Htykuut

I have a form where at some point, the user can enter his email. So, I use it to create on-the-fly his account. The creation is ok, I use the api route with a POST and behinf with a controller, I use User::create([...]) followed by Auth::login($user) ... Everything is fine from the point of view of the API script, the user is connected.

But from the form page point of view, if the user change or refresh the page, he won't be connected. I think it's about security reasons, but how can I do that ? I'm new in Laravel, I just want to found the proper "laravel" way.

Thank you.

edit:

In the routes file :

Route::post('/user', 'UserController@receiveData');

In the controller file :

class UserController extends Controller

{

    public function receiveData (Request $request)

    {

        $response = new ServerResponse('User');



        switch ( $action = $request->input('action') )

        {

            case 'create_user_from_email' :



                /*if ( Auth::check() )

                {

                    echo '(Connected, email:'.Auth::user()->email.')';

                }

                else

                {

                    echo '(Not connected)';

                }*/



                if ( $email = $request->input('email') )

                {

                    $errorToken = null;



                    if ( $user = User::createFromEmail($email, $errorToken) )

                    {

                        /* Données optionnelles */

                        $profileData = $request->input('profile') ? json_decode($request->input('profile'), true) : null;

                        $addressData = $request->input('address') ? json_decode($request->input('address'), true) : null;



                        /* Création du profile, de l'adresse et du compte en banque par défaut.  */

                        $profile = $user->profile($profileData);

                        $address = $profile->primaryAddress($addressData);

                        $bankAccount = $user->primaryBankAccount();



                        /* Auto-connexion. */

                        Auth::login($user, true);



                        if ( Auth::check() )

                        {

                            $response->setStatus(0, 'New User created.');

                            $response->addData('user_id', $user->id);

                            $response->addData('profile_id', $profile->id);

                            $response->addData('address_id', $address->id);

                            $response->addData('bank_account_id', $bankAccount->id);

                        }

                        else

                        {

                            $response->setStatus(4, 'Unable to connect the new User !');

                            $response->addData('error', 'user_not_connected');

                        }

                    }

                    else

                    {

                        $response->setStatus(3, 'Unable to create a new User ! See "error" key.');

                        $response->addData('error', $errorToken);

                    }

                }

                else

                {

                    $response->setStatus(2, 'There is email address !');

                }

                break;



            default:

                $response->setStatus(1, 'Action "'.$action.'" unhandled !');

                break;

        }



        return $response->get();

    }

}