Begin auth stuff.

app/Http/Controllers/UserController.php

@@ -6,6 +6,7 @@ use App\Models\ForUser;
 
 use Illuminate\Support\Facades\DB;
 use Illuminate\Http\Request;
+use Illuminate\Http\Response;
 use Illuminate\Support\Facades\Log;
 
 class UserController extends Controller {
@@ -59,4 +60,61 @@ class UserController extends Controller {
                     )
             ->get();
     }
+
+    public function isAuth(Request $request) { // /apt/rpc/user/auth/isauth
+        return $request->cookie('username');
+    }
+
+    public function login(Request $request) { // /api/rpc/user/auth/login
+        $getUser = DB::table('for_users')
+            ->select('id', 'username', 'password', 'salt')
+            ->where('username', $request->username)
+            ->get();
+
+        $login_ok = false;
+
+        try {
+        $check_password = hash('sha256', $request->password . $getUser[0]->salt);
+
+        for ($round = 0; $round < 65536; $round++) {
+            $check_password = hash('sha256', $check_password . $getUser[0]->salt);
+        }
+
+        if ($check_password === $getUser[0]->password) {
+            $login_ok = true;
+
+            if (session_start()) {
+//return $_SERVER['HTTP_HOST'];
+//                setcookie("username", $_POST['username'], time()+3600*24*30*72, "/", $_SERVER['HTTP_HOST'], false, true);
+//                setcookie("password", $check_password, time()+3600*24*30*72, "/", $_SERVER['HTTP_HOST'], false, true);
+                $cookieU = $request->cookie('username', $request->username, time()+3600*24*30*72);
+                $cookieP = $request->cookie('password', $check_password, time()+3600*24*30*72);
+
+dd($cookieP);
+//dd($request);
+                //dd($cookie->name));
+                return response('')
+                    ->cookie('username', $cookieU)
+                    ->cookie('password', $cookieP);
+            }
+
+        }
+
+        return "bad";
+        }
+        catch (Exception $e) {
+            return $e->getMessage();
+        }
+    }
+
+    public function register(Request $request) { // /api/rpc/user/auth/register
+        return;
+    }
+
+    public function logout(Request $request) { // /api/rpc/user/auth/logout
+        return;
+    }
+
+    // public function passwordReset() {}
+    // public function confirmReset() {}
 }

app/Http/Kernel.php

@@ -33,7 +33,7 @@ class Kernel extends HttpKernel
             \Illuminate\Session\Middleware\StartSession::class,
             // \Illuminate\Session\Middleware\AuthenticateSession::class,
             \Illuminate\View\Middleware\ShareErrorsFromSession::class,
-            \App\Http\Middleware\VerifyCsrfToken::class,
+            // \App\Http\Middleware\VerifyCsrfToken::class,
             \Illuminate\Routing\Middleware\SubstituteBindings::class,
         ],
 

routes/class/user.php

@@ -9,6 +9,12 @@
 |
 */
 
+// Auth
+Route::post('/api/rpc/user/auth/isauth', 'UserController@isAuth');
+Route::post('/api/rpc/user/auth/login', 'UserController@login');
+Route::post('/api/rpc/user/auth/register', 'UserController@register');
+Route::post('/api/rpc/user/auth/logout', 'UserController@logout');
+
 // Owner
 Route::get('/api/rpc/user/owner/countownersoffile/{id}', 'OwnerController@countOwnersOfFile');
 Route::get('/api/rpc/user/owner/getownersoffile/{id}', 'OwnerController@getOwnersOfFile');