wip

app/Modules/ApiAuth/Controllers/ApiAuthController.php

@@ -9,6 +9,8 @@ use App\Modules\ApiAuth\Requests\AuthRegisterRequest;
 use App\Modules\ApiAuth\Requests\AuthVerifyRequest;
 use App\Repos\UserRepo;
 use Illuminate\Http\JsonResponse;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\ValidationException;
 
 class ApiAuthController extends Controller
 {
@@ -31,6 +33,14 @@ class ApiAuthController extends Controller
      */
     public function login(AuthLoginRequest $request): JsonResponse
     {
+        $user = User::where('phone', $request->phone)->first();
+
+        if (! $user || ! Hash::check($request->password, $user->password)) {
+            throw ValidationException::withMessages([
+                'email' => ['The provided credentials are incorrect.'],
+            ]);
+        }
+
         sendSMSVerification($request->phone);
 
         return response()->json([