From f862f06d617fc9b279fce9946e3f3add01829f72 Mon Sep 17 00:00:00 2001
From: "venkatesh.r" <venkatesh.r@venbainfotech.com>
Date: Mon, 10 Nov 2025 14:37:51 +0530
Subject: [PATCH] FEAT_CHECK_PASS

---
 app/Config/Routes.php                         |  1 +
 .../RestAuthenticationController.php          | 71 +++++++++++++++++++
 2 files changed, 72 insertions(+)

diff --git a/app/Config/Routes.php b/app/Config/Routes.php
index af9b67e1..0c0be495 100755
--- a/app/Config/Routes.php
+++ b/app/Config/Routes.php
@@ -520,6 +520,7 @@ $routes->post("employeeRest/savePassword", "RestAuthenticationController::savePa
 $routes->post("employeeRest/changePassword", "RestAuthenticationController::changePassword");
 $routes->post("employeeRest/verifyPassword", "RestAuthenticationController::verifyPassword");
 $routes->post("employeeRest/verifyOtp", "RestAuthenticationController::verifyOtp");
+$routes->post("employeeRest/checkPassword", "RestAuthenticationController::checkPassword");
 
 //HR login api's
 $routes->post("/employeeRest/verifyHrWithMobileNumber", "RestAuthenticationController::verifyHrWithMobileNumber");
diff --git a/app/Controllers/RestAuthenticationController.php b/app/Controllers/RestAuthenticationController.php
index c5630624..702d43bf 100755
--- a/app/Controllers/RestAuthenticationController.php
+++ b/app/Controllers/RestAuthenticationController.php
@@ -1874,6 +1874,77 @@ class RestAuthenticationController extends AdminController
         }
     }
 
+    public function checkPassword()
+    { 
+        $this->myLogger->logme("error", "REST-AUTH-CONTROLLER - checkPassword: Request payload = " . json_encode($this->request->getJSON() ?? []));
+
+        try {
+
+            $payload = $this->request->getJSON() ?? [];
+            $mobile_number = $payload->mobile_number ?? null;
+            $email_id      = $payload->email_id ?? null;
+
+            if(!$mobile_number && !$email_id){
+                return $this->respond(['status' => 'failed', 'code' => 400, 'message' => 'Mobile number or Email ID is required'], 400);
+            }
+
+            // 🔹 Fetch employee data
+            if ($mobile_number) {
+
+                $builder = $this->employeeModel
+                    ->select('employees.*')
+                    ->join('employee_polices', 'employees.id = employee_polices.employee_id')
+                    ->where('employees.mobile', $mobile_number)
+                    ->where('employees.relationship', 'Self')
+                    ->where('employee_polices.is_active', 1)
+                    ->whereIn('employee_polices.status', ['active'])
+                    ->where('employees.is_active', 1)
+                    ->whereIn('employees.emp_status', ['active']);
+
+                if (!empty($client_id)) {
+                    $builder->where('employees.client_id', $client_id);
+                }
+
+                $employeeData = $builder->orderBy('employees.id', 'desc')->first();
+
+            } else {
+
+                $builder = $this->employeeModel
+                    ->select('employees.*')
+                    ->join('employee_polices', 'employees.id = employee_polices.employee_id')
+                    ->where('employees.email_corporate', $email_id)
+                    ->where('employees.relationship', 'Self')
+                    ->where('employee_polices.is_active', 1)
+                    ->whereIn('employee_polices.status', ['active'])
+                    ->where('employees.is_active', 1)
+                    ->whereIn('employees.emp_status', ['active']);
+
+                if (!empty($client_id)) {
+                    $builder->where('employees.client_id', $client_id);
+                }
+
+                $employeeData = $builder->orderBy('employees.id', 'desc')->first();
+
+            } 
+
+            $lastQuery = $this->employeeModel->db->getLastQuery();
+            $this->myLogger->logme("error", "REST-AUTH-CONTROLLER - verifyPassword: Last Executed Query: " . $lastQuery);
+            $this->myLogger->logme("error", "REST-AUTH-CONTROLLER - verifyPassword: employeeData: " . json_encode($employeeData ?? []));
+            
+            if ($employeeData &&  $employeeData["password"] != null) {
+                $this->myLogger->logme("error", "REST-AUTH-CONTROLLER - checkPassword: Mpin - Exist");
+                return $this->respond(['status' => 'success','code' => 200,'data' => "", 'message' => "Password - exist"],200);
+            } else {
+                $this->myLogger->logme("error", "REST-AUTH-CONTROLLER - checkPassword: Password - not found in PRE so call the thirdpartapi to the POST to check the MPIN");
+                return $this->respond(['status' => 'failed','code' => 200,'data' => "", 'message' => "Password - not exist"],200);
+            }
+            
+        } catch (\Exception $e) {
+            $this->myLogger->logme("error", "REST-AUTH-CONTROLLER - Exception: " . $e->getMessage() . " --- Line: " . $e->getLine() . " --- Trace: " . $e->getTraceAsString());
+            return $this->respond(['status' => 'failed','code' => 500,'data' => "", 'message' => $e->getMessage()],500);
+        }
+    }
+
     // -------------- EMP MOBILE NUMBER UPDATE API'S -------------------------------------------------------------------------------------------------------------
 
     public function updateMobileNumber()