CFDivePlatform/app/Http/Controllers/API/AdminUserController.php

<?php

namespace App\Http\Controllers\API;

use App\Http\Controllers\Controller;
use App\Models\User;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Cache;

class AdminUserController extends Controller
{
    private function checkAdmin()
    {
        if (auth()->user()->role !== 'admin') {
            return response()->json(['status' => false, 'message' => '無權限存取'], 403);
        }
        return null;
    }

    private function findUser(int $id, string $role)
    {
        return User::where('id', $id)->where('role', $role)->first();
    }

    public function members(Request $request)
    {
        if ($err = $this->checkAdmin()) return $err;

        $query = User::where('role', 'member')->with('memberProfile');

        if ($q = $request->query('q')) {
            $query->where(function ($sub) use ($q) {
                $sub->where('name', 'like', "%{$q}%")
                    ->orWhere('email', 'like', "%{$q}%");
            });
        }

        $paginated = $query->latest()->paginate(15);

        return response()->json([
            'status' => true,
            'data'   => $paginated->items(),
            'meta'   => [
                'total'        => $paginated->total(),
                'per_page'     => $paginated->perPage(),
                'current_page' => $paginated->currentPage(),
                'last_page'    => $paginated->lastPage(),
            ],
        ]);
    }

    public function member(int $id)
    {
        if ($err = $this->checkAdmin()) return $err;

        $user = $this->findUser($id, 'member');
        if (!$user) {
            return response()->json(['status' => false, 'message' => '用戶不存在'], 404);
        }

        return response()->json(['status' => true, 'data' => $user->load('memberProfile')]);
    }

    public function toggleMemberActive(int $id)
    {
        if ($err = $this->checkAdmin()) return $err;

        $user = $this->findUser($id, 'member');
        if (!$user) {
            return response()->json(['status' => false, 'message' => '用戶不存在'], 404);
        }

        $user->is_active = !$user->is_active;
        $user->save();

        $msg = $user->is_active ? '帳號已啟用' : '帳號已停用';
        return response()->json(['status' => true, 'message' => $msg, 'data' => ['is_active' => $user->is_active]]);
    }

    public function providers(Request $request)
    {
        if ($err = $this->checkAdmin()) return $err;

        $query = User::where('role', 'provider')->with('providerProfile');

        if ($q = $request->query('q')) {
            $query->where(function ($sub) use ($q) {
                $sub->where('name', 'like', "%{$q}%")
                    ->orWhere('email', 'like', "%{$q}%");
            });
        }

        $paginated = $query->latest()->paginate(15);

        return response()->json([
            'status' => true,
            'data'   => $paginated->items(),
            'meta'   => [
                'total'        => $paginated->total(),
                'per_page'     => $paginated->perPage(),
                'current_page' => $paginated->currentPage(),
                'last_page'    => $paginated->lastPage(),
            ],
        ]);
    }

    public function provider(int $id)
    {
        if ($err = $this->checkAdmin()) return $err;

        $user = $this->findUser($id, 'provider');
        if (!$user) {
            return response()->json(['status' => false, 'message' => '用戶不存在'], 404);
        }

        return response()->json(['status' => true, 'data' => $user->load('providerProfile')]);
    }

    public function toggleProviderActive(int $id)
    {
        if ($err = $this->checkAdmin()) return $err;

        $user = $this->findUser($id, 'provider');
        if (!$user) {
            return response()->json(['status' => false, 'message' => '用戶不存在'], 404);
        }

        $user->is_active = !$user->is_active;
        $user->save();

        $msg = $user->is_active ? '帳號已啟用' : '帳號已停用';
        return response()->json(['status' => true, 'message' => $msg, 'data' => ['is_active' => $user->is_active]]);
    }

    public function toggleProviderVerified(int $id)
    {
        if ($err = $this->checkAdmin()) return $err;

        $user = $this->findUser($id, 'provider');
        if (!$user) {
            return response()->json(['status' => false, 'message' => '用戶不存在'], 404);
        }

        $profile = $user->providerProfile;
        $profile->is_verified = !$profile->is_verified;
        $profile->save();

        // 驗證狀態影響公開課程列表的可見性，需立即讓快取失效
        Cache::tags(['diving_offers'])->flush();

        $msg = $profile->is_verified ? '教練已驗證' : '已取消驗證';
        return response()->json(['status' => true, 'message' => $msg, 'data' => ['is_verified' => $profile->is_verified]]);
    }
}