Autentikasi

flowchart TD A([User: Buka\nHalaman Login]) --> B[Input Email\n& Password] B --> C[Frontend: POST\n/api/auth/login] C --> D[Backend: Validasi\nKredensial] D --> E{Valid?} E -->|Tidak| F[Return 401\nTampil Error] F --> B E -->|Ya| G[Cek Status\nUser Aktif?] G -->|Non-Aktif| H[Return 403\nAkun Dinonaktifkan] G -->|Aktif| I[Generate Sanctum\nAPI Token] I --> J[Set httpOnly Cookie\nRefresh Token] J --> K[Return Access Token\n+ User Data + Role] K --> L[Frontend: Store Token\ndi Memory] L --> M[Redirect ke\nDashboard sesuai Role] M --> N{Sesi Aktif} N -->|Request API| O[Attach Bearer Token\ndi Header] O --> P[Backend Validasi\nToken & Permission] P -->|Valid| Q[Proses Request] P -->|Invalid/Expired| R[Return 401] R --> S[Frontend: Auto Refresh\nToken via httpOnly Cookie] S -->|Berhasil| O S -->|Gagal / Expired| A N -->|Logout| T[POST /api/auth/logout\nRevoke Token] T --> A style A fill:#dbeafe,stroke:#3b82f6 style M fill:#dcfce7,stroke:#16a34a style F fill:#fee2e2,stroke:#ef4444 style H fill:#fee2e2,stroke:#ef4444