init

.editorconfig

@@ -0,0 +1,18 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_size = 4
+indent_style = space
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.md]
+trim_trailing_whitespace = false
+
+[*.{yml,yaml}]
+indent_size = 2
+
+[docker-compose.yml]
+indent_size = 4

.env.example

@@ -0,0 +1,64 @@
+APP_NAME=Laravel
+APP_ENV=local
+APP_KEY=
+APP_DEBUG=true
+APP_TIMEZONE=UTC
+APP_URL=http://localhost
+
+APP_LOCALE=en
+APP_FALLBACK_LOCALE=en
+APP_FAKER_LOCALE=en_US
+
+APP_MAINTENANCE_DRIVER=file
+APP_MAINTENANCE_STORE=database
+
+BCRYPT_ROUNDS=12
+
+LOG_CHANNEL=stack
+LOG_STACK=single
+LOG_DEPRECATIONS_CHANNEL=null
+LOG_LEVEL=debug
+
+DB_CONNECTION=sqlite
+# DB_HOST=127.0.0.1
+# DB_PORT=3306
+# DB_DATABASE=laravel
+# DB_USERNAME=root
+# DB_PASSWORD=
+
+SESSION_DRIVER=database
+SESSION_LIFETIME=120
+SESSION_ENCRYPT=false
+SESSION_PATH=/
+SESSION_DOMAIN=null
+
+BROADCAST_CONNECTION=log
+FILESYSTEM_DISK=local
+QUEUE_CONNECTION=database
+
+CACHE_STORE=database
+CACHE_PREFIX=
+
+MEMCACHED_HOST=127.0.0.1
+
+REDIS_CLIENT=phpredis
+REDIS_HOST=127.0.0.1
+REDIS_PASSWORD=null
+REDIS_PORT=6379
+
+MAIL_MAILER=log
+MAIL_HOST=127.0.0.1
+MAIL_PORT=2525
+MAIL_USERNAME=null
+MAIL_PASSWORD=null
+MAIL_ENCRYPTION=null
+MAIL_FROM_ADDRESS="hello@example.com"
+MAIL_FROM_NAME="${APP_NAME}"
+
+AWS_ACCESS_KEY_ID=
+AWS_SECRET_ACCESS_KEY=
+AWS_DEFAULT_REGION=us-east-1
+AWS_BUCKET=
+AWS_USE_PATH_STYLE_ENDPOINT=false
+
+VITE_APP_NAME="${APP_NAME}"

.gitattributes

@@ -0,0 +1,11 @@
+* text=auto eol=lf
+
+*.blade.php diff=html
+*.css diff=css
+*.html diff=html
+*.md diff=markdown
+*.php diff=php
+
+/.github export-ignore
+CHANGELOG.md export-ignore
+.styleci.yml export-ignore

.gitignore

@@ -0,0 +1,19 @@
+/.phpunit.cache
+/node_modules
+/public/build
+/public/hot
+/public/storage
+/storage/*.key
+/vendor
+.env
+.env.backup
+.env.production
+.phpunit.result.cache
+Homestead.json
+Homestead.yaml
+auth.json
+npm-debug.log
+yarn-error.log
+/.fleet
+/.idea
+/.vscode

.styleci.yml

@@ -0,0 +1,9 @@
+php:
+  preset: laravel
+  disabled:
+    - no_unused_imports
+  finder:
+    not-name:
+      - index.php
+js: true
+css: true

CHANGELOG.md

@@ -0,0 +1,7 @@
+# Release Notes
+
+## [Unreleased](https://github.com/laravel/laravel/compare/v11.0.0...11.x)
+
+## [v11.0.0 (2023-02-17)](https://github.com/laravel/laravel/compare/v10.3.2...v11.0.0)
+
+Laravel 11 includes a variety of changes to the application skeleton. Please consult the diff to see what's new.

README.md

@@ -0,0 +1,66 @@
+<p align="center"><a href="https://laravel.com" target="_blank"><img src="https://raw.githubusercontent.com/laravel/art/master/logo-lockup/5%20SVG/2%20CMYK/1%20Full%20Color/laravel-logolockup-cmyk-red.svg" width="400" alt="Laravel Logo"></a></p>
+
+<p align="center">
+<a href="https://github.com/laravel/framework/actions"><img src="https://github.com/laravel/framework/workflows/tests/badge.svg" alt="Build Status"></a>
+<a href="https://packagist.org/packages/laravel/framework"><img src="https://img.shields.io/packagist/dt/laravel/framework" alt="Total Downloads"></a>
+<a href="https://packagist.org/packages/laravel/framework"><img src="https://img.shields.io/packagist/v/laravel/framework" alt="Latest Stable Version"></a>
+<a href="https://packagist.org/packages/laravel/framework"><img src="https://img.shields.io/packagist/l/laravel/framework" alt="License"></a>
+</p>
+
+## About Laravel
+
+Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable and creative experience to be truly fulfilling. Laravel takes the pain out of development by easing common tasks used in many web projects, such as:
+
+- [Simple, fast routing engine](https://laravel.com/docs/routing).
+- [Powerful dependency injection container](https://laravel.com/docs/container).
+- Multiple back-ends for [session](https://laravel.com/docs/session) and [cache](https://laravel.com/docs/cache) storage.
+- Expressive, intuitive [database ORM](https://laravel.com/docs/eloquent).
+- Database agnostic [schema migrations](https://laravel.com/docs/migrations).
+- [Robust background job processing](https://laravel.com/docs/queues).
+- [Real-time event broadcasting](https://laravel.com/docs/broadcasting).
+
+Laravel is accessible, powerful, and provides tools required for large, robust applications.
+
+## Learning Laravel
+
+Laravel has the most extensive and thorough [documentation](https://laravel.com/docs) and video tutorial library of all modern web application frameworks, making it a breeze to get started with the framework.
+
+You may also try the [Laravel Bootcamp](https://bootcamp.laravel.com), where you will be guided through building a modern Laravel application from scratch.
+
+If you don't feel like reading, [Laracasts](https://laracasts.com) can help. Laracasts contains thousands of video tutorials on a range of topics including Laravel, modern PHP, unit testing, and JavaScript. Boost your skills by digging into our comprehensive video library.
+
+## Laravel Sponsors
+
+We would like to extend our thanks to the following sponsors for funding Laravel development. If you are interested in becoming a sponsor, please visit the [Laravel Partners program](https://partners.laravel.com).
+
+### Premium Partners
+
+- **[Vehikl](https://vehikl.com/)**
+- **[Tighten Co.](https://tighten.co)**
+- **[WebReinvent](https://webreinvent.com/)**
+- **[Kirschbaum Development Group](https://kirschbaumdevelopment.com)**
+- **[64 Robots](https://64robots.com)**
+- **[Curotec](https://www.curotec.com/services/technologies/laravel/)**
+- **[Cyber-Duck](https://cyber-duck.co.uk)**
+- **[DevSquad](https://devsquad.com/hire-laravel-developers)**
+- **[Jump24](https://jump24.co.uk)**
+- **[Redberry](https://redberry.international/laravel/)**
+- **[Active Logic](https://activelogic.com)**
+- **[byte5](https://byte5.de)**
+- **[OP.GG](https://op.gg)**
+
+## Contributing
+
+Thank you for considering contributing to the Laravel framework! The contribution guide can be found in the [Laravel documentation](https://laravel.com/docs/contributions).
+
+## Code of Conduct
+
+In order to ensure that the Laravel community is welcoming to all, please review and abide by the [Code of Conduct](https://laravel.com/docs/contributions#code-of-conduct).
+
+## Security Vulnerabilities
+
+If you discover a security vulnerability within Laravel, please send an e-mail to Taylor Otwell via [taylor@laravel.com](mailto:taylor@laravel.com). All security vulnerabilities will be promptly addressed.
+
+## License
+
+The Laravel framework is open-sourced software licensed under the [MIT license](https://opensource.org/licenses/MIT).

app/Http/Controllers/API/SocialAuthController.php

@@ -0,0 +1,128 @@
+<?php
+
+namespace App\Http\Controllers\API;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use App\Models\MemberProfile;
+use App\Models\SocialAccount;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Str;
+use Laravel\Socialite\Facades\Socialite;
+
+class SocialAuthController extends Controller
+{
+    /**
+     * 重定向到 Google 登入頁面
+     */
+    public function redirectToGoogle()
+    {
+        return Socialite::driver('google')
+            ->scopes(['openid', 'profile', 'email'])
+            ->with(['access_type' => 'offline', 'prompt' => 'consent']) // 這裡要求 prompt=consent 才能每次都獲取 refresh token
+            ->stateless()
+            ->redirect();
+    }
+
+    /**
+     * 處理 Google 回調
+     */
+    public function handleGoogleCallback(Request $request)
+    {
+        try {
+            // 獲取 Google 用戶資訊
+            $googleUser = Socialite::driver('google')->stateless()->user();
+
+            // 查找相關的社交帳號
+            $socialAccount = SocialAccount::where('provider', 'google')
+                                          ->where('provider_id', $googleUser->getId())
+                                          ->first();
+
+            if ($socialAccount) {
+                // 已存在社交帳號，直接獲取用戶
+                $user = $socialAccount->user;
+                
+                // 如果用戶不是會員，拒絕登入
+                if ($user->role !== 'member') {
+                    return response()->json([
+                        'status' => false,
+                        'message' => '只有會員可以使用 Google 登入'
+                    ], 403);
+                }
+            } else {
+                // 檢查是否有相同 email 的用戶
+                $user = User::where('email', $googleUser->getEmail())->first();
+                
+                if ($user) {
+                    // 已存在用戶，但沒有連結社交帳號
+                    // 檢查是否為會員
+                    if ($user->role !== 'member') {
+                        return response()->json([
+                            'status' => false,
+                            'message' => '只有會員可以使用 Google 登入'
+                        ], 403);
+                    }
+                } else {
+                    // 建立新用戶
+                    $user = User::create([
+                        'name' => $googleUser->getName(),
+                        'email' => $googleUser->getEmail(),
+                        'password' => Hash::make(Str::random(24)),
+                        'role' => 'member', // 強制為會員角色
+                        'is_active' => true,
+                    ]);
+                    
+                    // 建立會員資料
+                    try {
+                        MemberProfile::create([
+                            'user_id' => $user->id,
+                            // 可以選擇性地從 Google 獲取更多資訊
+                        ]);
+                    } catch (\Exception $e) {
+                        // 記錄錯誤，但不中斷整個登入流程
+                        \Log::error('Google 登入建立會員資料失敗: ' . $e->getMessage());
+                    }
+                }
+                
+                // 建立社交帳號連結
+                $socialAccountData = [
+                    'user_id' => $user->id,
+                    'provider' => 'google',
+                    'provider_id' => $googleUser->getId(),
+                    'provider_email' => $googleUser->getEmail(),
+                    'access_token' => $googleUser->token,
+                    'expires_in' => $googleUser->expiresIn ?? null,
+                ];
+                
+                // 確保如果有 refreshToken 就正確地儲存
+                if (!empty($googleUser->refreshToken)) {
+                    $socialAccountData['refresh_token'] = $googleUser->refreshToken;
+                }
+                
+                $socialAccount = SocialAccount::create($socialAccountData);
+            }
+            
+            // 生成 Sanctum token
+            $token = $user->createToken('google-auth')->plainTextToken;
+            
+            // 載入會員資料
+            $user->load('memberProfile');
+            
+            return response()->json([
+                'status' => true,
+                'message' => 'Google 登入成功',
+                'data' => [
+                    'user' => $user,
+                    'token' => $token,
+                    'token_type' => 'Bearer',
+                ]
+            ]);
+        } catch (\Exception $e) {
+            return response()->json([
+                'status' => false,
+                'message' => 'Google 登入失敗：' . $e->getMessage()
+            ], 500);
+        }
+    }
+}

app/Http/Controllers/Controller.php

@@ -0,0 +1,8 @@
+<?php
+
+namespace App\Http\Controllers;
+
+abstract class Controller
+{
+    //
+}

app/Models/AdminProfile.php

@@ -0,0 +1,132 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+
+class AdminProfile extends Model
+{
+    use HasFactory;
+
+    /**
+     * 與模型關聯的資料表
+     *
+     * @var string
+     */
+    protected $table = 'admin_profiles';
+
+    /**
+     * 可以被批量賦值的屬性
+     *
+     * @var array
+     */
+    protected $fillable = [
+        'user_id',
+        'position',
+        'department',
+        'permissions',
+    ];
+
+    /**
+     * 應該被轉換的屬性
+     *
+     * @var array
+     */
+    protected $casts = [
+        'permissions' => 'array',
+    ];
+
+    /**
+     * 獲取擁有此管理員資料的用戶
+     */
+    public function user()
+    {
+        return $this->belongsTo(User::class);
+    }
+
+    /**
+     * 檢查管理員是否擁有特定權限
+     *
+     * @param string $permission
+     * @return bool
+     */
+    public function hasPermission($permission)
+    {
+        if (empty($this->permissions)) {
+            return false;
+        }
+
+        return in_array($permission, $this->permissions);
+    }
+
+    /**
+     * 添加權限給管理員
+     *
+     * @param string $permission
+     * @return void
+     */
+    public function addPermission($permission)
+    {
+        $permissions = $this->permissions ?? [];
+        
+        if (!in_array($permission, $permissions)) {
+            $permissions[] = $permission;
+            $this->permissions = $permissions;
+            $this->save();
+        }
+    }
+
+    /**
+     * 移除管理員的權限
+     *
+     * @param string $permission
+     * @return void
+     */
+    public function removePermission($permission)
+    {
+        if (empty($this->permissions)) {
+            return;
+        }
+
+        $permissions = array_filter($this->permissions, function($p) use ($permission) {
+            return $p !== $permission;
+        });
+
+        $this->permissions = array_values($permissions);
+        $this->save();
+    }
+
+    /**
+     * 設定多個權限
+     *
+     * @param array $permissions
+     * @return void
+     */
+    public function setPermissions(array $permissions)
+    {
+        $this->permissions = $permissions;
+        $this->save();
+    }
+
+    /**
+     * 清除所有權限
+     *
+     * @return void
+     */
+    public function clearPermissions()
+    {
+        $this->permissions = [];
+        $this->save();
+    }
+
+    /**
+     * 獲取所有權限
+     *
+     * @return array
+     */
+    public function getPermissions()
+    {
+        return $this->permissions ?? [];
+    }
+}

app/Models/CoachProfile.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class CoachProfile extends Model
+{
+    /**
+     * 可以批量分配的屬性
+     *
+     * @var array<int, string>
+     */
+    protected $fillable = [
+        'user_id',
+        'bio',
+        'expertise',
+        'certification',
+        'experience',
+        'rating',
+        'availability'
+    ];
+
+    /**
+     * 與用戶的關聯
+     */
+    public function user()
+    {
+        return $this->belongsTo(User::class);
+    }
+}

app/Models/MemberProfile.php

@@ -0,0 +1,133 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+
+class MemberProfile extends Model
+{
+    use HasFactory;
+
+    /**
+     * 與模型關聯的資料表
+     *
+     * @var string
+     */
+    protected $table = 'member_profiles';
+
+    /**
+     * 可以被批量賦值的屬性
+     *
+     * @var array
+     */
+    protected $fillable = [
+        'user_id',      // 這個欄位必須包含在這裡
+        'birthday',
+        'gender',
+        'address',
+        'emergency_contact',
+        'emergency_phone',
+    ];
+
+    /**
+     * 應該被轉換的屬性
+     *
+     * @var array
+     */
+    protected $casts = [
+        'birthday' => 'date',
+    ];
+
+    /**
+     * 獲取擁有此會員資料的用戶
+     */
+    public function user()
+    {
+        return $this->belongsTo(User::class);
+    }
+
+    /**
+     * 獲取會員的訂閱記錄
+     */
+    public function subscriptions()
+    {
+        return $this->hasMany(Subscription::class, 'user_id', 'user_id');
+    }
+
+    /**
+     * 獲取會員的活躍訂閱
+     */
+    public function activeSubscription()
+    {
+        return $this->hasOne(Subscription::class, 'user_id', 'user_id')
+                    ->where('status', 'active')
+                    ->where('end_date', '>=', now())
+                    ->latest();
+    }
+
+    /**
+     * 獲取會員的教練
+     */
+    public function coaches()
+    {
+        return $this->hasManyThrough(
+            CoachProfile::class,
+            'coach_member',
+            'member_id',
+            'user_id',
+            'user_id',
+            'coach_id'
+        );
+    }
+
+    /**
+     * 檢查會員是否有活躍訂閱
+     *
+     * @return bool
+     */
+    public function hasActiveSubscription()
+    {
+        return $this->activeSubscription()->exists();
+    }
+
+    /**
+     * 取得會員年齡
+     *
+     * @return int|null
+     */
+    public function getAge()
+    {
+        if (!$this->birthday) {
+            return null;
+        }
+        
+        return now()->diffInYears($this->birthday);
+    }
+
+    /**
+     * 設定會員生日
+     *
+     * @param string|null $date
+     * @return void
+     */
+    public function setBirthday($date)
+    {
+        $this->birthday = $date;
+        $this->save();
+    }
+
+    /**
+     * 更新會員緊急聯絡資訊
+     *
+     * @param string $contact
+     * @param string $phone
+     * @return void
+     */
+    public function updateEmergencyContact($contact, $phone)
+    {
+        $this->emergency_contact = $contact;
+        $this->emergency_phone = $phone;
+        $this->save();
+    }
+}

app/Models/Plan.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class Plan extends Model
+{
+    //
+}

app/Models/SocialAccount.php

@@ -0,0 +1,44 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+
+class SocialAccount extends Model
+{
+    use HasFactory;
+
+    /**
+     * The attributes that are mass assignable.
+     *
+     * @var array<int, string>
+     */
+    protected $fillable = [
+        'user_id',
+        'provider',
+        'provider_id',
+        'provider_email',
+        'access_token',
+        'refresh_token',
+        'expires_in',
+    ];
+
+    /**
+     * The attributes that should be hidden for serialization.
+     *
+     * @var array<int, string>
+     */
+    protected $hidden = [
+        'access_token',
+        'refresh_token',
+    ];
+
+    /**
+     * 取得此社交帳號的使用者
+     */
+    public function user()
+    {
+        return $this->belongsTo(User::class);
+    }
+}

app/Models/Subscription.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class Subscription extends Model
+{
+    //
+}

app/Models/User.php

@@ -0,0 +1,215 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Foundation\Auth\User as Authenticatable;
+use Illuminate\Notifications\Notifiable;
+use Laravel\Sanctum\HasApiTokens;
+
+/**
+ * User 使用者模型
+ *
+ * 對應 users 資料表，並提供角色判斷、關聯資料取得等功能。
+ */
+class User extends Authenticatable
+{
+    use HasApiTokens, HasFactory, Notifiable;
+
+    /**
+     * The attributes that are mass assignable.
+     *
+     * @var array<int, string>
+     */
+    /**
+     * 可批次賦值的欄位（對應 users 資料表）
+     * @var array<int, string>
+     */
+    protected $fillable = [
+        'name',        // 姓名
+        'email',       // 電子郵件
+        'password',    // 密碼
+        'phone',       // 電話
+        'role',        // 角色
+        'is_active',   // 是否啟用
+    ];
+
+    /**
+     * The attributes that should be hidden for serialization.
+     *
+     * @var array<int, string>
+     */
+    /**
+     * 隱藏於序列化時的欄位
+     * @var array<int, string>
+     */
+    protected $hidden = [
+        'password',         // 密碼
+        'remember_token',   // 記住我 token
+    ];
+
+    /**
+     * The attributes that should be cast.
+     *
+     * @var array<string, string>
+     */
+    /**
+     * 欄位型別轉換
+     * @var array<string, string>
+     */
+    protected $casts = [
+        'email_verified_at' => 'datetime', // 驗證時間
+        'password' => 'hashed',           // 密碼雜湊
+    ];
+
+    /**
+     * 判斷用戶是否為管理員
+     */
+    /**
+     * 判斷用戶是否為管理員
+     * @return bool
+     */
+    public function isAdmin()
+    {
+        return $this->role === 'admin';
+    }
+
+    /**
+     * 判斷用戶是否為教練
+     */
+    /**
+     * 判斷用戶是否為教練
+     * @return bool
+     */
+    public function isCoach()
+    {
+        return $this->role === 'coach';
+    }
+
+    /**
+     * 判斷用戶是否為一般會員
+     */
+    /**
+     * 判斷用戶是否為一般會員
+     * @return bool
+     */
+    public function isMember()
+    {
+        return $this->role === 'member';
+    }
+
+    /**
+     * 獲取用戶的管理員資料
+     */
+    /**
+     * 取得用戶的管理員詳細資料（關聯 admin_profiles）
+     * @return \Illuminate\Database\Eloquent\Relations\HasOne
+     */
+    public function adminProfile()
+    {
+        return $this->hasOne(AdminProfile::class);
+    }
+
+    /**
+     * 獲取用戶的教練資料
+     */
+    /**
+     * 取得用戶的教練詳細資料（關聯 coach_profiles）
+     * @return \Illuminate\Database\Eloquent\Relations\HasOne
+     */
+    public function coachProfile()
+    {
+        return $this->hasOne(CoachProfile::class);
+    }
+
+    /**
+     * 獲取用戶的會員資料
+     */
+    /**
+     * 取得用戶的會員詳細資料（關聯 member_profiles）
+     * @return \Illuminate\Database\Eloquent\Relations\HasOne
+     */
+    public function memberProfile()
+    {
+        return $this->hasOne(MemberProfile::class);
+    }
+
+    /**
+     * 獲取用戶的設定檔資料 (根據角色自動選擇)
+     */
+    /**
+     * 取得用戶的詳細資料（依角色自動選擇對應 profile）
+     * @return mixed
+     */
+    public function profile()
+    {
+        if ($this->isAdmin()) {
+            return $this->adminProfile;
+        } elseif ($this->isCoach()) {
+            return $this->coachProfile;
+        } else {
+            return $this->memberProfile;
+        }
+    }
+
+    /**
+     * 獲取教練的會員 (僅適用於教練角色)
+     */
+    /**
+     * 取得教練所帶的會員（僅教練角色適用）
+     * @return \Illuminate\Database\Eloquent\Relations\BelongsToMany|null
+     */
+    public function members()
+    {
+        if (!$this->isCoach()) {
+            return null;
+        }
+        
+        return $this->belongsToMany(User::class, 'coach_member', 'coach_id', 'member_id')
+                    ->where('role', 'member');
+    }
+
+    /**
+     * 獲取會員的教練 (僅適用於會員角色)
+     */
+    /**
+     * 取得會員對應的教練（僅會員角色適用）
+     * @return \Illuminate\Database\Eloquent\Relations\BelongsToMany|null
+     */
+    public function coaches()
+    {
+        if (!$this->isMember()) {
+            return null;
+        }
+        
+        return $this->belongsToMany(User::class, 'coach_member', 'member_id', 'coach_id')
+                    ->where('role', 'coach');
+    }
+
+    /**
+     * 獲取用戶的訂閱
+     */
+    /**
+     * 取得用戶的所有訂閱紀錄
+     * @return \Illuminate\Database\Eloquent\Relations\HasMany
+     */
+    public function subscriptions()
+    {
+        return $this->hasMany(Subscription::class);
+    }
+
+    /**
+     * 獲取用戶目前有效的訂閱
+     */
+    /**
+     * 取得用戶目前有效的訂閱（狀態為 active 且未過期）
+     * @return \Illuminate\Database\Eloquent\Relations\HasOne
+     */
+    public function activeSubscription()
+    {
+        return $this->hasOne(Subscription::class)
+                    ->where('status', 'active')
+                    ->where('end_date', '>=', now())
+                    ->latest();
+    }
+}

app/Providers/AppServiceProvider.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Providers;
+
+use Illuminate\Support\ServiceProvider;
+
+class AppServiceProvider extends ServiceProvider
+{
+    /**
+     * Register any application services.
+     */
+    public function register(): void
+    {
+        //
+    }
+
+    /**
+     * Bootstrap any application services.
+     */
+    public function boot(): void
+    {
+        //
+    }
+}

artisan

@@ -0,0 +1,15 @@
+#!/usr/bin/env php
+<?php
+
+use Symfony\Component\Console\Input\ArgvInput;
+
+define('LARAVEL_START', microtime(true));
+
+// Register the Composer autoloader...
+require __DIR__.'/vendor/autoload.php';
+
+// Bootstrap Laravel and handle the command...
+$status = (require_once __DIR__.'/bootstrap/app.php')
+    ->handleCommand(new ArgvInput);
+
+exit($status);

bootstrap/app.php

@@ -0,0 +1,19 @@
+<?php
+
+use Illuminate\Foundation\Application;
+use Illuminate\Foundation\Configuration\Exceptions;
+use Illuminate\Foundation\Configuration\Middleware;
+
+return Application::configure(basePath: dirname(__DIR__))
+    ->withRouting(
+        web: __DIR__.'/../routes/web.php',
+        api: __DIR__.'/../routes/api.php',
+        commands: __DIR__.'/../routes/console.php',
+        health: '/up',
+    )
+    ->withMiddleware(function (Middleware $middleware) {
+        //
+    })
+    ->withExceptions(function (Exceptions $exceptions) {
+        //
+    })->create();

bootstrap/cache/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

bootstrap/providers.php

@@ -0,0 +1,5 @@
+<?php
+
+return [
+    App\Providers\AppServiceProvider::class,
+];

composer.json

@@ -0,0 +1,71 @@
+{
+    "name": "laravel/laravel",
+    "type": "project",
+    "description": "The skeleton application for the Laravel framework.",
+    "keywords": ["laravel", "framework"],
+    "license": "MIT",
+    "require": {
+        "php": "^8.2",
+        "laravel/framework": "^11.0",
+        "laravel/sanctum": "^4.1",
+        "laravel/socialite": "^5.20",
+        "laravel/tinker": "^2.9"
+    },
+    "require-dev": {
+        "fakerphp/faker": "^1.23",
+        "laravel/pint": "^1.13",
+        "laravel/sail": "^1.26",
+        "mockery/mockery": "^1.6",
+        "nunomaduro/collision": "^8.0",
+        "phpunit/phpunit": "^10.5",
+        "spatie/laravel-ignition": "^2.4"
+    },
+    "autoload": {
+        "psr-4": {
+            "App\\": "app/",
+            "Database\\Factories\\": "database/factories/",
+            "Database\\Seeders\\": "database/seeders/"
+        }
+    },
+    "autoload-dev": {
+        "psr-4": {
+            "Tests\\": "tests/"
+        }
+    },
+    "scripts": {
+        "post-autoload-dump": [
+            "Illuminate\\Foundation\\ComposerScripts::postAutoloadDump",
+            "@php artisan package:discover --ansi"
+        ],
+        "post-update-cmd": [
+            "@php artisan vendor:publish --tag=laravel-assets --ansi --force"
+        ],
+        "post-root-package-install": [
+            "@php -r \"file_exists('.env') || copy('.env.example', '.env');\""
+        ],
+        "post-create-project-cmd": [
+            "@php artisan key:generate --ansi",
+            "@php -r \"file_exists('database/database.sqlite') || touch('database/database.sqlite');\"",
+            "@php artisan migrate --ansi"
+        ]
+    },
+    "extra": {
+        "branch-alias": {
+            "dev-master": "11.x-dev"
+        },
+        "laravel": {
+            "dont-discover": []
+        }
+    },
+    "config": {
+        "optimize-autoloader": true,
+        "preferred-install": "dist",
+        "sort-packages": true,
+        "allow-plugins": {
+            "pestphp/pest-plugin": true,
+            "php-http/discovery": true
+        }
+    },
+    "minimum-stability": "stable",
+    "prefer-stable": true
+}

config/app.php

@@ -0,0 +1,126 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Application Name
+    |--------------------------------------------------------------------------
+    |
+    | This value is the name of your application, which will be used when the
+    | framework needs to place the application's name in a notification or
+    | other UI elements where an application name needs to be displayed.
+    |
+    */
+
+    'name' => env('APP_NAME', 'Laravel'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Application Environment
+    |--------------------------------------------------------------------------
+    |
+    | This value determines the "environment" your application is currently
+    | running in. This may determine how you prefer to configure various
+    | services the application utilizes. Set this in your ".env" file.
+    |
+    */
+
+    'env' => env('APP_ENV', 'production'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Application Debug Mode
+    |--------------------------------------------------------------------------
+    |
+    | When your application is in debug mode, detailed error messages with
+    | stack traces will be shown on every error that occurs within your
+    | application. If disabled, a simple generic error page is shown.
+    |
+    */
+
+    'debug' => (bool) env('APP_DEBUG', false),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Application URL
+    |--------------------------------------------------------------------------
+    |
+    | This URL is used by the console to properly generate URLs when using
+    | the Artisan command line tool. You should set this to the root of
+    | the application so that it's available within Artisan commands.
+    |
+    */
+
+    'url' => env('APP_URL', 'http://localhost'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Application Timezone
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify the default timezone for your application, which
+    | will be used by the PHP date and date-time functions. The timezone
+    | is set to "UTC" by default as it is suitable for most use cases.
+    |
+    */
+
+    'timezone' => env('APP_TIMEZONE', 'UTC'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Application Locale Configuration
+    |--------------------------------------------------------------------------
+    |
+    | The application locale determines the default locale that will be used
+    | by Laravel's translation / localization methods. This option can be
+    | set to any locale for which you plan to have translation strings.
+    |
+    */
+
+    'locale' => env('APP_LOCALE', 'en'),
+
+    'fallback_locale' => env('APP_FALLBACK_LOCALE', 'en'),
+
+    'faker_locale' => env('APP_FAKER_LOCALE', 'en_US'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Encryption Key
+    |--------------------------------------------------------------------------
+    |
+    | This key is utilized by Laravel's encryption services and should be set
+    | to a random, 32 character string to ensure that all encrypted values
+    | are secure. You should do this prior to deploying the application.
+    |
+    */
+
+    'cipher' => 'AES-256-CBC',
+
+    'key' => env('APP_KEY'),
+
+    'previous_keys' => [
+        ...array_filter(
+            explode(',', env('APP_PREVIOUS_KEYS', ''))
+        ),
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Maintenance Mode Driver
+    |--------------------------------------------------------------------------
+    |
+    | These configuration options determine the driver used to determine and
+    | manage Laravel's "maintenance mode" status. The "cache" driver will
+    | allow maintenance mode to be controlled across multiple machines.
+    |
+    | Supported drivers: "file", "cache"
+    |
+    */
+
+    'maintenance' => [
+        'driver' => env('APP_MAINTENANCE_DRIVER', 'file'),
+        'store' => env('APP_MAINTENANCE_STORE', 'database'),
+    ],
+
+];

config/auth.php

@@ -0,0 +1,115 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Authentication Defaults
+    |--------------------------------------------------------------------------
+    |
+    | This option defines the default authentication "guard" and password
+    | reset "broker" for your application. You may change these values
+    | as required, but they're a perfect start for most applications.
+    |
+    */
+
+    'defaults' => [
+        'guard' => env('AUTH_GUARD', 'web'),
+        'passwords' => env('AUTH_PASSWORD_BROKER', 'users'),
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Authentication Guards
+    |--------------------------------------------------------------------------
+    |
+    | Next, you may define every authentication guard for your application.
+    | Of course, a great default configuration has been defined for you
+    | which utilizes session storage plus the Eloquent user provider.
+    |
+    | All authentication guards have a user provider, which defines how the
+    | users are actually retrieved out of your database or other storage
+    | system used by the application. Typically, Eloquent is utilized.
+    |
+    | Supported: "session"
+    |
+    */
+
+    'guards' => [
+        'web' => [
+            'driver' => 'session',
+            'provider' => 'users',
+        ],
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | User Providers
+    |--------------------------------------------------------------------------
+    |
+    | All authentication guards have a user provider, which defines how the
+    | users are actually retrieved out of your database or other storage
+    | system used by the application. Typically, Eloquent is utilized.
+    |
+    | If you have multiple user tables or models you may configure multiple
+    | providers to represent the model / table. These providers may then
+    | be assigned to any extra authentication guards you have defined.
+    |
+    | Supported: "database", "eloquent"
+    |
+    */
+
+    'providers' => [
+        'users' => [
+            'driver' => 'eloquent',
+            'model' => env('AUTH_MODEL', App\Models\User::class),
+        ],
+
+        // 'users' => [
+        //     'driver' => 'database',
+        //     'table' => 'users',
+        // ],
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Resetting Passwords
+    |--------------------------------------------------------------------------
+    |
+    | These configuration options specify the behavior of Laravel's password
+    | reset functionality, including the table utilized for token storage
+    | and the user provider that is invoked to actually retrieve users.
+    |
+    | The expiry time is the number of minutes that each reset token will be
+    | considered valid. This security feature keeps tokens short-lived so
+    | they have less time to be guessed. You may change this as needed.
+    |
+    | The throttle setting is the number of seconds a user must wait before
+    | generating more password reset tokens. This prevents the user from
+    | quickly generating a very large amount of password reset tokens.
+    |
+    */
+
+    'passwords' => [
+        'users' => [
+            'provider' => 'users',
+            'table' => env('AUTH_PASSWORD_RESET_TOKEN_TABLE', 'password_reset_tokens'),
+            'expire' => 60,
+            'throttle' => 60,
+        ],
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Password Confirmation Timeout
+    |--------------------------------------------------------------------------
+    |
+    | Here you may define the amount of seconds before a password confirmation
+    | window expires and users are asked to re-enter their password via the
+    | confirmation screen. By default, the timeout lasts for three hours.
+    |
+    */
+
+    'password_timeout' => env('AUTH_PASSWORD_TIMEOUT', 10800),
+
+];

config/cache.php

@@ -0,0 +1,107 @@
+<?php
+
+use Illuminate\Support\Str;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Cache Store
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the default cache store that will be used by the
+    | framework. This connection is utilized if another isn't explicitly
+    | specified when running a cache operation inside the application.
+    |
+    */
+
+    'default' => env('CACHE_STORE', 'database'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Cache Stores
+    |--------------------------------------------------------------------------
+    |
+    | Here you may define all of the cache "stores" for your application as
+    | well as their drivers. You may even define multiple stores for the
+    | same cache driver to group types of items stored in your caches.
+    |
+    | Supported drivers: "apc", "array", "database", "file", "memcached",
+    |                    "redis", "dynamodb", "octane", "null"
+    |
+    */
+
+    'stores' => [
+
+        'array' => [
+            'driver' => 'array',
+            'serialize' => false,
+        ],
+
+        'database' => [
+            'driver' => 'database',
+            'table' => env('DB_CACHE_TABLE', 'cache'),
+            'connection' => env('DB_CACHE_CONNECTION', null),
+            'lock_connection' => env('DB_CACHE_LOCK_CONNECTION', null),
+        ],
+
+        'file' => [
+            'driver' => 'file',
+            'path' => storage_path('framework/cache/data'),
+            'lock_path' => storage_path('framework/cache/data'),
+        ],
+
+        'memcached' => [
+            'driver' => 'memcached',
+            'persistent_id' => env('MEMCACHED_PERSISTENT_ID'),
+            'sasl' => [
+                env('MEMCACHED_USERNAME'),
+                env('MEMCACHED_PASSWORD'),
+            ],
+            'options' => [
+                // Memcached::OPT_CONNECT_TIMEOUT => 2000,
+            ],
+            'servers' => [
+                [
+                    'host' => env('MEMCACHED_HOST', '127.0.0.1'),
+                    'port' => env('MEMCACHED_PORT', 11211),
+                    'weight' => 100,
+                ],
+            ],
+        ],
+
+        'redis' => [
+            'driver' => 'redis',
+            'connection' => env('REDIS_CACHE_CONNECTION', 'cache'),
+            'lock_connection' => env('REDIS_CACHE_LOCK_CONNECTION', 'default'),
+        ],
+
+        'dynamodb' => [
+            'driver' => 'dynamodb',
+            'key' => env('AWS_ACCESS_KEY_ID'),
+            'secret' => env('AWS_SECRET_ACCESS_KEY'),
+            'region' => env('AWS_DEFAULT_REGION', 'us-east-1'),
+            'table' => env('DYNAMODB_CACHE_TABLE', 'cache'),
+            'endpoint' => env('DYNAMODB_ENDPOINT'),
+        ],
+
+        'octane' => [
+            'driver' => 'octane',
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Cache Key Prefix
+    |--------------------------------------------------------------------------
+    |
+    | When utilizing the APC, database, memcached, Redis, and DynamoDB cache
+    | stores, there might be other applications using the same cache. For
+    | that reason, you may prefix every cache key to avoid collisions.
+    |
+    */
+
+    'prefix' => env('CACHE_PREFIX', Str::slug(env('APP_NAME', 'laravel'), '_').'_cache_'),
+
+];

config/database.php

@@ -0,0 +1,170 @@
+<?php
+
+use Illuminate\Support\Str;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Database Connection Name
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify which of the database connections below you wish
+    | to use as your default connection for database operations. This is
+    | the connection which will be utilized unless another connection
+    | is explicitly specified when you execute a query / statement.
+    |
+    */
+
+    'default' => env('DB_CONNECTION', 'sqlite'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Database Connections
+    |--------------------------------------------------------------------------
+    |
+    | Below are all of the database connections defined for your application.
+    | An example configuration is provided for each database system which
+    | is supported by Laravel. You're free to add / remove connections.
+    |
+    */
+
+    'connections' => [
+
+        'sqlite' => [
+            'driver' => 'sqlite',
+            'url' => env('DB_URL'),
+            'database' => env('DB_DATABASE', database_path('database.sqlite')),
+            'prefix' => '',
+            'foreign_key_constraints' => env('DB_FOREIGN_KEYS', true),
+        ],
+
+        'mysql' => [
+            'driver' => 'mysql',
+            'url' => env('DB_URL'),
+            'host' => env('DB_HOST', '127.0.0.1'),
+            'port' => env('DB_PORT', '3306'),
+            'database' => env('DB_DATABASE', 'laravel'),
+            'username' => env('DB_USERNAME', 'root'),
+            'password' => env('DB_PASSWORD', ''),
+            'unix_socket' => env('DB_SOCKET', ''),
+            'charset' => env('DB_CHARSET', 'utf8mb4'),
+            'collation' => env('DB_COLLATION', 'utf8mb4_0900_ai_ci'),
+            'prefix' => '',
+            'prefix_indexes' => true,
+            'strict' => true,
+            'engine' => null,
+            'options' => extension_loaded('pdo_mysql') ? array_filter([
+                PDO::MYSQL_ATTR_SSL_CA => env('MYSQL_ATTR_SSL_CA'),
+            ]) : [],
+        ],
+
+        'mariadb' => [
+            'driver' => 'mariadb',
+            'url' => env('DB_URL'),
+            'host' => env('DB_HOST', '127.0.0.1'),
+            'port' => env('DB_PORT', '3306'),
+            'database' => env('DB_DATABASE', 'laravel'),
+            'username' => env('DB_USERNAME', 'root'),
+            'password' => env('DB_PASSWORD', ''),
+            'unix_socket' => env('DB_SOCKET', ''),
+            'charset' => env('DB_CHARSET', 'utf8mb4'),
+            'collation' => env('DB_COLLATION', 'utf8mb4_uca1400_ai_ci'),
+            'prefix' => '',
+            'prefix_indexes' => true,
+            'strict' => true,
+            'engine' => null,
+            'options' => extension_loaded('pdo_mysql') ? array_filter([
+                PDO::MYSQL_ATTR_SSL_CA => env('MYSQL_ATTR_SSL_CA'),
+            ]) : [],
+        ],
+
+        'pgsql' => [
+            'driver' => 'pgsql',
+            'url' => env('DB_URL'),
+            'host' => env('DB_HOST', '127.0.0.1'),
+            'port' => env('DB_PORT', '5432'),
+            'database' => env('DB_DATABASE', 'laravel'),
+            'username' => env('DB_USERNAME', 'root'),
+            'password' => env('DB_PASSWORD', ''),
+            'charset' => env('DB_CHARSET', 'utf8'),
+            'prefix' => '',
+            'prefix_indexes' => true,
+            'search_path' => 'public',
+            'sslmode' => 'prefer',
+        ],
+
+        'sqlsrv' => [
+            'driver' => 'sqlsrv',
+            'url' => env('DB_URL'),
+            'host' => env('DB_HOST', 'localhost'),
+            'port' => env('DB_PORT', '1433'),
+            'database' => env('DB_DATABASE', 'laravel'),
+            'username' => env('DB_USERNAME', 'root'),
+            'password' => env('DB_PASSWORD', ''),
+            'charset' => env('DB_CHARSET', 'utf8'),
+            'prefix' => '',
+            'prefix_indexes' => true,
+            // 'encrypt' => env('DB_ENCRYPT', 'yes'),
+            // 'trust_server_certificate' => env('DB_TRUST_SERVER_CERTIFICATE', 'false'),
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Migration Repository Table
+    |--------------------------------------------------------------------------
+    |
+    | This table keeps track of all the migrations that have already run for
+    | your application. Using this information, we can determine which of
+    | the migrations on disk haven't actually been run on the database.
+    |
+    */
+
+    'migrations' => [
+        'table' => 'migrations',
+        'update_date_on_publish' => true,
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Redis Databases
+    |--------------------------------------------------------------------------
+    |
+    | Redis is an open source, fast, and advanced key-value store that also
+    | provides a richer body of commands than a typical key-value system
+    | such as Memcached. You may define your connection settings here.
+    |
+    */
+
+    'redis' => [
+
+        'client' => env('REDIS_CLIENT', 'phpredis'),
+
+        'options' => [
+            'cluster' => env('REDIS_CLUSTER', 'redis'),
+            'prefix' => env('REDIS_PREFIX', Str::slug(env('APP_NAME', 'laravel'), '_').'_database_'),
+        ],
+
+        'default' => [
+            'url' => env('REDIS_URL'),
+            'host' => env('REDIS_HOST', '127.0.0.1'),
+            'username' => env('REDIS_USERNAME'),
+            'password' => env('REDIS_PASSWORD'),
+            'port' => env('REDIS_PORT', '6379'),
+            'database' => env('REDIS_DB', '0'),
+        ],
+
+        'cache' => [
+            'url' => env('REDIS_URL'),
+            'host' => env('REDIS_HOST', '127.0.0.1'),
+            'username' => env('REDIS_USERNAME'),
+            'password' => env('REDIS_PASSWORD'),
+            'port' => env('REDIS_PORT', '6379'),
+            'database' => env('REDIS_CACHE_DB', '1'),
+        ],
+
+    ],
+
+];

config/filesystems.php

@@ -0,0 +1,76 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Filesystem Disk
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify the default filesystem disk that should be used
+    | by the framework. The "local" disk, as well as a variety of cloud
+    | based disks are available to your application for file storage.
+    |
+    */
+
+    'default' => env('FILESYSTEM_DISK', 'local'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Filesystem Disks
+    |--------------------------------------------------------------------------
+    |
+    | Below you may configure as many filesystem disks as necessary, and you
+    | may even configure multiple disks for the same driver. Examples for
+    | most supported storage drivers are configured here for reference.
+    |
+    | Supported Drivers: "local", "ftp", "sftp", "s3"
+    |
+    */
+
+    'disks' => [
+
+        'local' => [
+            'driver' => 'local',
+            'root' => storage_path('app'),
+            'throw' => false,
+        ],
+
+        'public' => [
+            'driver' => 'local',
+            'root' => storage_path('app/public'),
+            'url' => env('APP_URL').'/storage',
+            'visibility' => 'public',
+            'throw' => false,
+        ],
+
+        's3' => [
+            'driver' => 's3',
+            'key' => env('AWS_ACCESS_KEY_ID'),
+            'secret' => env('AWS_SECRET_ACCESS_KEY'),
+            'region' => env('AWS_DEFAULT_REGION'),
+            'bucket' => env('AWS_BUCKET'),
+            'url' => env('AWS_URL'),
+            'endpoint' => env('AWS_ENDPOINT'),
+            'use_path_style_endpoint' => env('AWS_USE_PATH_STYLE_ENDPOINT', false),
+            'throw' => false,
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Symbolic Links
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure the symbolic links that will be created when the
+    | `storage:link` Artisan command is executed. The array keys should be
+    | the locations of the links and the values should be their targets.
+    |
+    */
+
+    'links' => [
+        public_path('storage') => storage_path('app/public'),
+    ],
+
+];

config/logging.php

@@ -0,0 +1,132 @@
+<?php
+
+use Monolog\Handler\NullHandler;
+use Monolog\Handler\StreamHandler;
+use Monolog\Handler\SyslogUdpHandler;
+use Monolog\Processor\PsrLogMessageProcessor;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Log Channel
+    |--------------------------------------------------------------------------
+    |
+    | This option defines the default log channel that is utilized to write
+    | messages to your logs. The value provided here should match one of
+    | the channels present in the list of "channels" configured below.
+    |
+    */
+
+    'default' => env('LOG_CHANNEL', 'stack'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Deprecations Log Channel
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the log channel that should be used to log warnings
+    | regarding deprecated PHP and library features. This allows you to get
+    | your application ready for upcoming major versions of dependencies.
+    |
+    */
+
+    'deprecations' => [
+        'channel' => env('LOG_DEPRECATIONS_CHANNEL', 'null'),
+        'trace' => env('LOG_DEPRECATIONS_TRACE', false),
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Log Channels
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure the log channels for your application. Laravel
+    | utilizes the Monolog PHP logging library, which includes a variety
+    | of powerful log handlers and formatters that you're free to use.
+    |
+    | Available Drivers: "single", "daily", "slack", "syslog",
+    |                    "errorlog", "monolog", "custom", "stack"
+    |
+    */
+
+    'channels' => [
+
+        'stack' => [
+            'driver' => 'stack',
+            'channels' => explode(',', env('LOG_STACK', 'single')),
+            'ignore_exceptions' => false,
+        ],
+
+        'single' => [
+            'driver' => 'single',
+            'path' => storage_path('logs/laravel.log'),
+            'level' => env('LOG_LEVEL', 'debug'),
+            'replace_placeholders' => true,
+        ],
+
+        'daily' => [
+            'driver' => 'daily',
+            'path' => storage_path('logs/laravel.log'),
+            'level' => env('LOG_LEVEL', 'debug'),
+            'days' => env('LOG_DAILY_DAYS', 14),
+            'replace_placeholders' => true,
+        ],
+
+        'slack' => [
+            'driver' => 'slack',
+            'url' => env('LOG_SLACK_WEBHOOK_URL'),
+            'username' => env('LOG_SLACK_USERNAME', 'Laravel Log'),
+            'emoji' => env('LOG_SLACK_EMOJI', ':boom:'),
+            'level' => env('LOG_LEVEL', 'critical'),
+            'replace_placeholders' => true,
+        ],
+
+        'papertrail' => [
+            'driver' => 'monolog',
+            'level' => env('LOG_LEVEL', 'debug'),
+            'handler' => env('LOG_PAPERTRAIL_HANDLER', SyslogUdpHandler::class),
+            'handler_with' => [
+                'host' => env('PAPERTRAIL_URL'),
+                'port' => env('PAPERTRAIL_PORT'),
+                'connectionString' => 'tls://'.env('PAPERTRAIL_URL').':'.env('PAPERTRAIL_PORT'),
+            ],
+            'processors' => [PsrLogMessageProcessor::class],
+        ],
+
+        'stderr' => [
+            'driver' => 'monolog',
+            'level' => env('LOG_LEVEL', 'debug'),
+            'handler' => StreamHandler::class,
+            'formatter' => env('LOG_STDERR_FORMATTER'),
+            'with' => [
+                'stream' => 'php://stderr',
+            ],
+            'processors' => [PsrLogMessageProcessor::class],
+        ],
+
+        'syslog' => [
+            'driver' => 'syslog',
+            'level' => env('LOG_LEVEL', 'debug'),
+            'facility' => env('LOG_SYSLOG_FACILITY', LOG_USER),
+            'replace_placeholders' => true,
+        ],
+
+        'errorlog' => [
+            'driver' => 'errorlog',
+            'level' => env('LOG_LEVEL', 'debug'),
+            'replace_placeholders' => true,
+        ],
+
+        'null' => [
+            'driver' => 'monolog',
+            'handler' => NullHandler::class,
+        ],
+
+        'emergency' => [
+            'path' => storage_path('logs/laravel.log'),
+        ],
+
+    ],
+
+];

config/mail.php

@@ -0,0 +1,103 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Mailer
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the default mailer that is used to send all email
+    | messages unless another mailer is explicitly specified when sending
+    | the message. All additional mailers can be configured within the
+    | "mailers" array. Examples of each type of mailer are provided.
+    |
+    */
+
+    'default' => env('MAIL_MAILER', 'log'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Mailer Configurations
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure all of the mailers used by your application plus
+    | their respective settings. Several examples have been configured for
+    | you and you are free to add your own as your application requires.
+    |
+    | Laravel supports a variety of mail "transport" drivers that can be used
+    | when delivering an email. You may specify which one you're using for
+    | your mailers below. You may also add additional mailers if needed.
+    |
+    | Supported: "smtp", "sendmail", "mailgun", "ses", "ses-v2",
+    |            "postmark", "log", "array", "failover", "roundrobin"
+    |
+    */
+
+    'mailers' => [
+
+        'smtp' => [
+            'transport' => 'smtp',
+            'url' => env('MAIL_URL'),
+            'host' => env('MAIL_HOST', '127.0.0.1'),
+            'port' => env('MAIL_PORT', 2525),
+            'encryption' => env('MAIL_ENCRYPTION', 'tls'),
+            'username' => env('MAIL_USERNAME'),
+            'password' => env('MAIL_PASSWORD'),
+            'timeout' => null,
+            'local_domain' => env('MAIL_EHLO_DOMAIN'),
+        ],
+
+        'ses' => [
+            'transport' => 'ses',
+        ],
+
+        'postmark' => [
+            'transport' => 'postmark',
+            // 'message_stream_id' => env('POSTMARK_MESSAGE_STREAM_ID'),
+            // 'client' => [
+            //     'timeout' => 5,
+            // ],
+        ],
+
+        'sendmail' => [
+            'transport' => 'sendmail',
+            'path' => env('MAIL_SENDMAIL_PATH', '/usr/sbin/sendmail -bs -i'),
+        ],
+
+        'log' => [
+            'transport' => 'log',
+            'channel' => env('MAIL_LOG_CHANNEL'),
+        ],
+
+        'array' => [
+            'transport' => 'array',
+        ],
+
+        'failover' => [
+            'transport' => 'failover',
+            'mailers' => [
+                'smtp',
+                'log',
+            ],
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Global "From" Address
+    |--------------------------------------------------------------------------
+    |
+    | You may wish for all emails sent by your application to be sent from
+    | the same address. Here you may specify a name and address that is
+    | used globally for all emails that are sent by your application.
+    |
+    */
+
+    'from' => [
+        'address' => env('MAIL_FROM_ADDRESS', 'hello@example.com'),
+        'name' => env('MAIL_FROM_NAME', 'Example'),
+    ],
+
+];

config/queue.php

@@ -0,0 +1,112 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Queue Connection Name
+    |--------------------------------------------------------------------------
+    |
+    | Laravel's queue supports a variety of backends via a single, unified
+    | API, giving you convenient access to each backend using identical
+    | syntax for each. The default queue connection is defined below.
+    |
+    */
+
+    'default' => env('QUEUE_CONNECTION', 'database'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Queue Connections
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure the connection options for every queue backend
+    | used by your application. An example configuration is provided for
+    | each backend supported by Laravel. You're also free to add more.
+    |
+    | Drivers: "sync", "database", "beanstalkd", "sqs", "redis", "null"
+    |
+    */
+
+    'connections' => [
+
+        'sync' => [
+            'driver' => 'sync',
+        ],
+
+        'database' => [
+            'driver' => 'database',
+            'connection' => env('DB_QUEUE_CONNECTION', null),
+            'table' => env('DB_QUEUE_TABLE', 'jobs'),
+            'queue' => env('DB_QUEUE', 'default'),
+            'retry_after' => env('DB_QUEUE_RETRY_AFTER', 90),
+            'after_commit' => false,
+        ],
+
+        'beanstalkd' => [
+            'driver' => 'beanstalkd',
+            'host' => env('BEANSTALKD_QUEUE_HOST', 'localhost'),
+            'queue' => env('BEANSTALKD_QUEUE', 'default'),
+            'retry_after' => env('BEANSTALKD_QUEUE_RETRY_AFTER', 90),
+            'block_for' => 0,
+            'after_commit' => false,
+        ],
+
+        'sqs' => [
+            'driver' => 'sqs',
+            'key' => env('AWS_ACCESS_KEY_ID'),
+            'secret' => env('AWS_SECRET_ACCESS_KEY'),
+            'prefix' => env('SQS_PREFIX', 'https://sqs.us-east-1.amazonaws.com/your-account-id'),
+            'queue' => env('SQS_QUEUE', 'default'),
+            'suffix' => env('SQS_SUFFIX'),
+            'region' => env('AWS_DEFAULT_REGION', 'us-east-1'),
+            'after_commit' => false,
+        ],
+
+        'redis' => [
+            'driver' => 'redis',
+            'connection' => env('REDIS_QUEUE_CONNECTION', 'default'),
+            'queue' => env('REDIS_QUEUE', 'default'),
+            'retry_after' => env('REDIS_QUEUE_RETRY_AFTER', 90),
+            'block_for' => null,
+            'after_commit' => false,
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Job Batching
+    |--------------------------------------------------------------------------
+    |
+    | The following options configure the database and table that store job
+    | batching information. These options can be updated to any database
+    | connection and table which has been defined by your application.
+    |
+    */
+
+    'batching' => [
+        'database' => env('DB_CONNECTION', 'sqlite'),
+        'table' => 'job_batches',
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Failed Queue Jobs
+    |--------------------------------------------------------------------------
+    |
+    | These options configure the behavior of failed queue job logging so you
+    | can control how and where failed jobs are stored. Laravel ships with
+    | support for storing failed jobs in a simple file or in a database.
+    |
+    | Supported drivers: "database-uuids", "dynamodb", "file", "null"
+    |
+    */
+
+    'failed' => [
+        'driver' => env('QUEUE_FAILED_DRIVER', 'database-uuids'),
+        'database' => env('DB_CONNECTION', 'sqlite'),
+        'table' => 'failed_jobs',
+    ],
+
+];

config/sanctum.php

@@ -0,0 +1,84 @@
+<?php
+
+use Laravel\Sanctum\Sanctum;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Stateful Domains
+    |--------------------------------------------------------------------------
+    |
+    | Requests from the following domains / hosts will receive stateful API
+    | authentication cookies. Typically, these should include your local
+    | and production domains which access your API via a frontend SPA.
+    |
+    */
+
+    'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', sprintf(
+        '%s%s',
+        'localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1',
+        Sanctum::currentApplicationUrlWithPort(),
+        // Sanctum::currentRequestHost(),
+    ))),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Sanctum Guards
+    |--------------------------------------------------------------------------
+    |
+    | This array contains the authentication guards that will be checked when
+    | Sanctum is trying to authenticate a request. If none of these guards
+    | are able to authenticate the request, Sanctum will use the bearer
+    | token that's present on an incoming request for authentication.
+    |
+    */
+
+    'guard' => ['web'],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Expiration Minutes
+    |--------------------------------------------------------------------------
+    |
+    | This value controls the number of minutes until an issued token will be
+    | considered expired. This will override any values set in the token's
+    | "expires_at" attribute, but first-party sessions are not affected.
+    |
+    */
+
+    'expiration' => null,
+
+    /*
+    |--------------------------------------------------------------------------
+    | Token Prefix
+    |--------------------------------------------------------------------------
+    |
+    | Sanctum can prefix new tokens in order to take advantage of numerous
+    | security scanning initiatives maintained by open source platforms
+    | that notify developers if they commit tokens into repositories.
+    |
+    | See: https://docs.github.com/en/code-security/secret-scanning/about-secret-scanning
+    |
+    */
+
+    'token_prefix' => env('SANCTUM_TOKEN_PREFIX', ''),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Sanctum Middleware
+    |--------------------------------------------------------------------------
+    |
+    | When authenticating your first-party SPA with Sanctum you may need to
+    | customize some of the middleware Sanctum uses while processing the
+    | request. You may change the middleware listed below as required.
+    |
+    */
+
+    'middleware' => [
+        'authenticate_session' => Laravel\Sanctum\Http\Middleware\AuthenticateSession::class,
+        'encrypt_cookies' => Illuminate\Cookie\Middleware\EncryptCookies::class,
+        'validate_csrf_token' => Illuminate\Foundation\Http\Middleware\ValidateCsrfToken::class,
+    ],
+
+];

config/services.php

@@ -0,0 +1,40 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Third Party Services
+    |--------------------------------------------------------------------------
+    |
+    | This file is for storing the credentials for third party services such
+    | as Mailgun, Postmark, AWS and more. This file provides the de facto
+    | location for this type of information, allowing packages to have
+    | a conventional file to locate the various service credentials.
+    |
+    */
+
+    'postmark' => [
+        'token' => env('POSTMARK_TOKEN'),
+    ],
+
+    'ses' => [
+        'key' => env('AWS_ACCESS_KEY_ID'),
+        'secret' => env('AWS_SECRET_ACCESS_KEY'),
+        'region' => env('AWS_DEFAULT_REGION', 'us-east-1'),
+    ],
+
+    'slack' => [
+        'notifications' => [
+            'bot_user_oauth_token' => env('SLACK_BOT_USER_OAUTH_TOKEN'),
+            'channel' => env('SLACK_BOT_USER_DEFAULT_CHANNEL'),
+        ],
+    ],
+
+    'google' => [
+        'client_id' => env('GOOGLE_CLIENT_ID'),
+        'client_secret' => env('GOOGLE_CLIENT_SECRET'),
+        'redirect' => env('GOOGLE_REDIRECT_URI', '/api/auth/google/callback'),
+    ],
+
+];

config/session.php

@@ -0,0 +1,218 @@
+<?php
+
+use Illuminate\Support\Str;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Session Driver
+    |--------------------------------------------------------------------------
+    |
+    | This option determines the default session driver that is utilized for
+    | incoming requests. Laravel supports a variety of storage options to
+    | persist session data. Database storage is a great default choice.
+    |
+    | Supported: "file", "cookie", "database", "apc",
+    |            "memcached", "redis", "dynamodb", "array"
+    |
+    */
+
+    'driver' => env('SESSION_DRIVER', 'database'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Lifetime
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify the number of minutes that you wish the session
+    | to be allowed to remain idle before it expires. If you want them
+    | to expire immediately when the browser is closed then you may
+    | indicate that via the expire_on_close configuration option.
+    |
+    */
+
+    'lifetime' => env('SESSION_LIFETIME', 120),
+
+    'expire_on_close' => env('SESSION_EXPIRE_ON_CLOSE', false),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Encryption
+    |--------------------------------------------------------------------------
+    |
+    | This option allows you to easily specify that all of your session data
+    | should be encrypted before it's stored. All encryption is performed
+    | automatically by Laravel and you may use the session like normal.
+    |
+    */
+
+    'encrypt' => env('SESSION_ENCRYPT', false),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session File Location
+    |--------------------------------------------------------------------------
+    |
+    | When utilizing the "file" session driver, the session files are placed
+    | on disk. The default storage location is defined here; however, you
+    | are free to provide another location where they should be stored.
+    |
+    */
+
+    'files' => storage_path('framework/sessions'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Database Connection
+    |--------------------------------------------------------------------------
+    |
+    | When using the "database" or "redis" session drivers, you may specify a
+    | connection that should be used to manage these sessions. This should
+    | correspond to a connection in your database configuration options.
+    |
+    */
+
+    'connection' => env('SESSION_CONNECTION'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Database Table
+    |--------------------------------------------------------------------------
+    |
+    | When using the "database" session driver, you may specify the table to
+    | be used to store sessions. Of course, a sensible default is defined
+    | for you; however, you're welcome to change this to another table.
+    |
+    */
+
+    'table' => env('SESSION_TABLE', 'sessions'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Cache Store
+    |--------------------------------------------------------------------------
+    |
+    | When using one of the framework's cache driven session backends, you may
+    | define the cache store which should be used to store the session data
+    | between requests. This must match one of your defined cache stores.
+    |
+    | Affects: "apc", "dynamodb", "memcached", "redis"
+    |
+    */
+
+    'store' => env('SESSION_STORE'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Sweeping Lottery
+    |--------------------------------------------------------------------------
+    |
+    | Some session drivers must manually sweep their storage location to get
+    | rid of old sessions from storage. Here are the chances that it will
+    | happen on a given request. By default, the odds are 2 out of 100.
+    |
+    */
+
+    'lottery' => [2, 100],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Cookie Name
+    |--------------------------------------------------------------------------
+    |
+    | Here you may change the name of the session cookie that is created by
+    | the framework. Typically, you should not need to change this value
+    | since doing so does not grant a meaningful security improvement.
+    |
+    |
+    */
+
+    'cookie' => env(
+        'SESSION_COOKIE',
+        Str::slug(env('APP_NAME', 'laravel'), '_').'_session'
+    ),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Cookie Path
+    |--------------------------------------------------------------------------
+    |
+    | The session cookie path determines the path for which the cookie will
+    | be regarded as available. Typically, this will be the root path of
+    | your application, but you're free to change this when necessary.
+    |
+    */
+
+    'path' => env('SESSION_PATH', '/'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Cookie Domain
+    |--------------------------------------------------------------------------
+    |
+    | This value determines the domain and subdomains the session cookie is
+    | available to. By default, the cookie will be available to the root
+    | domain and all subdomains. Typically, this shouldn't be changed.
+    |
+    */
+
+    'domain' => env('SESSION_DOMAIN'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | HTTPS Only Cookies
+    |--------------------------------------------------------------------------
+    |
+    | By setting this option to true, session cookies will only be sent back
+    | to the server if the browser has a HTTPS connection. This will keep
+    | the cookie from being sent to you when it can't be done securely.
+    |
+    */
+
+    'secure' => env('SESSION_SECURE_COOKIE'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | HTTP Access Only
+    |--------------------------------------------------------------------------
+    |
+    | Setting this value to true will prevent JavaScript from accessing the
+    | value of the cookie and the cookie will only be accessible through
+    | the HTTP protocol. It's unlikely you should disable this option.
+    |
+    */
+
+    'http_only' => env('SESSION_HTTP_ONLY', true),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Same-Site Cookies
+    |--------------------------------------------------------------------------
+    |
+    | This option determines how your cookies behave when cross-site requests
+    | take place, and can be used to mitigate CSRF attacks. By default, we
+    | will set this value to "lax" to permit secure cross-site requests.
+    |
+    | See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#samesitesamesite-value
+    |
+    | Supported: "lax", "strict", "none", null
+    |
+    */
+
+    'same_site' => env('SESSION_SAME_SITE', 'lax'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Partitioned Cookies
+    |--------------------------------------------------------------------------
+    |
+    | Setting this value to true will tie the cookie to the top-level site for
+    | a cross-site context. Partitioned cookies are accepted by the browser
+    | when flagged "secure" and the Same-Site attribute is set to "none".
+    |
+    */
+
+    'partitioned' => env('SESSION_PARTITIONED_COOKIE', false),
+
+];

database/.gitignore

@@ -0,0 +1 @@
+*.sqlite*

database/factories/UserFactory.php

@@ -0,0 +1,44 @@
+<?php
+
+namespace Database\Factories;
+
+use Illuminate\Database\Eloquent\Factories\Factory;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Str;
+
+/**
+ * @extends \Illuminate\Database\Eloquent\Factories\Factory<\App\Models\User>
+ */
+class UserFactory extends Factory
+{
+    /**
+     * The current password being used by the factory.
+     */
+    protected static ?string $password;
+
+    /**
+     * Define the model's default state.
+     *
+     * @return array<string, mixed>
+     */
+    public function definition(): array
+    {
+        return [
+            'name' => fake()->name(),
+            'email' => fake()->unique()->safeEmail(),
+            'email_verified_at' => now(),
+            'password' => static::$password ??= Hash::make('password'),
+            'remember_token' => Str::random(10),
+        ];
+    }
+
+    /**
+     * Indicate that the model's email address should be unverified.
+     */
+    public function unverified(): static
+    {
+        return $this->state(fn (array $attributes) => [
+            'email_verified_at' => null,
+        ]);
+    }
+}

database/migrations/2025_05_06_065906_create_orgin_table.php

@@ -0,0 +1,106 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        // 使用者基本表
+        Schema::create('users', function (Blueprint $table) {
+            $table->id(); // 使用者主鍵ID
+            $table->string('name'); // 使用者姓名
+            $table->string('email')->unique(); // 使用者電子郵件，唯一值
+            $table->timestamp('email_verified_at')->nullable(); // 驗證郵件時間
+            $table->string('password'); // 密碼
+            $table->string('phone')->nullable(); // 電話號碼，可為空
+            $table->enum('role', ['admin', 'coach', 'member'])->default('member'); // 角色：管理員、教練、會員
+            $table->boolean('is_active')->default(true); // 是否啟用
+            $table->rememberToken(); // 記住我 token
+            $table->timestamps(); // 建立與更新時間
+        });
+
+        // 管理員資訊表
+        Schema::create('admin_profiles', function (Blueprint $table) {
+            $table->id(); // 管理員資訊主鍵ID
+            $table->foreignId('user_id')->constrained()->onDelete('cascade'); // 關聯 users 表
+            $table->string('position')->nullable(); // 職位
+            $table->string('department')->nullable(); // 部門
+            $table->text('permissions')->nullable(); // 可使用JSON儲存權限
+            $table->timestamps(); // 建立與更新時間
+        });
+
+        // 教練資訊表
+        Schema::create('coach_profiles', function (Blueprint $table) {
+            $table->id(); // 教練資訊主鍵ID
+            $table->foreignId('user_id')->constrained()->onDelete('cascade'); // 關聯 users 表
+            $table->text('bio')->nullable(); // 教練簡介
+            $table->string('expertise')->nullable(); // 專長領域
+            $table->string('certification')->nullable(); // 認證資訊
+            $table->string('avatar')->nullable(); // 頭像
+            $table->boolean('is_featured')->default(false); // 是否為特色教練
+            $table->timestamps(); // 建立與更新時間
+        });
+        
+        // 會員資訊表
+        Schema::create('member_profiles', function (Blueprint $table) {
+            $table->id(); // 會員資訊主鍵ID
+            $table->foreignId('user_id')->constrained()->onDelete('cascade'); // 關聯 users 表
+            $table->date('birthday')->nullable(); // 生日
+            $table->enum('gender', ['male', 'female', 'other'])->nullable(); // 性別
+            $table->text('address')->nullable(); // 地址
+            $table->string('emergency_contact')->nullable(); // 緊急聯絡人
+            $table->string('emergency_phone')->nullable(); // 緊急聯絡電話
+            $table->timestamps(); // 建立與更新時間
+        });
+        
+        // 會員方案表
+        Schema::create('plans', function (Blueprint $table) {
+            $table->id(); // 方案主鍵ID
+            $table->string('name'); // 方案名稱
+            $table->text('description')->nullable(); // 方案描述
+            $table->decimal('price', 10, 2); // 價格
+            $table->integer('duration_days'); // 天數
+            $table->boolean('is_active')->default(true); // 是否啟用
+            $table->timestamps(); // 建立與更新時間
+        });
+        
+        // 會員訂閱表
+        Schema::create('subscriptions', function (Blueprint $table) {
+            $table->id(); // 訂閱主鍵ID
+            $table->foreignId('user_id')->constrained()->onDelete('cascade'); // 關聯 users 表
+            $table->foreignId('plan_id')->constrained(); // 關聯 plans 表
+            $table->date('start_date'); // 訂閱開始日期
+            $table->date('end_date'); // 訂閱結束日期
+            $table->enum('status', ['active', 'expired', 'cancelled'])->default('active'); // 訂閱狀態
+            $table->timestamps(); // 建立與更新時間
+        });
+        
+        // 教練與會員關聯表
+        Schema::create('coach_member', function (Blueprint $table) {
+            $table->id(); // 關聯主鍵ID
+            $table->foreignId('coach_id')->constrained('users'); // 關聯教練（users表）
+            $table->foreignId('member_id')->constrained('users'); // 關聯會員（users表）
+            $table->timestamps(); // 建立與更新時間
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('coach_member');
+        Schema::dropIfExists('subscriptions');
+        Schema::dropIfExists('plans');
+        Schema::dropIfExists('member_profiles');
+        Schema::dropIfExists('coach_profiles');
+        Schema::dropIfExists('admin_profiles');
+        Schema::dropIfExists('users');
+    }
+};

database/migrations/2025_05_06_081925_create_personal_access_tokens_table.php

@@ -0,0 +1,33 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::create('personal_access_tokens', function (Blueprint $table) {
+            $table->id();
+            $table->morphs('tokenable');
+            $table->string('name');
+            $table->string('token', 64)->unique();
+            $table->text('abilities')->nullable();
+            $table->timestamp('last_used_at')->nullable();
+            $table->timestamp('expires_at')->nullable();
+            $table->timestamps();
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('personal_access_tokens');
+    }
+};

database/migrations/2025_05_08_142400_create_diving_offers_table.php

@@ -0,0 +1,41 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        Schema::create('diving_offers', function (Blueprint $table) {
+            $table->bigIncrements('id');
+            $table->timestampTz('created_at')->nullable();
+            $table->string('title');
+            $table->string('location');
+            $table->string('spot');
+            $table->float('rating', 2, 1)->default(0);
+            $table->integer('reviews')->default(0);
+            $table->integer('price')->default(0);
+            $table->text('badges')->nullable(); // 可存 json 或逗號分隔字串
+            $table->text('description')->nullable();
+            $table->string('tag')->nullable();   // 可存單一或逗號分隔
+            $table->string('region')->nullable();
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        Schema::dropIfExists('diving_offers');
+    }
+};

database/migrations/2025_05_08_150000_create_social_accounts_table.php

@@ -0,0 +1,43 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        Schema::create('social_accounts', function (Blueprint $table) {
+            $table->bigIncrements('id');
+            $table->unsignedBigInteger('user_id')->comment('本地 user 對應 id');
+            $table->string('provider')->comment('第三方登入來源，如 google');
+            $table->string('provider_id')->comment('第三方平台的唯一識別碼');
+            $table->string('provider_email')->nullable()->comment('第三方平台的 email');
+            $table->string('provider_name')->nullable()->comment('第三方平台顯示名稱');
+            $table->string('avatar')->nullable()->comment('第三方平台頭像網址');
+            $table->text('access_token')->nullable()->comment('第三方 access token');
+            $table->text('refresh_token')->nullable()->comment('第三方 refresh token');
+            $table->integer('expires_in')->nullable()->comment('token 有效秒數');
+            $table->timestamps();
+
+            $table->foreign('user_id')->references('id')->on('users')->onDelete('cascade');
+            $table->unique(['provider', 'provider_id']);
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        Schema::dropIfExists('social_accounts');
+    }
+};

database/seeders/DatabaseSeeder.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace Database\Seeders;
+
+use App\Models\User;
+// use Illuminate\Database\Console\Seeds\WithoutModelEvents;
+use Illuminate\Database\Seeder;
+
+class DatabaseSeeder extends Seeder
+{
+    /**
+     * Seed the application's database.
+     */
+    public function run(): void
+    {
+        // User::factory(10)->create();
+
+        User::factory()->create([
+            'name' => 'Test User',
+            'email' => 'test@example.com',
+        ]);
+    }
+}

package.json

@@ -0,0 +1,13 @@
+{
+    "private": true,
+    "type": "module",
+    "scripts": {
+        "dev": "vite",
+        "build": "vite build"
+    },
+    "devDependencies": {
+        "axios": "^1.6.4",
+        "laravel-vite-plugin": "^1.0",
+        "vite": "^5.0"
+    }
+}

phpunit.xml

@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:noNamespaceSchemaLocation="vendor/phpunit/phpunit/phpunit.xsd"
+         bootstrap="vendor/autoload.php"
+         colors="true"
+>
+    <testsuites>
+        <testsuite name="Unit">
+            <directory>tests/Unit</directory>
+        </testsuite>
+        <testsuite name="Feature">
+            <directory>tests/Feature</directory>
+        </testsuite>
+    </testsuites>
+    <source>
+        <include>
+            <directory>app</directory>
+        </include>
+    </source>
+    <php>
+        <env name="APP_ENV" value="testing"/>
+        <env name="APP_MAINTENANCE_DRIVER" value="file"/>
+        <env name="BCRYPT_ROUNDS" value="4"/>
+        <env name="CACHE_STORE" value="array"/>
+        <!-- <env name="DB_CONNECTION" value="sqlite"/> -->
+        <!-- <env name="DB_DATABASE" value=":memory:"/> -->
+        <env name="MAIL_MAILER" value="array"/>
+        <env name="PULSE_ENABLED" value="false"/>
+        <env name="QUEUE_CONNECTION" value="sync"/>
+        <env name="SESSION_DRIVER" value="array"/>
+        <env name="TELESCOPE_ENABLED" value="false"/>
+    </php>
+</phpunit>

public/.htaccess

@@ -0,0 +1,21 @@
+<IfModule mod_rewrite.c>
+    <IfModule mod_negotiation.c>
+        Options -MultiViews -Indexes
+    </IfModule>
+
+    RewriteEngine On
+
+    # Handle Authorization Header
+    RewriteCond %{HTTP:Authorization} .
+    RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
+
+    # Redirect Trailing Slashes If Not A Folder...
+    RewriteCond %{REQUEST_FILENAME} !-d
+    RewriteCond %{REQUEST_URI} (.+)/$
+    RewriteRule ^ %1 [L,R=301]
+
+    # Send Requests To Front Controller...
+    RewriteCond %{REQUEST_FILENAME} !-d
+    RewriteCond %{REQUEST_FILENAME} !-f
+    RewriteRule ^ index.php [L]
+</IfModule>

public/admin-coach-test.html

@@ -0,0 +1,504 @@
+<!DOCTYPE html>
+<html lang="zh-TW">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>CFDive平台 - 管理員與教練註冊測試</title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css" rel="stylesheet">
+    <style>
+        .container { max-width: 800px; margin-top: 50px; }
+        .card { margin-bottom: 20px; }
+        pre { background-color: #f8f9fa; padding: 15px; border-radius: 5px; max-height: 300px; overflow: auto; }
+        .tab-content { padding: 20px; border: 1px solid #dee2e6; border-top: none; }
+        .form-control { margin-bottom: 15px; }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <h1 class="mb-4">CFDive平台 - 管理員與教練註冊測試</h1>
+        
+        <ul class="nav nav-tabs" id="userTypeTabs" role="tablist">
+            <li class="nav-item" role="presentation">
+                <button class="nav-link active" id="admin-tab" data-bs-toggle="tab" data-bs-target="#admin" type="button" role="tab">管理員註冊</button>
+            </li>
+            <li class="nav-item" role="presentation">
+                <button class="nav-link" id="coach-tab" data-bs-toggle="tab" data-bs-target="#coach" type="button" role="tab">教練註冊</button>
+            </li>
+            <li class="nav-item" role="presentation">
+                <button class="nav-link" id="login-tab" data-bs-toggle="tab" data-bs-target="#login" type="button" role="tab">登入</button>
+            </li>
+            <li class="nav-item" role="presentation">
+                <button class="nav-link" id="logout-tab" data-bs-toggle="tab" data-bs-target="#logout" type="button" role="tab">登出</button>
+            </li>
+            <li class="nav-item" role="presentation">
+                <button class="nav-link" id="check-user-tab" data-bs-toggle="tab" data-bs-target="#check-user" type="button" role="tab">查詢會員/教練</button>
+            </li>
+        </ul>
+        
+        <div class="tab-content" id="userTypeTabContent">
+            <!-- 管理員註冊表單 -->
+            <div class="tab-pane fade show active" id="admin" role="tabpanel">
+                <h3>管理員註冊</h3>
+                <form id="adminForm">
+                    <div class="row">
+                        <div class="col-md-6">
+                            <label for="adminName" class="form-label">姓名</label>
+                            <input type="text" class="form-control" id="adminName" value="測試管理員" required>
+                        </div>
+                        <div class="col-md-6">
+                            <label for="adminEmail" class="form-label">電子郵件</label>
+                            <input type="email" class="form-control" id="adminEmail" value="admin@example.com" required>
+                        </div>
+                    </div>
+                    
+                    <div class="row">
+                        <div class="col-md-6">
+                            <label for="adminPassword" class="form-label">密碼</label>
+                            <input type="password" class="form-control" id="adminPassword" value="Admin123!" required>
+                        </div>
+                        <div class="col-md-6">
+                            <label for="adminPasswordConfirmation" class="form-label">確認密碼</label>
+                            <input type="password" class="form-control" id="adminPasswordConfirmation" value="Admin123!" required>
+                        </div>
+                    </div>
+                    
+                    <div class="row">
+                        <div class="col-md-4">
+                            <label for="adminPhone" class="form-label">電話</label>
+                            <input type="text" class="form-control" id="adminPhone" value="0912345678">
+                        </div>
+                        <div class="col-md-4">
+                            <label for="adminPosition" class="form-label">職位</label>
+                            <input type="text" class="form-control" id="adminPosition" value="系統管理員" required>
+                        </div>
+                        <div class="col-md-4">
+                            <label for="adminDepartment" class="form-label">部門</label>
+                            <input type="text" class="form-control" id="adminDepartment" value="資訊部門" required>
+                        </div>
+                    </div>
+                    
+                    <button type="submit" class="btn btn-primary">註冊管理員</button>
+                </form>
+            </div>
+            
+            <!-- 教練註冊表單 -->
+            <div class="tab-pane fade" id="coach" role="tabpanel">
+                <h3>教練註冊</h3>
+                <form id="coachForm">
+                    <div class="row">
+                        <div class="col-md-6">
+                            <label for="coachName" class="form-label">姓名</label>
+                            <input type="text" class="form-control" id="coachName" value="測試教練" required>
+                        </div>
+                        <div class="col-md-6">
+                            <label for="coachEmail" class="form-label">電子郵件</label>
+                            <input type="email" class="form-control" id="coachEmail" value="coach@example.com" required>
+                        </div>
+                    </div>
+                    
+                    <div class="row">
+                        <div class="col-md-6">
+                            <label for="coachPassword" class="form-label">密碼</label>
+                            <input type="password" class="form-control" id="coachPassword" value="Coach123!" required>
+                        </div>
+                        <div class="col-md-6">
+                            <label for="coachPasswordConfirmation" class="form-label">確認密碼</label>
+                            <input type="password" class="form-control" id="coachPasswordConfirmation" value="Coach123!" required>
+                        </div>
+                    </div>
+                    
+                    <div class="row">
+                        <div class="col-md-4">
+                            <label for="coachPhone" class="form-label">電話</label>
+                            <input type="text" class="form-control" id="coachPhone" value="0987654321">
+                        </div>
+                        <div class="col-md-8">
+                            <label for="coachExpertise" class="form-label">專長</label>
+                            <input type="text" class="form-control" id="coachExpertise" value="自由潛水,水肺潛水" required>
+                        </div>
+                    </div>
+                    
+                    <div class="mb-3">
+                        <label for="coachBio" class="form-label">個人簡介</label>
+                        <textarea class="form-control" id="coachBio" rows="3" required>擁有10年潛水教學經驗，專精於開放水域和洞穴潛水</textarea>
+                    </div>
+                    
+                    <button type="submit" class="btn btn-success">註冊教練</button>
+                </form>
+            </div>
+            
+            <!-- 登入表單 -->
+            <div class="tab-pane fade" id="login" role="tabpanel">
+                <h3>登入</h3>
+                <div class="row">
+                    <div class="col-md-4">
+                        <select class="form-select mb-3" id="loginType">
+                            <option value="admin">管理員</option>
+                            <option value="coach">教練</option>
+                            <option value="member">會員</option>
+                        </select>
+                    </div>
+                </div>
+                <form id="loginForm">
+                    <div class="mb-3">
+                        <label for="loginEmail" class="form-label">電子郵件</label>
+                        <input type="email" class="form-control" id="loginEmail" required>
+                    </div>
+                    <div class="mb-3">
+                        <label for="loginPassword" class="form-label">密碼</label>
+                        <input type="password" class="form-control" id="loginPassword" required>
+                    </div>
+                    <button type="submit" class="btn btn-primary">登入</button>
+                </form>
+            </div>
+            
+            <!-- 登出測試 -->
+            <div class="tab-pane fade" id="logout" role="tabpanel">
+                <h3>登出測試</h3>
+                <div class="mb-3">
+                    <label for="logoutType" class="form-label">用戶類型</label>
+                    <select class="form-select" id="logoutType">
+                        <option value="member">會員</option>
+                        <option value="coach">教練</option>
+                        <option value="admin">管理員</option>
+                    </select>
+                </div>
+                <div class="mb-3">
+                    <label for="logoutToken" class="form-label">認證 Token</label>
+                    <input type="text" class="form-control" id="logoutToken" placeholder="輸入或從下拉選單選擇 Token">
+                    <div class="form-text">可以使用下方選單選擇已儲存的 Token</div>
+                </div>
+                <div class="mb-3">
+                    <label for="savedTokens" class="form-label">已儲存的 Token</label>
+                    <select class="form-select" id="savedTokens">
+                        <option value="">-- 選擇儲存的 Token --</option>
+                    </select>
+                </div>
+                <div class="d-flex gap-2">
+                    <button id="logoutButton" class="btn btn-danger">登出</button>
+                    <button id="clearAllTokensButton" type="button" class="btn btn-warning">清除所有 Token</button>
+                </div>
+                <div class="mt-3">
+                    <div class="alert alert-secondary">
+                        <strong>如何測試 Token 是否真的失效？</strong>
+                        <ol class="mt-2 mb-0">
+                            <li>登入並獲取 Token</li>
+                            <li>使用該 Token 呼叫需要認證的 API（如查詢個人資料）</li>
+                            <li>使用登出按鈕登出</li>
+                            <li>再次使用相同 Token 呼叫相同 API，應該會收到 401 未授權錯誤</li>
+                        </ol>
+                    </div>
+                </div>
+            </div>
+            
+            <!-- 查詢會員/教練測試 -->
+            <div class="tab-pane fade" id="check-user" role="tabpanel">
+                <h3>查詢會員/教練資料</h3>
+                <div class="alert alert-info">
+                    <i class="bi bi-info-circle"></i> 此功能為管理員專用，可查詢會員或教練的詳細資料。請先以管理員身份登入才能使用此功能。
+                </div>
+                <form id="checkUserForm">
+                    <div class="row mb-3">
+                        <div class="col-md-6">
+                            <label for="checkUserType" class="form-label">用戶類型</label>
+                            <select class="form-select" id="checkUserType">
+                                <option value="member">會員</option>
+                                <option value="coach">教練</option>
+                            </select>
+                        </div>
+                        <div class="col-md-6">
+                            <label for="checkUserId" class="form-label">用戶 ID</label>
+                            <input type="number" class="form-control" id="checkUserId" min="1" required>
+                        </div>
+                    </div>
+                    <div class="mb-3">
+                        <label for="adminToken" class="form-label">管理員認證 Token</label>
+                        <input type="text" class="form-control" id="adminToken" required>
+                        <div class="form-text">可以使用已儲存的管理員 Token</div>
+                    </div>
+                    <div class="mb-3">
+                        <label for="savedAdminTokens" class="form-label">已儲存的管理員 Token</label>
+                        <select class="form-select" id="savedAdminTokens">
+                            <option value="">-- 選擇儲存的管理員 Token --</option>
+                        </select>
+                    </div>
+                    <button type="submit" class="btn btn-primary">查詢密碼</button>
+                </form>
+            </div>
+        </div>
+        
+        <!-- 結果顯示區域 -->
+        <div class="card mt-4">
+            <div class="card-header">
+                API 回應結果
+            </div>
+            <div class="card-body">
+                <pre id="responseResult">尚未執行任何操作</pre>
+            </div>
+        </div>
+        
+        <!-- Token顯示區域 -->
+        <div id="tokenCard" class="card mt-3" style="display:none;">
+            <div class="card-header">
+                Token 資訊
+            </div>
+            <div class="card-body">
+                <pre id="tokenInfo"></pre>
+                <button id="copyToken" class="btn btn-sm btn-secondary">複製Token</button>
+            </div>
+        </div>
+    </div>
+
+    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js"></script>
+    <script>
+        // 頁面載入時加載已儲存的token
+        document.addEventListener('DOMContentLoaded', function() {
+            loadSavedTokens();
+        });
+        
+        // 管理員註冊
+        document.getElementById('adminForm').addEventListener('submit', function(e) {
+            e.preventDefault();
+            
+            const data = {
+                name: document.getElementById('adminName').value,
+                email: document.getElementById('adminEmail').value,
+                password: document.getElementById('adminPassword').value,
+                password_confirmation: document.getElementById('adminPasswordConfirmation').value,
+                phone: document.getElementById('adminPhone').value,
+                position: document.getElementById('adminPosition').value,
+                department: document.getElementById('adminDepartment').value
+            };
+            
+            callApi('/api/admin/register', 'POST', data);
+        });
+        
+        // 教練註冊
+        document.getElementById('coachForm').addEventListener('submit', function(e) {
+            e.preventDefault();
+            
+            const data = {
+                name: document.getElementById('coachName').value,
+                email: document.getElementById('coachEmail').value,
+                password: document.getElementById('coachPassword').value,
+                password_confirmation: document.getElementById('coachPasswordConfirmation').value,
+                phone: document.getElementById('coachPhone').value,
+                bio: document.getElementById('coachBio').value,
+                expertise: document.getElementById('coachExpertise').value
+            };
+            
+            callApi('/api/coach/register', 'POST', data);
+        });
+        
+        // 登入
+        document.getElementById('loginForm').addEventListener('submit', function(e) {
+            e.preventDefault();
+            
+            const loginType = document.getElementById('loginType').value;
+            const data = {
+                email: document.getElementById('loginEmail').value,
+                password: document.getElementById('loginPassword').value
+            };
+            
+            callApi(`/api/${loginType}/login`, 'POST', data);
+        });
+        
+        // 登出
+        document.getElementById('logoutButton').addEventListener('click', function() {
+            const logoutType = document.getElementById('logoutType').value;
+            const token = document.getElementById('logoutToken').value;
+            
+            if (!token) {
+                alert('請輸入或選擇認證 Token');
+                return;
+            }
+            
+            fetch(`/api/${logoutType}/logout`, {
+                method: 'POST',
+                headers: {
+                    'Authorization': `Bearer ${token}`,
+                    'Content-Type': 'application/json'
+                }
+            })
+            .then(response => response.json())
+            .then(result => {
+                // 顯示API回應
+                document.getElementById('responseResult').textContent = JSON.stringify(result, null, 2);
+                
+                // 移除已用過的token
+                removeTokenFromStorage(token);
+                loadSavedTokens(); // 重新載入已儲存token列表
+            })
+            .catch(error => {
+                console.error('登出錯誤:', error);
+                document.getElementById('responseResult').textContent = `驗證失敗或結束已過期的工作階段: ${error.message}`;
+            });
+        });
+        
+        // 已儲存tokens選擇事件
+        document.getElementById('savedTokens').addEventListener('change', function() {
+            if (this.value) {
+                document.getElementById('logoutToken').value = this.value;
+            }
+        });
+        
+        // 已儲存管理員tokens選擇事件
+        document.getElementById('savedAdminTokens').addEventListener('change', function() {
+            if (this.value) {
+                document.getElementById('adminToken').value = this.value;
+            }
+        });
+        
+        // 清除所有 Token 按鈕事件
+        document.getElementById('clearAllTokensButton').addEventListener('click', function() {
+            if (confirm('確定要清除所有已儲存的 Token 嗎？此操作不可還原。')) {
+                // 清除所有 auth_token_ 開頭的項目
+                const tokenKeys = Object.keys(localStorage).filter(key => 
+                    key.startsWith('auth_token_'));
+                    
+                if (tokenKeys.length > 0) {
+                    tokenKeys.forEach(key => localStorage.removeItem(key));
+                    alert(`已清除 ${tokenKeys.length} 個 Token`); 
+                } else {
+                    alert('無已儲存的 Token');
+                }
+                
+                // 重新載入選項列表
+                loadSavedTokens();
+            }
+        });
+        
+        // 查詢會員/教練表單提交
+        document.getElementById('checkUserForm').addEventListener('submit', function(e) {
+            e.preventDefault();
+            
+            const userType = document.getElementById('checkUserType').value;
+            const userId = document.getElementById('checkUserId').value;
+            const adminToken = document.getElementById('adminToken').value;
+            
+            if (!adminToken) {
+                alert('請輸入管理員認證 Token');
+                return;
+            }
+            
+            if (!userId) {
+                alert('請輸入用戶 ID');
+                return;
+            }
+            
+            fetch(`/api/admin/check-${userType}/${userId}`, {
+                method: 'GET',
+                headers: {
+                    'Authorization': `Bearer ${adminToken}`,
+                    'Content-Type': 'application/json'
+                }
+            })
+            .then(response => response.json())
+            .then(result => {
+                // 顯示API回應
+                document.getElementById('responseResult').textContent = JSON.stringify(result, null, 2);
+            })
+            .catch(error => {
+                console.error('查詢密碼錯誤:', error);
+                document.getElementById('responseResult').textContent = `錯誤: ${error.message}`;
+            });
+        });
+        
+        // 複製Token
+        document.getElementById('copyToken').addEventListener('click', function() {
+            const tokenInfo = JSON.parse(document.getElementById('tokenInfo').textContent);
+            navigator.clipboard.writeText(tokenInfo.token)
+                .then(() => alert('Token已複製到剪貼簿'))
+                .catch(err => console.error('複製失敗', err));
+        });
+        
+        // 載入儲存的tokens
+        function loadSavedTokens() {
+            const savedTokensSelect = document.getElementById('savedTokens');
+            // 清空現有選項，保留第一個預設選項
+            savedTokensSelect.innerHTML = '<option value="">-- 選擇儲存的 Token --</option>';
+            
+            // 取得已儲存的token
+            const tokenKeys = Object.keys(localStorage).filter(key => 
+                key.startsWith('auth_token_'));
+                
+            tokenKeys.forEach(key => {
+                try {
+                    const authInfo = JSON.parse(localStorage.getItem(key));
+                    if (authInfo && authInfo.token) {
+                        const option = document.createElement('option');
+                        option.value = authInfo.token;
+                        option.textContent = `${authInfo.user.name} (${authInfo.user.email}) - ${authInfo.user.role}`;
+                        savedTokensSelect.appendChild(option);
+                    }
+                } catch (e) {
+                    console.error('解析已儲存token錯誤:', e);
+                }
+            });
+            
+            // 清空輸入框
+            document.getElementById('logoutToken').value = '';
+        }
+        
+        // 移除已使用的token
+        function removeTokenFromStorage(token) {
+            const tokenKeys = Object.keys(localStorage).filter(key => 
+                key.startsWith('auth_token_'));
+                
+            tokenKeys.forEach(key => {
+                try {
+                    const authInfo = JSON.parse(localStorage.getItem(key));
+                    if (authInfo && authInfo.token === token) {
+                        localStorage.removeItem(key);
+                    }
+                } catch (e) {
+                    console.error('移除token錯誤:', e);
+                }
+            });
+        }
+        
+        // API呼叫函數
+        function callApi(url, method, data) {
+            fetch(url, {
+                method: method,
+                headers: {
+                    'Content-Type': 'application/json'
+                },
+                body: JSON.stringify(data)
+            })
+            .then(response => response.json())
+            .then(result => {
+                // 顯示API回應
+                document.getElementById('responseResult').textContent = JSON.stringify(result, null, 2);
+                
+                // 如果登入/註冊成功，顯示token
+                if (result.status && result.data && result.data.token) {
+                    const tokenCard = document.getElementById('tokenCard');
+                    const tokenInfo = document.getElementById('tokenInfo');
+                    
+                    tokenCard.style.display = 'block';
+                    tokenInfo.textContent = JSON.stringify({
+                        token: result.data.token,
+                        token_type: result.data.token_type
+                    }, null, 2);
+                    
+                    // 儲存到localStorage
+                    const authKey = `auth_token_${Date.now()}`;
+                    localStorage.setItem(authKey, JSON.stringify({
+                        token: result.data.token,
+                        token_type: result.data.token_type,
+                        user: result.data.user
+                    }));
+                    
+                    // 重新載入選項列表
+                    loadSavedTokens();
+                }
+            })
+            .catch(error => {
+                console.error('API錯誤:', error);
+                document.getElementById('responseResult').textContent = `錯誤: ${error.message}`;
+            });
+        }
+    </script>
+</body>
+</html>

public/google-login-test.html

@@ -0,0 +1,231 @@
+<!DOCTYPE html>
+<html lang="zh-TW">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>CFDive平台 - Google登入測試</title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css" rel="stylesheet">
+    <style>
+        .container { max-width: 800px; margin-top: 50px; }
+        .card { margin-bottom: 20px; }
+        pre { background-color: #f8f9fa; padding: 15px; border-radius: 5px; max-height: 300px; overflow: auto; }
+        .btn-google { background-color: #4285F4; color: white; }
+        .hidden { display: none; }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <h1 class="mb-4">CFDive平台 - Google登入測試</h1>
+        
+        <!-- 登入卡片 -->
+        <div class="card">
+            <div class="card-header">
+                會員登入選項
+            </div>
+            <div class="card-body">
+                <h5 class="card-title">選擇登入方式</h5>
+                <p class="card-text">您可以使用以下方式登入系統：</p>
+                
+                <!-- Google登入按鈕 -->
+                <a href="/api/auth/google/redirect" class="btn btn-google mb-3">
+                    <i class="bi bi-google"></i> 使用Google帳號登入
+                </a>
+                
+                <!-- 一般登入表單 -->
+                <div class="mt-4">
+                    <h6>或使用電子郵件登入</h6>
+                    <form id="loginForm" class="mt-3">
+                        <div class="mb-3">
+                            <label for="email" class="form-label">電子郵件</label>
+                            <input type="email" class="form-control" id="email" required>
+                        </div>
+                        <div class="mb-3">
+                            <label for="password" class="form-label">密碼</label>
+                            <input type="password" class="form-control" id="password" required>
+                        </div>
+                        <button type="submit" class="btn btn-primary">登入</button>
+                    </form>
+                </div>
+            </div>
+        </div>
+        
+        <!-- Token顯示區域 -->
+        <div id="tokenCard" class="card hidden">
+            <div class="card-header">
+                授權Token
+            </div>
+            <div class="card-body">
+                <h5 class="card-title">登入成功</h5>
+                <p class="card-text">您已成功登入系統，可以使用以下token進行API測試：</p>
+                <pre id="tokenInfo"></pre>
+                <button id="copyToken" class="btn btn-sm btn-secondary">複製Token</button>
+            </div>
+        </div>
+        
+        <!-- API測試區域 -->
+        <div id="apiTestCard" class="card hidden">
+            <div class="card-header">
+                API測試
+            </div>
+            <div class="card-body">
+                <h5 class="card-title">測試會員API</h5>
+                <p class="card-text">使用您的授權token測試以下API：</p>
+                
+                <div class="mb-3">
+                    <button id="getProfile" class="btn btn-info">獲取個人資料</button>
+                    <button id="updateProfile" class="btn btn-warning">更新個人資料</button>
+                    <button id="logout" class="btn btn-danger">登出</button>
+                </div>
+                
+                <h6 class="mt-4">API回應結果：</h6>
+                <pre id="apiResponse">尚未執行API請求</pre>
+            </div>
+        </div>
+    </div>
+
+    <script>
+        // 檢查URL參數，處理登入後的回調
+        document.addEventListener('DOMContentLoaded', function() {
+            // 檢查URL是否包含登入成功的資訊
+            const urlParams = new URLSearchParams(window.location.search);
+            if (urlParams.has('login_success')) {
+                try {
+                    // 從localStorage獲取用戶資訊
+                    const userInfo = JSON.parse(localStorage.getItem('user_info'));
+                    if (userInfo && userInfo.token) {
+                        showTokenInfo(userInfo);
+                    }
+                } catch (e) {
+                    console.error('無法解析用戶資訊', e);
+                }
+            }
+            
+            // 檢查URL是否包含完整的用戶資訊（從callback獲取）
+            const hashParams = new URLSearchParams(window.location.hash.substring(1));
+            if (hashParams.has('user_info')) {
+                try {
+                    const userInfo = JSON.parse(decodeURIComponent(hashParams.get('user_info')));
+                    if (userInfo && userInfo.token) {
+                        // 儲存到localStorage以便重新整理後仍可使用
+                        localStorage.setItem('user_info', JSON.stringify(userInfo));
+                        showTokenInfo(userInfo);
+                        
+                        // 清除URL中的hash，避免重新整理後重複處理
+                        history.replaceState(null, document.title, window.location.pathname + '?login_success=true');
+                    }
+                } catch (e) {
+                    console.error('無法解析用戶資訊', e);
+                }
+            }
+        });
+
+        // 一般登入表單處理
+        document.getElementById('loginForm').addEventListener('submit', function(e) {
+            e.preventDefault();
+            
+            const email = document.getElementById('email').value;
+            const password = document.getElementById('password').value;
+            
+            fetch('/api/member/login', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json'
+                },
+                body: JSON.stringify({ email, password })
+            })
+            .then(response => response.json())
+            .then(data => {
+                if (data.status && data.data && data.data.token) {
+                    const userInfo = {
+                        user: data.data.user,
+                        token: data.data.token,
+                        token_type: data.data.token_type
+                    };
+                    localStorage.setItem('user_info', JSON.stringify(userInfo));
+                    showTokenInfo(userInfo);
+                } else {
+                    alert('登入失敗：' + (data.message || '未知錯誤'));
+                }
+            })
+            .catch(error => {
+                console.error('登入錯誤', error);
+                alert('登入過程發生錯誤，請檢查網路連線');
+            });
+        });
+
+        // 顯示Token資訊
+        function showTokenInfo(userInfo) {
+            document.getElementById('tokenCard').classList.remove('hidden');
+            document.getElementById('apiTestCard').classList.remove('hidden');
+            
+            const tokenInfo = document.getElementById('tokenInfo');
+            tokenInfo.textContent = JSON.stringify(userInfo, null, 2);
+            
+            // 設定複製按鈕功能
+            document.getElementById('copyToken').addEventListener('click', function() {
+                navigator.clipboard.writeText(userInfo.token)
+                    .then(() => alert('Token已複製到剪貼簿'))
+                    .catch(err => console.error('複製失敗', err));
+            });
+            
+            // 設定API測試按鈕
+            setupApiButtons(userInfo.token);
+        }
+
+        // 設定API測試按鈕
+        function setupApiButtons(token) {
+            // 獲取個人資料
+            document.getElementById('getProfile').addEventListener('click', function() {
+                callApi('/api/member/profile', 'GET', null, token);
+            });
+            
+            // 更新個人資料
+            document.getElementById('updateProfile').addEventListener('click', function() {
+                const newName = prompt('請輸入新的姓名', '');
+                if (newName) {
+                    callApi('/api/member/profile', 'PUT', { name: newName }, token);
+                }
+            });
+            
+            // 登出
+            document.getElementById('logout').addEventListener('click', function() {
+                callApi('/api/member/logout', 'POST', null, token)
+                    .then(() => {
+                        localStorage.removeItem('user_info');
+                        document.getElementById('tokenCard').classList.add('hidden');
+                        document.getElementById('apiTestCard').classList.add('hidden');
+                        alert('已成功登出');
+                    });
+            });
+        }
+
+        // 呼叫API
+        function callApi(url, method, data, token) {
+            const headers = {
+                'Authorization': `Bearer ${token}`,
+                'Content-Type': 'application/json'
+            };
+            
+            const options = {
+                method: method,
+                headers: headers
+            };
+            
+            if (data && (method === 'POST' || method === 'PUT')) {
+                options.body = JSON.stringify(data);
+            }
+            
+            return fetch(url, options)
+                .then(response => response.json())
+                .then(data => {
+                    document.getElementById('apiResponse').textContent = JSON.stringify(data, null, 2);
+                    return data;
+                })
+                .catch(error => {
+                    console.error('API錯誤', error);
+                    document.getElementById('apiResponse').textContent = `錯誤: ${error.message}`;
+                });
+        }
+    </script>
+</body>
+</html>

public/index.php

@@ -0,0 +1,17 @@
+<?php
+
+use Illuminate\Http\Request;
+
+define('LARAVEL_START', microtime(true));
+
+// Determine if the application is in maintenance mode...
+if (file_exists($maintenance = __DIR__.'/../storage/framework/maintenance.php')) {
+    require $maintenance;
+}
+
+// Register the Composer autoloader...
+require __DIR__.'/../vendor/autoload.php';
+
+// Bootstrap Laravel and handle the request...
+(require_once __DIR__.'/../bootstrap/app.php')
+    ->handleRequest(Request::capture());

public/robots.txt

@@ -0,0 +1,2 @@
+User-agent: *
+Disallow:

resources/js/app.js

@@ -0,0 +1 @@
+import './bootstrap';

resources/js/bootstrap.js

@@ -0,0 +1,4 @@
+import axios from 'axios';
+window.axios = axios;
+
+window.axios.defaults.headers.common['X-Requested-With'] = 'XMLHttpRequest';

routes/api.php

@@ -0,0 +1,84 @@
+<?php
+
+use Illuminate\Support\Facades\Route;
+use App\Http\Controllers\API\AuthController;
+
+// 這裡可以定義 API 路由，例如：
+Route::get('/ping', function () {
+    return response()->json(['message' => 'pong']);
+});
+
+// 你可以在這裡繼續新增 API 路由
+Route::post('/testpost', function () {
+    $data = request()->all(); // 取得所有POST資料（array）
+    return response()->json([
+        'data' => $data,
+    ]);
+});
+
+// 會員註冊／登入
+Route::post('/member/register', [AuthController::class, 'registerMember']);
+Route::post('/member/login', [AuthController::class, 'loginMember']);
+
+// Google 第三方登入（僅會員）
+Route::get('/auth/google/redirect', [\App\Http\Controllers\API\SocialAuthController::class, 'redirectToGoogle']);
+Route::get('/auth/google/callback', [\App\Http\Controllers\API\SocialAuthController::class, 'handleGoogleCallback']);
+
+// 會員專屬 API（需登入）
+Route::middleware(['auth:sanctum'])->prefix('member')->group(function () {
+    // 會員登出
+    Route::post('/logout', [AuthController::class, 'logoutMember']);
+    // 取得會員個人資料
+    Route::get('/profile', [AuthController::class, 'memberProfile']);
+    // 更新會員個人資料
+    Route::put('/profile', [AuthController::class, 'updateMemberProfile']);
+    // 修改密碼
+    Route::put('/change-password', [AuthController::class, 'changeMemberPassword']);
+    // 你可以再加上訂單、收藏、通知等API
+    // Route::get('/orders', [OrderController::class, 'memberOrders']);
+    // Route::get('/favorites', [FavoriteController::class, 'memberFavorites']);
+});
+
+// 教練註冊／登入
+Route::post('/coach/register', [AuthController::class, 'registerCoach']);
+Route::post('/coach/login', [AuthController::class, 'loginCoach']);
+
+// 教練專屬 API（需登入）
+Route::middleware(['auth:sanctum'])->prefix('coach')->group(function () {
+    // 教練登出
+    Route::post('/logout', [AuthController::class, 'logoutCoach']);
+    // 取得教練個人資料
+    Route::get('/profile', [AuthController::class, 'coachProfile']);
+    // 更新教練個人資料
+    Route::put('/profile', [AuthController::class, 'updateCoachProfile']);
+    // 修改密碼
+    Route::put('/change-password', [AuthController::class, 'changeCoachPassword']);
+    // 其他教練專屬 API
+});
+
+// 管理員註冊／登入
+Route::post('/admin/register', [AuthController::class, 'registerAdmin']);
+Route::post('/admin/login', [AuthController::class, 'loginAdmin']);
+
+// 管理員專屬 API（需登入）
+Route::middleware(['auth:sanctum'])->prefix('admin')->group(function () {
+    // 管理員登出
+    Route::post('/logout', [AuthController::class, 'logoutAdmin']);
+    // 取得管理員個人資料
+    Route::get('/profile', [AuthController::class, 'adminProfile']);
+    // 更新管理員個人資料
+    Route::put('/profile', [AuthController::class, 'updateAdminProfile']);
+    // 修改密碼
+    Route::put('/change-password', [AuthController::class, 'changeAdminPassword']);
+    // 查詢會員資料
+    Route::get('/check-member/{id}', [AuthController::class, 'checkMember']);
+    // 查詢教練資料
+    Route::get('/check-coach/{id}', [AuthController::class, 'checkCoach']);
+    // 其他管理員專屬 API
+});
+
+// 需要認證的通用路由
+Route::middleware('auth:sanctum')->group(function () {
+    Route::post('/logout', [AuthController::class, 'logout']);
+    Route::get('/user', [AuthController::class, 'user']);
+});

routes/console.php

@@ -0,0 +1,8 @@
+<?php
+
+use Illuminate\Foundation\Inspiring;
+use Illuminate\Support\Facades\Artisan;
+
+Artisan::command('inspire', function () {
+    $this->comment(Inspiring::quote());
+})->purpose('Display an inspiring quote')->hourly();

routes/web.php

@@ -0,0 +1,7 @@
+<?php
+
+use Illuminate\Support\Facades\Route;
+
+Route::get('/', function () {
+    return view('welcome');
+});

storage/app/.gitignore

@@ -0,0 +1,3 @@
+*
+!public/
+!.gitignore

storage/app/public/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

storage/framework/.gitignore

@@ -0,0 +1,9 @@
+compiled.php
+config.php
+down
+events.scanned.php
+maintenance.php
+routes.php
+routes.scanned.php
+schedule-*
+services.json

storage/framework/cache/.gitignore

@@ -0,0 +1,3 @@
+*
+!data/
+!.gitignore

storage/framework/cache/data/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

storage/framework/sessions/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

storage/framework/testing/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

storage/framework/views/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

storage/logs/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

tests/Feature/ExampleTest.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace Tests\Feature;
+
+// use Illuminate\Foundation\Testing\RefreshDatabase;
+use Tests\TestCase;
+
+class ExampleTest extends TestCase
+{
+    /**
+     * A basic test example.
+     */
+    public function test_the_application_returns_a_successful_response(): void
+    {
+        $response = $this->get('/');
+
+        $response->assertStatus(200);
+    }
+}

tests/TestCase.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace Tests;
+
+use Illuminate\Foundation\Testing\TestCase as BaseTestCase;
+
+abstract class TestCase extends BaseTestCase
+{
+    //
+}

tests/Unit/ExampleTest.php

@@ -0,0 +1,16 @@
+<?php
+
+namespace Tests\Unit;
+
+use PHPUnit\Framework\TestCase;
+
+class ExampleTest extends TestCase
+{
+    /**
+     * A basic test example.
+     */
+    public function test_that_true_is_true(): void
+    {
+        $this->assertTrue(true);
+    }
+}

vite.config.js

@@ -0,0 +1,11 @@
+import { defineConfig } from 'vite';
+import laravel from 'laravel-vite-plugin';
+
+export default defineConfig({
+    plugins: [
+        laravel({
+            input: ['resources/css/app.css', 'resources/js/app.js'],
+            refresh: true,
+        }),
+    ],
+});