fix-logout-refresh

app/Http/Controllers/AuthController.php

@@ -11,7 +11,7 @@ class AuthController extends Controller
 {
     public function __construct()
     {
-        $this->middleware('auth:api', ['except' => ['login2', 'login', 'termoAceite',
+        $this->middleware('auth:api', ['except' => ['login2', 'login', 'termoAceite','checkToken',
             'grupo',
             'grupoMenu']]);
     }
@@ -115,7 +115,7 @@ public function login()
             $user->login_attempts = 0;
             $user->save();
 
-            if( $user->pessoa->userSistemas->where('id_ativo', 1)->count()==0){
+            if ($user->pessoa->userSistemas->where('id_ativo', 1)->count() == 0) {
                 return response()->json(['error' => 'Unauthorized - not have user'], 401);
             };
 
@@ -188,6 +188,15 @@ public function me()
         // return response()->json(auth()->user());
     }
 
+    public function checkToken(Request $request)
+    {
+        if (Auth::guard('api')->check()) {
+            return response()->json(['message' => 'Token is valid']);
+        } else {
+            return response()->json(['message' => 'Token is not valid'], 401);
+        }
+    }
+
 
     public function myUser()
     {
@@ -203,9 +212,20 @@ public function myUser()
      */
     public function logout()
     {
-        auth()->logout();
 
-        return response()->json(['message' => 'Successfully logged out']);
+        $user = Auth::user();
+
+        if ($user) {
+            if ($this->hasActiveToken($user)) {
+                $user->tokens->each(function ($token) {
+                    $token->delete();
+                });
+                Auth::guard()->logout();
+                return response()->json(['message' => 'Logged out from all devices']);
+            }
+        }
+
+        return response()->json(['error' => 'Unauthorized'], 401);
     }
 
     /**

app/Http/Middleware/RedirectIfAuthenticated.php

@@ -17,6 +17,7 @@ class RedirectIfAuthenticated
      */
     public function handle(Request $request, Closure $next, string ...$guards): Response
     {
+
         $guards = empty($guards) ? [null] : $guards;
 
         foreach ($guards as $guard) {

routes/api.php

@@ -611,9 +611,12 @@
     Route::get('me', [\App\Http\Controllers\AuthController::class, 'me']);
     Route::post('me', [\App\Http\Controllers\AuthController::class, 'me']);
     Route::get('user', [\App\Http\Controllers\AuthController::class, 'myUser']);
+    Route::get('check-token', [\App\Http\Controllers\AuthController::class, 'checkToken']);
     Route::get('termo-aceite', [\App\Http\Controllers\AuthController::class, 'termoAceite']);
 })->middleware('api');
 
+Route::get('check-token', [\App\Http\Controllers\AuthController::class, 'checkToken']);
+
 
 Route::post('validacpf', [\App\Http\Controllers\ValidacaoController::class, 'validaCpfInfo']);