opensourcepos/app/Controllers/Login.php

<?php

namespace App\Controllers;

use App\Libraries\MY_Migration;
use App\Models\Employee;
use CodeIgniter\Events\Events;
use CodeIgniter\HTTP\RedirectResponse;
use CodeIgniter\HTTP\ResponseInterface;
use CodeIgniter\Model;
use Config\OSPOS;
use Config\Services;
use Exception;

/**
 * @property employee employee
 */
class Login extends BaseController
{
    public Model $employee;

    /**
     * @return RedirectResponse|ResponseInterface|string
     */
    public function index(): string|RedirectResponse|ResponseInterface
    {
        $this->employee = model(Employee::class);
        if (!$this->employee->is_logged_in()) {
            $migration = new MY_Migration(config('Migrations'));
            $config = config(OSPOS::class)->settings;

            $gcaptchaEnabled = array_key_exists('gcaptcha_enable', $config)
                ? $config['gcaptcha_enable']
                : false;

            $migration->migrateToCI4();

            $currentVersion = MY_Migration::getCurrentVersion();

            if ($currentVersion === null) {
                return $this->response->setJSON([
                    'success' => false,
                    'message' => lang('Login.migration_error_connection')
                ])->setStatusCode(503);
            }

            $latestVersion = $migration->getLatestMigration();

            $validation = Services::validation();

            $data = [
                'hasErrors'       => false,
                'isNewInstall'   => $currentVersion === 0,
                'isLatest'        => $latestVersion === $currentVersion && !service('pluginManager')->hasPendingMigrations(),
                'latestVersion'   => $latestVersion,
                'gcaptchaEnabled' => $gcaptchaEnabled,
                'config'           => $config,
                'validation'       => $validation
            ];

            if ($this->request->getMethod() !== 'POST') {
                return view('login', $data);
            }

            if (!$data['isLatest'] || $data['isNewInstall']) {
                ignore_user_abort(true);
                set_time_limit(3600);

                try {
                    $migration->setNamespace('App')->runLocked();
                } catch (Exception $e) {
                    if (str_contains($e->getMessage(), 'Migration already in progress')) {
                        $data['hasErrors'] = true;
                        $validation->addError('username', lang('Login.migration_running'));
                        return view('login', $data);
                    }
                    throw $e;
                }

                return redirect()->to('login');
            }

            $rules = ['username' => 'required|login_check[data]'];
            $messages = [
                'username' => [
                    'required'    => lang('Login.required_username'),
                    'login_check' => lang('Login.invalid_username_and_password'),
                ]
            ];

            if (!$this->validate($rules, $messages)) {
                $data['hasErrors'] = !empty($validation->getErrors());

                return view('login', $data);
            }

            Events::trigger('user_logged_in', (int)session('person_id'), []);
        }

        return redirect()->to('home');
    }

    public function migrate(): ResponseInterface
    {
        $currentVersion = MY_Migration::getCurrentVersion();

        if ($currentVersion === null) {
            return $this->response->setJSON([
                'success' => false,
                'message' => lang('Login.migration_error_connection')
            ])->setStatusCode(503);
        }

        // Only a confirmed empty database counts as a new install with no credentials to check.
        $isNewInstall = $currentVersion === 0;

        if (!$isNewInstall) {
            $rules = ['username' => 'required|login_check[data]'];
            $messages = [
                'username' => [
                    'required'    => lang('Login.required_username'),
                    'login_check' => lang('Login.invalid_username_and_password'),
                ]
            ];

            if (!$this->validate($rules, $messages)) {
                return $this->response->setJSON([
                    'success' => false,
                    'message' => lang('Login.invalid_username_and_password')
                ])->setStatusCode(401);
            }
        }

        try {
            $migration = new MY_Migration(config('Migrations'));

            ignore_user_abort(true);
            set_time_limit(3600);
            $migration->setNamespace('App')->runLocked();

            service('pluginManager')->runPendingMigrations();

            return $this->response->setJSON([
                'success' => true,
                'message' => 'Migration completed successfully'
            ]);

        } catch (Exception $e) {
            if (str_contains($e->getMessage(), 'Migration already in progress')) {
                return $this->response->setJSON([
                    'success' => false,
                    'message' => lang('Login.migration_running')
                ])->setStatusCode(202);
            }

            log_message('error', 'Migration failed: ' . $e->getMessage());

            return $this->response->setJSON([
                'success' => false,
                'message' => 'Migration failed: ' . $e->getMessage()
            ])->setStatusCode(500);
        }
    }
}