From eb61eabdd4fc0d50265b0853544e00ae910909d4 Mon Sep 17 00:00:00 2001
From: Coassolo-Lucas <lucascoassolo@gmail.com>
Date: Sat, 16 Aug 2025 17:18:05 -0300
Subject: [PATCH] Aregue middleware a /productos, /login y /dashboard, falta
 restringir el acceso a usuarios no admin
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Ver login.blade.php manejo de errores, y register. Sino dejar que diga: "Los datos no coindicen o el usuario y contraseña no coinciden", nose
---
 resources/views/catalogo.blade.php |  6 ++++++
 resources/views/login.blade.php    |  2 +-
 routes/web.php                     | 26 +++++++++++++++++---------
 3 files changed, 24 insertions(+), 10 deletions(-)
 create mode 100644 resources/views/catalogo.blade.php

diff --git a/resources/views/catalogo.blade.php b/resources/views/catalogo.blade.php
new file mode 100644
index 0000000..fa26743
--- /dev/null
+++ b/resources/views/catalogo.blade.php
@@ -0,0 +1,6 @@
+<x-app>
+
+
+
+
+</x-app>
\ No newline at end of file
diff --git a/resources/views/login.blade.php b/resources/views/login.blade.php
index 9f40b25..d390937 100644
--- a/resources/views/login.blade.php
+++ b/resources/views/login.blade.php
@@ -17,7 +17,7 @@
         <div class="bg-white p-8 rounded-xl shadow-lg w-full max-w-md">
             <form action="{{ route('login.attempt') }}" method="POST" class="space-y-5">
                 @csrf
-
+{{-- No muestra los errores, ver --}}
                 @if ($errors->any())
                     <div>
                         <ul>
diff --git a/routes/web.php b/routes/web.php
index 7cb2f56..a3006d2 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -16,9 +16,13 @@ Route::get('login', function(){
     return view('login');
 })->name('login');
 
-Route::post('login', LoginController::class)->name('login.attempt');
+Route::post('login', LoginController::class)
+->middleware('throttle:5,1')
+->name('login.attempt');
 
-Route::view('dashboard', 'dashboard')->name('dashboard');
+Route::view('dashboard', 'dashboard')
+->middleware('auth')
+->name('dashboard');
 
 Route::post('logout', function(){
     Auth::guard('web')->logout();
@@ -32,10 +36,14 @@ Route::post('logout', function(){
 Route::view('register', 'register')->name('register');
 Route::post('register', RegisterController::class)->name('register.store');
 
-Route::get('/productos',[ProductosController::class,'index'])->name('productos.index');
-Route::get('/productos/create',[ProductosController::class,'create'])->name('productos.create');
-Route::get('/productos/{id}', [ProductosController::class,'show'])->name('productos.show');
-Route::get('/productos/{id}/edit', [ProductosController::class,'edit'])->name('productos.edit');
-Route::post('/productos',[ProductosController::class,'store'])->name('productos.store');
-Route::put('/productos/{id}',[ProductosController::class,'update'])->name('productos.update');
-Route::delete('/productos/{id}', [ProductosController::class,'destroy'])->name('productos.destroy');
\ No newline at end of file
+Route::middleware(['auth'])->group(function () {
+    Route::get('/productos',[ProductosController::class,'index'])->name('productos.index');
+    Route::get('/productos/create',[ProductosController::class,'create'])->name('productos.create');
+    Route::get('/productos/{id}', [ProductosController::class,'show'])->name('productos.show');
+    Route::get('/productos/{id}/edit', [ProductosController::class,'edit'])->name('productos.edit');
+    Route::post('/productos',[ProductosController::class,'store'])->name('productos.store');
+    Route::put('/productos/{id}',[ProductosController::class,'update'])->name('productos.update');
+    Route::delete('/productos/{id}', [ProductosController::class,'destroy'])->name('productos.destroy');
+});
+
+Route::vieq('catalogo','catalogo')->name('catalogo');
\ No newline at end of file