remove codeigniter

app/Http/Controllers/Api/Auth/AuthController.php

@@ -48,7 +48,7 @@ class AuthController extends BaseApiController
             ], 401);
         }
 
-        if (! ci_password_verify($password, (string) $user->password)) {
+        if (! verify_stored_password($password, (string) $user->password)) {
             $security->handleFailedLogin($user, $email, (string) $ip);
 
             return response()->json([

app/Http/Controllers/Api/Auth/AuthSessionController.php

@@ -26,9 +26,7 @@ class AuthSessionController extends Controller
         private ApplicationUrlService $urls,
     ) {}
 
-    /**
-     * CI `loginMask` — login page bootstrap / redirect when already authenticated.
-     */
+    /** Returns login bootstrap state for the web portal. */
     public function loginMask(Request $request): JsonResponse
     {
         $redirectTo = $this->sessionAuth->sanitizeRedirectTarget(
@@ -77,9 +75,7 @@ class AuthSessionController extends Controller
         ]);
     }
 
-    /**
-     * CI `login` — POST /user/login.
-     */
+    /** Creates a web session from the submitted credentials. */
     public function login(LoginSessionRequest $request): JsonResponse
     {
         $email = (string) $request->validated('email');
@@ -116,7 +112,7 @@ class AuthSessionController extends Controller
             ], 403);
         }
 
-        if (! ci_password_verify($password, (string) $user->password)) {
+        if (! verify_stored_password($password, (string) $user->password)) {
             $this->security->handleFailedLogin($user, $email, $ip);
 
             return response()->json([
@@ -153,9 +149,7 @@ class AuthSessionController extends Controller
         ]);
     }
 
-    /**
-     * CI `logout` — GET /logout.
-     */
+    /** Closes the current web session. */
     public function logout(Request $request): JsonResponse
     {
         $userId = Auth::guard('web')->id();
@@ -174,9 +168,7 @@ class AuthSessionController extends Controller
         ]);
     }
 
-    /**
-     * CI `selectRole` — GET /select-role.
-     */
+    /** Returns the available post-login roles for the current user. */
     public function selectRole(Request $request): JsonResponse
     {
         if (! Auth::guard('web')->check()) {
@@ -207,9 +199,7 @@ class AuthSessionController extends Controller
         ]);
     }
 
-    /**
-     * CI `setRole` — POST /set-role.
-     */
+    /** Stores the selected post-login role in session state. */
     public function setRole(SetRoleSessionRequest $request): JsonResponse
     {
         if (! Auth::guard('web')->check()) {

app/Http/Controllers/Api/Auth/RegisterController.php

@@ -4,7 +4,7 @@ namespace App\Http\Controllers\Api\Auth;
 
 use App\Http\Controllers\Api\Core\BaseApiController;
 use App\Http\Resources\Auth\RegisterResource;
-use App\Services\Auth\CodeIgniterApiRegistrationService;
+use App\Services\Auth\ApiRegistrationService;
 use App\Services\Auth\RegistrationCaptchaService;
 use App\Services\Auth\RegistrationService;
 use Illuminate\Http\JsonResponse;
@@ -32,9 +32,9 @@ class RegisterController extends BaseApiController
 
     public function store(Request $request): JsonResponse
     {
-        // CodeIgniter-style JSON register (POST api/v1/register): password + no captcha field.
+        // Support direct JSON registration when the SPA skips the captcha bootstrap step.
         if (! $request->has('captcha') && $request->filled('password')) {
-            return app(CodeIgniterApiRegistrationService::class)->registerResponse($request);
+            return app(ApiRegistrationService::class)->registerResponse($request);
         }
 
         if (app()->runningUnitTests() && $request->header('X-Debug-Request') === '1') {

app/Http/Controllers/Api/Auth/SessionTimeoutController.php

@@ -2,9 +2,9 @@
 
 namespace App\Http\Controllers\Api\Auth;
 
-use App\Config\SessionTimeout;
 use App\Http\Controllers\Controller;
 use App\Services\ApplicationUrlService;
+use App\Support\SessionTimeoutConfig;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
@@ -14,7 +14,7 @@ use Illuminate\Support\Facades\Auth;
  */
 class SessionTimeoutController extends Controller
 {
-    /** CI-compatible session key */
+    /** Shared session key for last-activity tracking. */
     private const SESSION_KEY = 'last_activity';
 
     public function __construct(
@@ -23,15 +23,15 @@ class SessionTimeoutController extends Controller
     }
 
     /**
-     * CI nested routes: SessionController::getTimeoutConfig shape (URLs point at this app).
+     * Returns timeout metadata for the web portal.
      */
     public function getTimeoutConfig(): JsonResponse
     {
         return response()->json([
             'success' => true,
-            'timeout' => SessionTimeout::TIMEOUT_DURATION,
-            'warning_time' => SessionTimeout::WARNING_THRESHOLD,
-            'check_interval' => SessionTimeout::CHECK_INTERVAL,
+            'timeout' => SessionTimeoutConfig::TIMEOUT_DURATION,
+            'warning_time' => SessionTimeoutConfig::WARNING_THRESHOLD,
+            'check_interval' => SessionTimeoutConfig::CHECK_INTERVAL,
             'logout_url' => $this->urls->webLogoutUrl(),
             'keep_alive_url' => $this->urls->webSessionPingUrl(),
             'check_url' => $this->urls->webSessionCheckTimeoutUrl(),
@@ -49,20 +49,20 @@ class SessionTimeoutController extends Controller
         $lastActivity = (int) $session->get(self::SESSION_KEY);
         $elapsed = time() - $lastActivity;
 
-        if ($elapsed > SessionTimeout::TIMEOUT_DURATION) {
+        if ($elapsed > SessionTimeoutConfig::TIMEOUT_DURATION) {
             return $this->expireSession($request);
         }
 
-        if ($elapsed > SessionTimeout::WARNING_THRESHOLD) {
+        if ($elapsed > SessionTimeoutConfig::WARNING_THRESHOLD) {
             return response()->json([
                 'status' => 'warning',
-                'time_remaining' => SessionTimeout::TIMEOUT_DURATION - $elapsed,
+                'time_remaining' => SessionTimeoutConfig::TIMEOUT_DURATION - $elapsed,
             ]);
         }
 
         return response()->json([
             'status' => 'active',
-            'time_remaining' => SessionTimeout::TIMEOUT_DURATION - $elapsed,
+            'time_remaining' => SessionTimeoutConfig::TIMEOUT_DURATION - $elapsed,
         ]);
     }
 
@@ -71,7 +71,7 @@ class SessionTimeoutController extends Controller
         $session = $request->session();
 
         if (! $session->has(self::SESSION_KEY)
-            || (time() - (int) $session->get(self::SESSION_KEY)) > SessionTimeout::TIMEOUT_DURATION) {
+            || (time() - (int) $session->get(self::SESSION_KEY)) > SessionTimeoutConfig::TIMEOUT_DURATION) {
             return $this->expireSession($request);
         }
 
@@ -79,7 +79,7 @@ class SessionTimeoutController extends Controller
 
         return response()->json([
             'status' => 'active',
-            'time_remaining' => SessionTimeout::TIMEOUT_DURATION,
+            'time_remaining' => SessionTimeoutConfig::TIMEOUT_DURATION,
         ]);
     }