added support for inviting list collaborators

app/Http/Controllers/AuthController.php

@@ -3,11 +3,14 @@
 namespace App\Http\Controllers;
 
 use App\Http\Requests\LoginRequest;
+use App\Http\Requests\PasswordResetRequest;
 use App\Http\Requests\RegisterRequest;
+use App\Models\Invitation;
 use App\Models\User;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Password;
 
 class AuthController extends Controller
 {
@@ -15,13 +18,55 @@ class AuthController extends Controller
     {
         $user = User::create($request->validated());
 
-        Auth::login($user);
-
-        $request->session()->regenerate();
+        Password::sendResetLink(['email' => $user->email]);
+        $this->processAcceptedInvitations($user);
 
         return response()->json($user, 201);
     }
 
+    private function processAcceptedInvitations(User $user)
+    {
+        $invitations = Invitation::query()
+            ->where('status', 'accepted_login_pending')
+            ->where('email', $user->email)
+            ->get();
+
+        foreach ($invitations as $invitation) {
+            $user->sharedLists()->attach($invitation->movie_list_id);
+            $invitation->update(['status' => 'accepted']);
+            $invitation->delete();
+        }
+    }
+
+    public function forgotPassword(Request $request)
+    {
+        $request->validate(['email' => 'required|email']);
+
+        Password::sendResetLink(['email' => $request->email]);
+
+        return response()->json(['message' => 'Password reset link sent!']);
+    }
+
+    public function resetPassword(PasswordResetRequest $request)
+    {
+        $updatedUser = null;
+
+        $status = Password::reset($request->validated(), function (User $user, string $password) use (&$updatedUser) {
+            $user->forceFill(['password' => $password])->save();
+            $updatedUser = $user;
+        });
+
+        if ($status === Password::PASSWORD_RESET && $updatedUser) {
+            Auth::login($updatedUser);
+
+            return response()->json(['message' => 'Password reset successfully.']);
+        } elseif ($status === Password::INVALID_TOKEN) {
+            return response()->json(['message' => 'Token expired'], 401);
+        }
+
+        return response()->json(['message' => 'Unable to reset password'], 400);
+    }
+
     public function login(LoginRequest $request): JsonResponse
     {
         if (! Auth::attempt($request->validated())) {
@@ -29,8 +74,10 @@ class AuthController extends Controller
         }
 
         $request->session()->regenerate();
+        $user = Auth::user();
+        $this->processAcceptedInvitations($user);
 
-        return response()->json(Auth::user());
+        return response()->json($user);
     }
 
     public function logout(Request $request): JsonResponse