some progress

app/Http/Controllers/Api/AuthController.php

@@ -0,0 +1,71 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\ValidationException;
+
+class AuthController extends Controller
+{
+    /**
+     * Create a new API token for the authenticated user.
+     */
+    public function createToken(Request $request): JsonResponse
+    {
+        $validated = $request->validate([
+            'token_name' => ['required', 'string', 'max:255'],
+        ]);
+
+        $token = $request->user()->createToken($validated['token_name']);
+
+        return response()->json([
+            'token' => $token->plainTextToken,
+            'type' => 'Bearer',
+        ], 201);
+    }
+
+    /**
+     * List all tokens for the authenticated user.
+     */
+    public function tokens(Request $request): JsonResponse
+    {
+        $tokens = $request->user()->tokens()->get(['id', 'name', 'last_used_at', 'created_at']);
+
+        return response()->json([
+            'data' => $tokens,
+        ]);
+    }
+
+    /**
+     * Revoke a specific token.
+     */
+    public function revokeToken(Request $request, string $tokenId): JsonResponse
+    {
+        $deleted = $request->user()->tokens()->where('id', $tokenId)->delete();
+
+        if (!$deleted) {
+            return response()->json([
+                'message' => 'Token not found',
+            ], 404);
+        }
+
+        return response()->json([
+            'message' => 'Token revoked successfully',
+        ]);
+    }
+
+    /**
+     * Revoke all tokens for the authenticated user.
+     */
+    public function revokeAllTokens(Request $request): JsonResponse
+    {
+        $request->user()->tokens()->delete();
+
+        return response()->json([
+            'message' => 'All tokens revoked successfully',
+        ]);
+    }
+}