        $user = Auth::user();
+
+        return response()->json([
+            'movie_lists' => $user->movieLists,
+            'shared_lists' => $user->sharedLists,
+        ], 200);
+
     }
 
     /**