add SessionTimeout logic

app/Http/Controllers/Api/Auth/SessionTimeoutController.php

@@ -0,0 +1,67 @@
+<?php
+
+namespace App\Http\Controllers\Api\Auth;
+
+use App\Http\Controllers\Api\BaseApiController;
+use App\Http\Requests\Auth\SessionTimeoutCheckRequest;
+use App\Http\Requests\Auth\SessionTimeoutConfigRequest;
+use App\Http\Requests\Auth\SessionTimeoutPingRequest;
+use App\Http\Resources\Auth\SessionTimeoutConfigResource;
+use App\Http\Resources\Auth\SessionTimeoutStatusResource;
+use App\Services\Auth\SessionTimeoutConfigService;
+use App\Services\Auth\SessionTimeoutService;
+use Illuminate\Http\JsonResponse;
+use Symfony\Component\HttpFoundation\Response;
+
+class SessionTimeoutController extends BaseApiController
+{
+    public function __construct(
+        private SessionTimeoutConfigService $configService,
+        private SessionTimeoutService $timeoutService
+    ) {
+        parent::__construct();
+    }
+
+    public function config(SessionTimeoutConfigRequest $request): JsonResponse
+    {
+        $config = $this->configService->config();
+
+        return $this->success([
+            'config' => new SessionTimeoutConfigResource($config),
+        ]);
+    }
+
+    public function check(SessionTimeoutCheckRequest $request): JsonResponse
+    {
+        $result = $this->timeoutService->checkTimeout();
+
+        if (($result['status'] ?? '') === 'expired') {
+            return $this->error(
+                $result['message'] ?? 'Session expired.',
+                Response::HTTP_UNAUTHORIZED,
+                (new SessionTimeoutStatusResource($result))->toArray($request)
+            );
+        }
+
+        return $this->success([
+            'session' => new SessionTimeoutStatusResource($result),
+        ]);
+    }
+
+    public function ping(SessionTimeoutPingRequest $request): JsonResponse
+    {
+        $result = $this->timeoutService->pingActivity();
+
+        if (($result['status'] ?? '') === 'expired') {
+            return $this->error(
+                $result['message'] ?? 'Session expired.',
+                Response::HTTP_UNAUTHORIZED,
+                (new SessionTimeoutStatusResource($result))->toArray($request)
+            );
+        }
+
+        return $this->success([
+            'session' => new SessionTimeoutStatusResource($result),
+        ]);
+    }
+}

app/Http/Requests/Auth/SessionTimeoutCheckRequest.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Http\Requests\Auth;
+
+use App\Http\Requests\ApiFormRequest;
+
+class SessionTimeoutCheckRequest extends ApiFormRequest
+{
+    public function authorize(): bool
+    {
+        return auth()->check();
+    }
+
+    public function rules(): array
+    {
+        return [];
+    }
+}

app/Http/Requests/Auth/SessionTimeoutConfigRequest.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Http\Requests\Auth;
+
+use App\Http\Requests\ApiFormRequest;
+
+class SessionTimeoutConfigRequest extends ApiFormRequest
+{
+    public function authorize(): bool
+    {
+        return auth()->check();
+    }
+
+    public function rules(): array
+    {
+        return [];
+    }
+}

app/Http/Requests/Auth/SessionTimeoutPingRequest.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Http\Requests\Auth;
+
+use App\Http\Requests\ApiFormRequest;
+
+class SessionTimeoutPingRequest extends ApiFormRequest
+{
+    public function authorize(): bool
+    {
+        return auth()->check();
+    }
+
+    public function rules(): array
+    {
+        return [];
+    }
+}

app/Http/Resources/Auth/SessionTimeoutConfigResource.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Http\Resources\Auth;
+
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class SessionTimeoutConfigResource extends JsonResource
+{
+    public function toArray($request): array
+    {
+        return [
+            'timeout' => (int) ($this['timeout'] ?? 0),
+            'warning_time' => (int) ($this['warning_time'] ?? 0),
+            'check_interval' => (int) ($this['check_interval'] ?? 0),
+            'logout_url' => (string) ($this['logout_url'] ?? ''),
+            'keep_alive_url' => (string) ($this['keep_alive_url'] ?? ''),
+            'check_url' => (string) ($this['check_url'] ?? ''),
+        ];
+    }
+}

app/Http/Resources/Auth/SessionTimeoutStatusResource.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Http\Resources\Auth;
+
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class SessionTimeoutStatusResource extends JsonResource
+{
+    public function toArray($request): array
+    {
+        return [
+            'status' => (string) ($this['status'] ?? ''),
+            'time_remaining' => (int) ($this['time_remaining'] ?? 0),
+            'redirect' => $this['redirect'] ?? null,
+            'message' => $this['message'] ?? null,
+        ];
+    }
+}