Membangun aplikasi web di era modern memerlukan pondasi yang kokoh. Framework modern memberikan fleksibilitas luar biasa bagi developer untuk menghadirkan fitur kompleks secara cepat tanpa mengabaikan aspek keamanan dan keandalan sistem.
Tahapan Implementasi & Walkthrough Kode
Berikut adalah langkah demi langkah teknis yang dapat Anda ikuti langsung pada codebase Anda:
Tahap 1: Penulisan Kode & Konfigurasi
<?php
namespace App\Models;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Database\Eloquent\Factories\HasFactory;
use Laravel\Sanctum\HasApiTokens;
class User extends Authenticatable
{
use HasFactory, HasApiTokens;
protected $guarded = ['id'];
protected $hidden = [
'password',
];
public function transactions()
{
return $this->hasMany(Transaction::class);
}
public function scopeHasRole($query, $role)
{
return $query->where('id', auth()->id())
->where('role', $role);
}
}
Tahap 2: Penulisan Kode & Konfigurasi
<?php
namespace App\Http\Controllers;
use App\Http\Controllers\Controller;
use Illuminate\Http\Response;
use App\Utils\JsonResponse;
class AuthController extends Controller
{
public function login()
{
$credentials = request(['email', 'password']);
if (!auth()->attempt($credentials)) {
return response()->json(new JsonResponse(
'Login Gagal',
[],
'login_error'
), Response::HTTP_UNAUTHORIZED);
}
$token = auth()->user()->createToken('API Token')->plainTextToken;
return response()->json(new JsonResponse(
'Login berhasil',
[
'user' => auth()->user(),
'access_token' => $token,
'token_type' => 'bearer',
'expires_in' => config('sanctum.expiration')
]
), Response::HTTP_OK);
}
public function me()
{
return response()->json(new JsonResponse(
'Me',
auth()->user()
), Response::HTTP_OK);
}
public function logout()
{
auth()->user()->tokens()->delete();
return response()->json(new JsonResponse(
'Logout Berhasil',
[]
), Response::HTTP_OK);
}
}
Tahap 3: Penulisan Kode & Konfigurasi
<?php
namespace App\Http;
use Illuminate\Foundation\Http\Kernel as HttpKernel;
class Kernel extends HttpKernel
{
/**
* The application's global HTTP middleware stack.
*
* These middleware are run during every request to your application.
*
* @var array<int, class-string|string>
*/
protected $middleware = [
// \App\Http\Middleware\TrustHosts::class,
\App\Http\Middleware\TrustProxies::class,
\Fruitcake\Cors\HandleCors::class,
\App\Http\Middleware\PreventRequestsDuringMaintenance::class,
\Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
\App\Http\Middleware\TrimStrings::class,
\Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,
\App\Http\Middleware\UnacceptableMiddleware::class,
];
/**
* The application's route middleware groups.
*
* @var array<string, array<int, class-string|string>>
*/
protected $middlewareGroups = [
'web' => [
\App\Http\Middleware\EncryptCookies::class,
\Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
\Illuminate\Session\Middleware\StartSession::class,
// \Illuminate\Session\Middleware\AuthenticateSession::class,
\Illuminate\View\Middleware\ShareErrorsFromSession::class,
\App\Http\Middleware\VerifyCsrfToken::class,
\Illuminate\Routing\Middleware\SubstituteBindings::class,
],
'api' => [
// \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
'throttle:api',
\Illuminate\Routing\Middleware\SubstituteBindings::class,
],
];
/**
* The application's route middleware.
*
* These middleware may be assigned to groups or used individually.
*
* @var array<string, class-string|string>
*/
protected $routeMiddleware = [
'auth' => \App\Http\Middleware\Authenticate::class,
'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
'can' => \Illuminate\Auth\Middleware\Authorize::class,
'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class,
'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class,
'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
'role' => \App\Http\Middleware\RoleMiddleware::class,
];
}
Tahap 4: Penulisan Kode & Konfigurasi
<?php
use App\Http\Controllers\AuthController;
use App\Http\Controllers\CategoryController;
use App\Http\Controllers\DashboardController;
use App\Http\Controllers\IncomeReportController;
use App\Http\Controllers\ItemController;
use App\Http\Controllers\TableController;
use App\Http\Controllers\TransactionController;
use Illuminate\Support\Facades\Route;
Route::prefix('v1')->group(function () {
Route::controller(AuthController::class)->group(function () {
Route::post('/auth/login', 'login');
Route::middleware('auth:sanctum')->group(function () {
Route::get('/auth/me', 'me');
Route::post('/auth/logout', 'logout');
});
});
Route::middleware('auth:sanctum')->group(function () {
Route::controller(CategoryController::class)->group(function () {
Route::get('/categories', 'index');
Route::get('/categories/{id}', 'show');
});
Route::controller(TableController::class)->group(function () {
Route::get('/tables', 'index');
Route::get('/tables/{id}', 'show');
});
Route::controller(TransactionController::class)->group(function () {
Route::get('/items', 'index');
Route::get('/items/{id}', 'show');
});
Route::controller(TransactionController::class)->group(function () {
Route::get('/transactions', 'index');
Route::get('/transactions/{id}', 'show');
});
Route::get('/dashboard',DashboardController::class);
Route::get('reports/income-report', IncomeReportController::class);
});
Route::middleware(['auth:sanctum', 'role:kasir'])->group(function () {
Route::controller(TransactionController::class)->group(function () {
Route::post('/transactions', 'store');
Route::put('/transactions/{id}', 'update');
Route::delete('/transactions/{id}', 'destroy');
Route::put('/transactions/{id}/status', 'updateStatus');
});
});
Route::middleware(['auth:sanctum', 'role:admin'])->group(function () {
Route::controller(CategoryController::class)->group(function () {
Route::post('/categories', 'store');
Route::put('/categories/{id}', 'update');
Route::delete('/categories/{id}', 'destroy');
});
Route::controller(TableController::class)->group(function () {
Route::post('/tables', 'store');
Route::put('/tables/{id}', 'update');
Route::delete('/tables/{id}', 'destroy');
});
Route::controller(ItemController::class)->group(function () {
Route::post('/items', 'store');
Route::put('/items/{id}', 'update');
Route::delete('/items/{id}', 'destroy');
});
});
});
Selalu gunakan pendekatan deklaratif, validasi input seawal mungkin di boundary layer, dan lakukan logging terstruktur untuk memudahkan observability ketika sistem dijalankan di lingkungan cloud produksi.
Kesimpulan
Dengan mengikuti langkah-langkah terstruktur di atas, implementasi modul Anda akan jauh lebih rapi, aman dari bug umum, serta siap diskalakan ke lingkungan produksi.
Nantikan artikel tutorial praktis lainnya seputar fullstack development, microservices, dan otomasi AI di Blog Engineering SiHubung. Selamat mencoba!