From 505d060df23322b6b8a79989f74379078af64d55 Mon Sep 17 00:00:00 2001
From: Novy San87 <novysan87@smkn1-wonorejo.sch.id>
Date: Thu, 6 Aug 2026 22:03:05 +0700
Subject: [PATCH] =?UTF-8?q?feat:=20Logout=20jarak=20jauh=20wali=20?=
 =?UTF-8?q?=E2=80=94=20cabut=20semua=20token=20Sanctum=20dari=20panel=20ad?=
 =?UTF-8?q?min,=20app=20langsung=20401=20=E2=86=92=20login=20ulang?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../Controllers/Admin/WaliMuridController.php | 14 +++++++++
 resources/views/parents/index.blade.php       | 30 +++++++++++++++++++
 routes/web.php                                |  1 +
 3 files changed, 45 insertions(+)

diff --git a/app/Http/Controllers/Admin/WaliMuridController.php b/app/Http/Controllers/Admin/WaliMuridController.php
index 541a1cc..5e7848b 100644
--- a/app/Http/Controllers/Admin/WaliMuridController.php
+++ b/app/Http/Controllers/Admin/WaliMuridController.php
@@ -47,6 +47,20 @@ class WaliMuridController extends Controller
         return view('parents.index', compact('users', 'total', 'totalAktif', 'pending', 'baruMingguIni'));
     }
 
+    /**
+     * Logout jarak jauh: cabut semua token Sanctum akun wali
+     * → app di semua perangkat langsung 401 → otomatis kembali ke login.
+     */
+    public function forceLogout(int $userId): RedirectResponse
+    {
+        $user = User::where('role', 'parent')->findOrFail($userId);
+
+        $user->tokens()->delete();
+        $user->forceFill(['active_session_token' => null])->save();
+
+        return back()->with('success', 'Semua perangkat akun "' . $user->name . '" telah di-logout dari jarak jauh.');
+    }
+
     /**
      * Hapus akun wali murid beserta tautan anak & perangkatnya.
      * Hanya akun role=parent yang boleh dihapus lewat sini.
diff --git a/resources/views/parents/index.blade.php b/resources/views/parents/index.blade.php
index ac82905..79f7c12 100644
--- a/resources/views/parents/index.blade.php
+++ b/resources/views/parents/index.blade.php
@@ -255,6 +255,11 @@
                         </td>
                         <td class="px-6 py-4 text-right">
                             <div class="flex items-center justify-end gap-2">
+                                <button onclick="forceLogoutWali({{ $user->id }}, '{{ addslashes($user->name) }}')"
+                                    class="inline-flex items-center gap-2 px-3.5 py-2 rounded-xl bg-white border border-slate-200 text-slate-600 text-xs font-bold shadow-sm hover:shadow-md hover:-translate-y-0.5 hover:border-red-200 hover:text-red-600 transition-all"
+                                    title="Logout akun di semua perangkat">
+                                    <i class="fa-solid fa-right-from-bracket"></i> Logout
+                                </button>
                                 <button onclick="resetWaliPassword({{ $user->id }}, '{{ addslashes($user->name) }}')"
                                     class="inline-flex items-center gap-2 px-3.5 py-2 rounded-xl bg-gradient-to-r from-amber-400 to-orange-500 text-white text-xs font-bold shadow-md shadow-amber-500/30 hover:shadow-lg hover:-translate-y-0.5 hover:brightness-105 transition-all"
                                     title="Set password baru">
@@ -281,6 +286,31 @@
 
 @push('scripts')
 <script>
+function forceLogoutWali(userId, userName) {
+    Swal.fire({
+        title: 'Logout jarak jauh?',
+        html: 'Semua perangkat akun <b>' + userName + '</b> akan di-logout paksa.<br>Wali harus login ulang dengan password.',
+        icon: 'question',
+        confirmButtonText: '<i class="fa-solid fa-right-from-bracket"></i> Ya, Logout',
+        showCancelButton: true,
+        cancelButtonText: 'Batal',
+        confirmButtonColor: '#6366f1',
+    }).then((result) => {
+        if (result.isConfirmed) {
+            fetch('{{ url('parents') }}/' + userId + '/force-logout', {
+                method: 'POST',
+                headers: {
+                    'X-CSRF-TOKEN': document.querySelector('meta[name="csrf-token"]').content,
+                    'Accept': 'application/json',
+                },
+            }).then(r => {
+                if (r.redirected) window.location.href = r.url;
+                else location.reload();
+            });
+        }
+    });
+}
+
 function deleteWali(userId, userName) {
     Swal.fire({
         title: 'Hapus akun ' + userName + '?',
diff --git a/routes/web.php b/routes/web.php
index 53c48ed..1ce7db5 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -143,6 +143,7 @@ Route::middleware('auth')->group(function () {
     Route::middleware('permission:parents-verify')->group(function () {
         Route::get('/parents', [\App\Http\Controllers\Admin\WaliMuridController::class, 'index'])->name('parents.index');
         Route::delete('/parents/{user}', [\App\Http\Controllers\Admin\WaliMuridController::class, 'destroy'])->name('parents.destroy');
+        Route::post('/parents/{user}/force-logout', [\App\Http\Controllers\Admin\WaliMuridController::class, 'forceLogout'])->name('parents.force-logout');
         Route::get('/parents/verification', [\App\Http\Controllers\Admin\ParentVerificationController::class, 'index'])->name('parents.verification');
         Route::post('/parents/verification/{link}/approve', [\App\Http\Controllers\Admin\ParentVerificationController::class, 'approve'])->name('parents.verification.approve');
         Route::post('/parents/verification/{link}/reject', [\App\Http\Controllers\Admin\ParentVerificationController::class, 'reject'])->name('parents.verification.reject');