finished api

laravel/routes/api.php

@@ -0,0 +1,35 @@
+<?php
+
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Route;
+use Illuminate\Support\Facades\Hash;
+
+// Make sure BilletController exists at app/Http/Controllers/BilletController.php
+use App\Http\Controllers\BilletController;
+
+Route::middleware('auth:sanctum')->group(function () {
+    Route::get('/user', [\App\Http\Controllers\UserController::class, 'show']);
+    Route::post('/user/logout', function (Request $request) {
+        $request->user()->tokens()->delete();
+    });
+    Route::get('/billets/{id}', [BilletController::class, 'show'])->whereNumber('id');
+    Route::post('/commentaires', [\App\Http\Controllers\CommentaireController::class, 'store']);
+});
+
+Route::post('/register', [\App\Http\Controllers\UserController::class, 'store']);
+
+Route::post('/login', function (Request $request) {
+    $request->validate([
+        'email' => 'required|email|max:50',
+        'password' => 'required|string|min:8',
+    ]);
+
+    $user = \App\Models\User::where('email', $request->email)->first();
+    if (!$user || !Hash::check($request->password, $user->password)) {
+        throw \Illuminate\Validation\ValidationException::withMessages([
+            'email' => ['The provided credentials are incorrect.'],
+        ]);
+    }
+
+    return $user->createToken('auth_token')->plainTextToken;
+});