Initial commit

app/Http/Controllers/AttemptController.php

@@ -0,0 +1,140 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+
+use App\Models\Attempt;
+use App\Models\Answer;
+use App\Models\Quiz;
+use App\Models\Option;
+use App\Models\AdminLog;
+use Illuminate\Support\Facades\DB;
+use Inertia\Inertia;
+
+class AttemptController extends Controller
+{
+    public function destroy(Attempt $attempt)
+    {
+        $this->authorizeAdmin();
+
+        $candidateName = $attempt->candidate->user->name;
+        $quizTitle = $attempt->quiz->title;
+
+        DB::transaction(function () use ($attempt, $candidateName, $quizTitle) {
+            // Log the action
+            AdminLog::create([
+                'user_id' => auth()->id(),
+                'action' => 'DELETE_ATTEMPT',
+                'description' => "Suppression du test '{$quizTitle}' pour le candidat '{$candidateName}'."
+            ]);
+
+            // Delete attempt (cascades to answers)
+            $attempt->delete();
+
+            // Re-evaluate candidate status if needed
+            $candidate = $attempt->candidate;
+            if ($candidate->attempts()->count() === 0) {
+                $candidate->update(['status' => 'en_attente']);
+            }
+        });
+
+        return back()->with('success', 'Tentative de test supprimée et action journalisée.');
+    }
+
+    private function authorizeAdmin()
+    {
+        if (!auth()->user()->isAdmin()) {
+            abort(403);
+        }
+    }
+    public function show(Quiz $quiz)
+    {
+        $candidate = auth()->user()->candidate;
+
+        if (!$candidate) {
+            abort(403, 'Seuls les candidats peuvent passer des quiz.');
+        }
+        
+        $attempt = Attempt::where('candidate_id', $candidate->id)
+            ->where('quiz_id', $quiz->id)
+            ->first();
+
+        if ($attempt && $attempt->finished_at) {
+            return Inertia::render('Candidate/Thanks');
+        }
+
+        if (!$attempt) {
+            $attempt = Attempt::create([
+                'candidate_id' => $candidate->id,
+                'quiz_id' => $quiz->id,
+                'started_at' => now(),
+            ]);
+
+            $candidate->update(['status' => 'en_cours']);
+        }
+
+        $quiz->load(['questions.options']);
+
+        return Inertia::render('Candidate/QuizInterface', [
+            'quiz' => $quiz,
+            'attempt' => $attempt->load('answers')
+        ]);
+    }
+
+    public function saveAnswer(Request $request, Attempt $attempt)
+    {
+        $request->validate([
+            'question_id' => 'required|exists:questions,id',
+            'option_id' => 'nullable|exists:options,id',
+            'text_content' => 'nullable|string',
+        ]);
+
+        Answer::updateOrCreate(
+            [
+                'attempt_id' => $attempt->id,
+                'question_id' => $request->question_id,
+            ],
+            [
+                'option_id' => $request->option_id,
+                'text_content' => $request->text_content,
+            ]
+        );
+
+        return response()->json(['status' => 'success']);
+    }
+
+    public function finish(Attempt $attempt)
+    {
+        if ($attempt->finished_at) {
+            return redirect()->route('dashboard');
+        }
+
+        $attempt->load(['quiz.questions.options', 'answers']);
+        
+        $score = 0;
+        $maxScore = $attempt->quiz->questions->sum('points');
+
+        foreach ($attempt->quiz->questions as $question) {
+            if ($question->type === 'qcm') {
+                $userAnswer = $attempt->answers->where('question_id', $question->id)->first();
+                if ($userAnswer && $userAnswer->option_id) {
+                    $option = $question->options->where('id', $userAnswer->option_id)->first();
+                    if ($option && $option->is_correct) {
+                        $score += $question->points;
+                    }
+                }
+            }
+        }
+
+        $attempt->update([
+            'score' => $score,
+            'max_score' => $maxScore,
+            'finished_at' => now(),
+        ]);
+
+        $attempt->candidate->update(['status' => 'termine']);
+
+        return redirect()->route('dashboard');
+    }
+}

app/Http/Controllers/Auth/AuthenticatedSessionController.php

@@ -0,0 +1,52 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Auth\LoginRequest;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Route;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class AuthenticatedSessionController extends Controller
+{
+    /**
+     * Display the login view.
+     */
+    public function create(): Response
+    {
+        return Inertia::render('Auth/Login', [
+            'canResetPassword' => Route::has('password.request'),
+            'status' => session('status'),
+        ]);
+    }
+
+    /**
+     * Handle an incoming authentication request.
+     */
+    public function store(LoginRequest $request): RedirectResponse
+    {
+        $request->authenticate();
+
+        $request->session()->regenerate();
+
+        return redirect()->intended(route('dashboard', absolute: false));
+    }
+
+    /**
+     * Destroy an authenticated session.
+     */
+    public function destroy(Request $request): RedirectResponse
+    {
+        Auth::guard('web')->logout();
+
+        $request->session()->invalidate();
+
+        $request->session()->regenerateToken();
+
+        return redirect('/');
+    }
+}

app/Http/Controllers/Auth/ConfirmablePasswordController.php

@@ -0,0 +1,41 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Validation\ValidationException;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class ConfirmablePasswordController extends Controller
+{
+    /**
+     * Show the confirm password view.
+     */
+    public function show(): Response
+    {
+        return Inertia::render('Auth/ConfirmPassword');
+    }
+
+    /**
+     * Confirm the user's password.
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        if (! Auth::guard('web')->validate([
+            'email' => $request->user()->email,
+            'password' => $request->password,
+        ])) {
+            throw ValidationException::withMessages([
+                'password' => __('auth.password'),
+            ]);
+        }
+
+        $request->session()->put('auth.password_confirmed_at', time());
+
+        return redirect()->intended(route('dashboard', absolute: false));
+    }
+}

app/Http/Controllers/Auth/EmailVerificationNotificationController.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+
+class EmailVerificationNotificationController extends Controller
+{
+    /**
+     * Send a new email verification notification.
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        if ($request->user()->hasVerifiedEmail()) {
+            return redirect()->intended(route('dashboard', absolute: false));
+        }
+
+        $request->user()->sendEmailVerificationNotification();
+
+        return back()->with('status', 'verification-link-sent');
+    }
+}

app/Http/Controllers/Auth/EmailVerificationPromptController.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class EmailVerificationPromptController extends Controller
+{
+    /**
+     * Display the email verification prompt.
+     */
+    public function __invoke(Request $request): RedirectResponse|Response
+    {
+        return $request->user()->hasVerifiedEmail()
+                    ? redirect()->intended(route('dashboard', absolute: false))
+                    : Inertia::render('Auth/VerifyEmail', ['status' => session('status')]);
+    }
+}

app/Http/Controllers/Auth/NewPasswordController.php

@@ -0,0 +1,69 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Auth\Events\PasswordReset;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Password;
+use Illuminate\Support\Str;
+use Illuminate\Validation\Rules;
+use Illuminate\Validation\ValidationException;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class NewPasswordController extends Controller
+{
+    /**
+     * Display the password reset view.
+     */
+    public function create(Request $request): Response
+    {
+        return Inertia::render('Auth/ResetPassword', [
+            'email' => $request->email,
+            'token' => $request->route('token'),
+        ]);
+    }
+
+    /**
+     * Handle an incoming new password request.
+     *
+     * @throws ValidationException
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'token' => 'required',
+            'email' => 'required|email',
+            'password' => ['required', 'confirmed', Rules\Password::defaults()],
+        ]);
+
+        // Here we will attempt to reset the user's password. If it is successful we
+        // will update the password on an actual user model and persist it to the
+        // database. Otherwise we will parse the error and return the response.
+        $status = Password::reset(
+            $request->only('email', 'password', 'password_confirmation', 'token'),
+            function ($user) use ($request) {
+                $user->forceFill([
+                    'password' => Hash::make($request->password),
+                    'remember_token' => Str::random(60),
+                ])->save();
+
+                event(new PasswordReset($user));
+            }
+        );
+
+        // If the password was successfully reset, we will redirect the user back to
+        // the application's home authenticated view. If there is an error we can
+        // redirect them back to where they came from with their error message.
+        if ($status == Password::PASSWORD_RESET) {
+            return redirect()->route('login')->with('status', __($status));
+        }
+
+        throw ValidationException::withMessages([
+            'email' => [trans($status)],
+        ]);
+    }
+}

app/Http/Controllers/Auth/PasswordController.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\Rules\Password;
+
+class PasswordController extends Controller
+{
+    /**
+     * Update the user's password.
+     */
+    public function update(Request $request): RedirectResponse
+    {
+        $validated = $request->validate([
+            'current_password' => ['required', 'current_password'],
+            'password' => ['required', Password::defaults(), 'confirmed'],
+        ]);
+
+        $request->user()->update([
+            'password' => Hash::make($validated['password']),
+        ]);
+
+        return back();
+    }
+}

app/Http/Controllers/Auth/PasswordResetLinkController.php

@@ -0,0 +1,51 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Password;
+use Illuminate\Validation\ValidationException;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class PasswordResetLinkController extends Controller
+{
+    /**
+     * Display the password reset link request view.
+     */
+    public function create(): Response
+    {
+        return Inertia::render('Auth/ForgotPassword', [
+            'status' => session('status'),
+        ]);
+    }
+
+    /**
+     * Handle an incoming password reset link request.
+     *
+     * @throws ValidationException
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'email' => 'required|email',
+        ]);
+
+        // We will send the password reset link to this user. Once we have attempted
+        // to send the link, we will examine the response then see the message we
+        // need to show to the user. Finally, we'll send out a proper response.
+        $status = Password::sendResetLink(
+            $request->only('email')
+        );
+
+        if ($status == Password::RESET_LINK_SENT) {
+            return back()->with('status', __($status));
+        }
+
+        throw ValidationException::withMessages([
+            'email' => [trans($status)],
+        ]);
+    }
+}

app/Http/Controllers/Auth/RegisteredUserController.php

@@ -0,0 +1,52 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Auth\Events\Registered;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\Rules;
+use Illuminate\Validation\ValidationException;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class RegisteredUserController extends Controller
+{
+    /**
+     * Display the registration view.
+     */
+    public function create(): Response
+    {
+        return Inertia::render('Auth/Register');
+    }
+
+    /**
+     * Handle an incoming registration request.
+     *
+     * @throws ValidationException
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'name' => 'required|string|max:255',
+            'email' => 'required|string|lowercase|email|max:255|unique:'.User::class,
+            'password' => ['required', 'confirmed', Rules\Password::defaults()],
+        ]);
+
+        $user = User::create([
+            'name' => $request->name,
+            'email' => $request->email,
+            'password' => Hash::make($request->password),
+        ]);
+
+        event(new Registered($user));
+
+        Auth::login($user);
+
+        return redirect(route('dashboard', absolute: false));
+    }
+}

app/Http/Controllers/Auth/VerifyEmailController.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Auth\Events\Verified;
+use Illuminate\Foundation\Auth\EmailVerificationRequest;
+use Illuminate\Http\RedirectResponse;
+
+class VerifyEmailController extends Controller
+{
+    /**
+     * Mark the authenticated user's email address as verified.
+     */
+    public function __invoke(EmailVerificationRequest $request): RedirectResponse
+    {
+        if ($request->user()->hasVerifiedEmail()) {
+            return redirect()->intended(route('dashboard', absolute: false).'?verified=1');
+        }
+
+        if ($request->user()->markEmailAsVerified()) {
+            event(new Verified($request->user()));
+        }
+
+        return redirect()->intended(route('dashboard', absolute: false).'?verified=1');
+    }
+}

app/Http/Controllers/CandidateController.php

@@ -0,0 +1,156 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+
+use App\Models\Candidate;
+use App\Models\Document;
+use App\Models\User;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+
+class CandidateController extends Controller
+{
+    public function index()
+    {
+        $candidates = Candidate::with(['user', 'documents'])->latest()->get();
+
+        return \Inertia\Inertia::render('Admin/Candidates/Index', [
+            'candidates' => $candidates
+        ]);
+    }
+
+    public function comparative()
+    {
+        $candidates = Candidate::with(['user', 'attempts.quiz'])
+            ->whereHas('attempts', function($query) {
+                $query->whereNotNull('finished_at');
+            })
+            ->get();
+
+        return \Inertia\Inertia::render('Admin/Comparative', [
+            'candidates' => $candidates
+        ]);
+    }
+
+    public function store(Request $request)
+    {
+        $request->validate([
+            'name' => 'required|string|max:255',
+            'email' => 'required|string|email|max:255|unique:users',
+            'phone' => 'nullable|string|max:20',
+            'linkedin_url' => 'nullable|url|max:255',
+            'cv' => 'nullable|file|mimes:pdf|max:5120',
+            'cover_letter' => 'nullable|file|mimes:pdf|max:5120',
+        ]);
+
+        $password = Str::random(10);
+
+        $user = User::create([
+            'name' => $request->name,
+            'email' => $request->email,
+            'password' => Hash::make($password),
+            'role' => 'candidate',
+        ]);
+
+        $candidate = Candidate::create([
+            'user_id' => $user->id,
+            'phone' => $request->phone,
+            'linkedin_url' => $request->linkedin_url,
+            'status' => 'en_attente',
+        ]);
+
+        $this->storeDocument($candidate, $request->file('cv'), 'cv');
+        $this->storeDocument($candidate, $request->file('cover_letter'), 'cover_letter');
+
+        return back()->with('success', 'Candidat créé avec succès. Mot de passe généré: ' . $password);
+    }
+
+    public function show(Candidate $candidate)
+    {
+        $candidate->load([
+            'user', 
+            'documents', 
+            'attempts.quiz', 
+            'attempts.answers.question',
+            'attempts.answers.option'
+        ]);
+
+        return \Inertia\Inertia::render('Admin/Candidates/Show', [
+            'candidate' => $candidate
+        ]);
+    }
+
+    public function destroy(Candidate $candidate)
+    {
+        $user = $candidate->user;
+
+        // Delete files
+        foreach ($candidate->documents as $doc) {
+            Storage::disk('local')->delete($doc->file_path);
+        }
+
+        // Delete user (cascades to candidate, documents, attempts via DB constraints usually)
+        $user->delete();
+
+        return redirect()->route('admin.candidates.index')->with('success', 'Candidat supprimé avec succès.');
+    }
+
+    public function update(Request $request, Candidate $candidate)
+    {
+        $request->validate([
+            'cv' => 'nullable|file|mimes:pdf|max:5120',
+            'cover_letter' => 'nullable|file|mimes:pdf|max:5120',
+        ]);
+
+        if ($request->hasFile('cv')) {
+            $this->replaceDocument($candidate, $request->file('cv'), 'cv');
+        }
+
+        if ($request->hasFile('cover_letter')) {
+            $this->replaceDocument($candidate, $request->file('cover_letter'), 'cover_letter');
+        }
+
+        return back()->with('success', 'Documents mis à jour avec succès.');
+    }
+
+    public function resetPassword(Candidate $candidate)
+    {
+        $password = Str::random(10);
+        $candidate->user->update([
+            'password' => Hash::make($password)
+        ]);
+
+        return back()->with('success', 'Nouveau mot de passe généré: ' . $password);
+    }
+
+    private function replaceDocument(Candidate $candidate, $file, string $type)
+    {
+        // Delete old one if exists
+        $oldDoc = $candidate->documents()->where('type', $type)->first();
+        if ($oldDoc) {
+            Storage::disk('local')->delete($oldDoc->file_path);
+            $oldDoc->delete();
+        }
+
+        $this->storeDocument($candidate, $file, $type);
+    }
+
+    private function storeDocument(Candidate $candidate, $file, string $type)
+    {
+        if (!$file) {
+            return;
+        }
+
+        $path = $file->store('private/documents/' . $candidate->id, 'local');
+
+        Document::create([
+            'candidate_id' => $candidate->id,
+            'type' => $type,
+            'file_path' => $path,
+            'original_name' => $file->getClientOriginalName(),
+        ]);
+    }
+}

app/Http/Controllers/Controller.php

@@ -0,0 +1,8 @@
+<?php
+
+namespace App\Http\Controllers;
+
+abstract class Controller
+{
+    //
+}

app/Http/Controllers/DocumentController.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+
+use App\Models\Document;
+use Illuminate\Support\Facades\Storage;
+
+class DocumentController extends Controller
+{
+    public function show(Document $document)
+    {
+        // Permission check is already handled by middleware in the route
+        if (!Storage::disk('local')->exists($document->file_path)) {
+            abort(404, 'File not found');
+        }
+
+        return Storage::disk('local')->response($document->file_path);
+    }
+}

app/Http/Controllers/ProfileController.php

@@ -0,0 +1,63 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\ProfileUpdateRequest;
+use Illuminate\Contracts\Auth\MustVerifyEmail;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Redirect;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class ProfileController extends Controller
+{
+    /**
+     * Display the user's profile form.
+     */
+    public function edit(Request $request): Response
+    {
+        return Inertia::render('Profile/Edit', [
+            'mustVerifyEmail' => $request->user() instanceof MustVerifyEmail,
+            'status' => session('status'),
+        ]);
+    }
+
+    /**
+     * Update the user's profile information.
+     */
+    public function update(ProfileUpdateRequest $request): RedirectResponse
+    {
+        $request->user()->fill($request->validated());
+
+        if ($request->user()->isDirty('email')) {
+            $request->user()->email_verified_at = null;
+        }
+
+        $request->user()->save();
+
+        return Redirect::route('profile.edit');
+    }
+
+    /**
+     * Delete the user's account.
+     */
+    public function destroy(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'password' => ['required', 'current_password'],
+        ]);
+
+        $user = $request->user();
+
+        Auth::logout();
+
+        $user->delete();
+
+        $request->session()->invalidate();
+        $request->session()->regenerateToken();
+
+        return Redirect::to('/');
+    }
+}

app/Http/Controllers/QuestionController.php

@@ -0,0 +1,96 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+
+use App\Models\Question;
+use App\Models\Option;
+use App\Models\Quiz;
+use Illuminate\Support\Facades\DB;
+
+class QuestionController extends Controller
+{
+    public function store(Request $request, Quiz $quiz)
+    {
+        $request->validate([
+            'title' => 'nullable|string|max:255',
+            'context' => 'nullable|string',
+            'label' => 'required|string',
+            'points' => 'required|integer|min:1',
+            'type' => 'required|in:qcm,open',
+            'options' => 'required_if:type,qcm|array',
+            'options.*.option_text' => 'nullable|required_if:type,qcm|string',
+            'options.*.is_correct' => 'nullable|required_if:type,qcm|boolean',
+        ]);
+
+        DB::transaction(function () use ($request, $quiz) {
+            $question = Question::create([
+                'quiz_id' => $quiz->id,
+                'title' => $request->title,
+                'context' => $request->context,
+                'label' => $request->label,
+                'points' => $request->points,
+                'type' => $request->type
+            ]);
+
+            if ($request->type === 'qcm') {
+                foreach ($request->options as $opt) {
+                    Option::create([
+                        'question_id' => $question->id,
+                        'option_text' => $opt['option_text'],
+                        'is_correct' => $opt['is_correct']
+                    ]);
+                }
+            }
+        });
+
+        return back()->with('success', 'Question ajoutée avec succès.');
+    }
+
+    public function update(Request $request, Quiz $quiz, Question $question)
+    {
+        $request->validate([
+            'title' => 'nullable|string|max:255',
+            'context' => 'nullable|string',
+            'label' => 'required|string',
+            'points' => 'required|integer|min:1',
+            'type' => 'required|in:qcm,open',
+            'options' => 'required_if:type,qcm|array',
+            'options.*.option_text' => 'nullable|required_if:type,qcm|string',
+            'options.*.is_correct' => 'nullable|required_if:type,qcm|boolean',
+        ]);
+
+        DB::transaction(function () use ($request, $question) {
+            $question->update([
+                'title' => $request->title,
+                'context' => $request->context,
+                'label' => $request->label,
+                'points' => $request->points,
+                'type' => $request->type
+            ]);
+
+            if ($request->type === 'qcm') {
+                $question->options()->delete();
+                foreach ($request->options as $opt) {
+                    Option::create([
+                        'question_id' => $question->id,
+                        'option_text' => $opt['option_text'],
+                        'is_correct' => $opt['is_correct']
+                    ]);
+                }
+            } else {
+                $question->options()->delete();
+            }
+        });
+
+        return back()->with('success', 'Question mise à jour avec succès.');
+    }
+
+    public function destroy(Quiz $quiz, Question $question)
+    {
+        $question->delete();
+
+        return back()->with('success', 'Question supprimée avec succès.');
+    }
+}

app/Http/Controllers/QuizController.php

@@ -0,0 +1,62 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+
+use App\Models\Quiz;
+use Inertia\Inertia;
+
+class QuizController extends Controller
+{
+    public function index()
+    {
+        $quizzes = Quiz::latest()->get();
+
+        return Inertia::render('Admin/Quizzes/Index', [
+            'quizzes' => $quizzes
+        ]);
+    }
+
+    public function store(Request $request)
+    {
+        $request->validate([
+            'title' => 'required|string|max:255',
+            'description' => 'nullable|string',
+            'duration_minutes' => 'required|integer|min:1',
+        ]);
+
+        Quiz::create($request->all());
+
+        return back()->with('success', 'Quiz créé avec succès.');
+    }
+
+    public function show(Quiz $quiz)
+    {
+        $quiz->load(['questions.options']);
+
+        return Inertia::render('Admin/Quizzes/Show', [
+            'quiz' => $quiz
+        ]);
+    }
+
+    public function update(Request $request, Quiz $quiz)
+    {
+        $request->validate([
+            'title' => 'required|string|max:255',
+            'description' => 'nullable|string',
+            'duration_minutes' => 'required|integer|min:1',
+        ]);
+
+        $quiz->update($request->all());
+
+        return back()->with('success', 'Quiz mis à jour avec succès.');
+    }
+
+    public function destroy(Quiz $quiz)
+    {
+        $quiz->delete();
+
+        return back()->with('success', 'Quiz supprimé avec succès.');
+    }
+}

app/Http/Middleware/AdminMiddleware.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class AdminMiddleware
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  Closure(Request): (Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        if (!auth()->check() || !auth()->user()->isAdmin()) {
+            abort(403, 'Unauthorized action.');
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/HandleInertiaRequests.php

@@ -0,0 +1,43 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Http\Request;
+use Inertia\Middleware;
+
+class HandleInertiaRequests extends Middleware
+{
+    /**
+     * The root template that is loaded on the first page visit.
+     *
+     * @var string
+     */
+    protected $rootView = 'app';
+
+    /**
+     * Determine the current asset version.
+     */
+    public function version(Request $request): ?string
+    {
+        return parent::version($request);
+    }
+
+    /**
+     * Define the props that are shared by default.
+     *
+     * @return array<string, mixed>
+     */
+    public function share(Request $request): array
+    {
+        return [
+            ...parent::share($request),
+            'auth' => [
+                'user' => $request->user(),
+            ],
+            'flash' => [
+                'success' => $request->session()->get('success'),
+                'error' => $request->session()->get('error'),
+            ],
+        ];
+    }
+}

app/Http/Requests/Auth/LoginRequest.php

@@ -0,0 +1,86 @@
+<?php
+
+namespace App\Http\Requests\Auth;
+
+use Illuminate\Auth\Events\Lockout;
+use Illuminate\Contracts\Validation\ValidationRule;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\RateLimiter;
+use Illuminate\Support\Str;
+use Illuminate\Validation\ValidationException;
+
+class LoginRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'email' => ['required', 'string', 'email'],
+            'password' => ['required', 'string'],
+        ];
+    }
+
+    /**
+     * Attempt to authenticate the request's credentials.
+     *
+     * @throws ValidationException
+     */
+    public function authenticate(): void
+    {
+        $this->ensureIsNotRateLimited();
+
+        if (! Auth::attempt($this->only('email', 'password'), $this->boolean('remember'))) {
+            RateLimiter::hit($this->throttleKey());
+
+            throw ValidationException::withMessages([
+                'email' => trans('auth.failed'),
+            ]);
+        }
+
+        RateLimiter::clear($this->throttleKey());
+    }
+
+    /**
+     * Ensure the login request is not rate limited.
+     *
+     * @throws ValidationException
+     */
+    public function ensureIsNotRateLimited(): void
+    {
+        if (! RateLimiter::tooManyAttempts($this->throttleKey(), 5)) {
+            return;
+        }
+
+        event(new Lockout($this));
+
+        $seconds = RateLimiter::availableIn($this->throttleKey());
+
+        throw ValidationException::withMessages([
+            'email' => trans('auth.throttle', [
+                'seconds' => $seconds,
+                'minutes' => ceil($seconds / 60),
+            ]),
+        ]);
+    }
+
+    /**
+     * Get the rate limiting throttle key for the request.
+     */
+    public function throttleKey(): string
+    {
+        return Str::transliterate(Str::lower($this->string('email')).'|'.$this->ip());
+    }
+}

app/Http/Requests/ProfileUpdateRequest.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Http\Requests;
+
+use App\Models\User;
+use Illuminate\Contracts\Validation\ValidationRule;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class ProfileUpdateRequest extends FormRequest
+{
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'name' => ['required', 'string', 'max:255'],
+            'email' => [
+                'required',
+                'string',
+                'lowercase',
+                'email',
+                'max:255',
+                Rule::unique(User::class)->ignore($this->user()->id),
+            ],
+        ];
+    }
+}

app/Models/AdminLog.php

@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+
+#[Fillable(['user_id', 'action', 'description'])]
+class AdminLog extends Model
+{
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+}

app/Models/Answer.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+#[Fillable(['attempt_id', 'question_id', 'option_id', 'text_content'])]
+class Answer extends Model
+{
+    use HasFactory;
+
+    public function attempt(): BelongsTo
+    {
+        return $this->belongsTo(Attempt::class);
+    }
+
+    public function question(): BelongsTo
+    {
+        return $this->belongsTo(Question::class);
+    }
+
+    public function option(): BelongsTo
+    {
+        return $this->belongsTo(Option::class);
+    }
+}

app/Models/Attempt.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+#[Fillable(['candidate_id', 'quiz_id', 'score', 'max_score', 'started_at', 'finished_at'])]
+class Attempt extends Model
+{
+    use HasFactory;
+
+    protected $casts = [
+        'started_at' => 'datetime',
+        'finished_at' => 'datetime',
+        'score' => 'float',
+        'max_score' => 'integer',
+    ];
+
+    public function candidate(): BelongsTo
+    {
+        return $this->belongsTo(Candidate::class);
+    }
+
+    public function quiz(): BelongsTo
+    {
+        return $this->belongsTo(Quiz::class);
+    }
+
+    public function answers(): HasMany
+    {
+        return $this->hasMany(Answer::class);
+    }
+}

app/Models/Candidate.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+#[Fillable(['user_id', 'phone', 'linkedin_url', 'status'])]
+class Candidate extends Model
+{
+    use HasFactory;
+
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+
+    public function documents(): HasMany
+    {
+        return $this->hasMany(Document::class);
+    }
+
+    public function attempts(): HasMany
+    {
+        return $this->hasMany(Attempt::class);
+    }
+}

app/Models/Document.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+#[Fillable(['candidate_id', 'type', 'file_path', 'original_name'])]
+class Document extends Model
+{
+    use HasFactory;
+
+    public function candidate(): BelongsTo
+    {
+        return $this->belongsTo(Candidate::class);
+    }
+}

app/Models/Option.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+#[Fillable(['question_id', 'option_text', 'is_correct'])]
+class Option extends Model
+{
+    use HasFactory;
+
+    protected $casts = [
+        'is_correct' => 'boolean',
+    ];
+
+    public function question(): BelongsTo
+    {
+        return $this->belongsTo(Question::class);
+    }
+}

app/Models/Question.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+#[Fillable(['quiz_id', 'title', 'context', 'label', 'points', 'type'])]
+class Question extends Model
+{
+    use HasFactory;
+
+    public function quiz(): BelongsTo
+    {
+        return $this->belongsTo(Quiz::class);
+    }
+
+    public function options(): HasMany
+    {
+        return $this->hasMany(Option::class);
+    }
+}

app/Models/Quiz.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+#[Fillable(['title', 'description', 'duration_minutes'])]
+class Quiz extends Model
+{
+    use HasFactory;
+
+    public function questions(): HasMany
+    {
+        return $this->hasMany(Question::class);
+    }
+}

app/Models/User.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace App\Models;
+
+// use Illuminate\Contracts\Auth\MustVerifyEmail;
+use Database\Factories\UserFactory;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Attributes\Hidden;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Foundation\Auth\User as Authenticatable;
+use Illuminate\Notifications\Notifiable;
+
+#[Fillable(['name', 'email', 'password', 'role'])]
+#[Hidden(['password', 'remember_token'])]
+class User extends Authenticatable
+{
+    /** @use HasFactory<UserFactory> */
+    use HasFactory, Notifiable;
+
+    public function isAdmin(): bool
+    {
+        return $this->role === 'admin';
+    }
+
+    public function isCandidate(): bool
+    {
+        return $this->role === 'candidate';
+    }
+
+    public function candidate()
+    {
+        return $this->hasOne(Candidate::class);
+    }
+
+    /**
+     * Get the attributes that should be cast.
+     *
+     * @return array<string, string>
+     */
+    protected function casts(): array
+    {
+        return [
+            'email_verified_at' => 'datetime',
+            'password' => 'hashed',
+        ];
+    }
+}

app/Providers/AppServiceProvider.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Providers;
+
+use Illuminate\Support\Facades\Vite;
+use Illuminate\Support\ServiceProvider;
+
+class AppServiceProvider extends ServiceProvider
+{
+    /**
+     * Register any application services.
+     */
+    public function register(): void
+    {
+        //
+    }
+
+    /**
+     * Bootstrap any application services.
+     */
+    public function boot(): void
+    {
+        Vite::prefetch(concurrency: 3);
+    }
+}