izyim-api/app/Http/Controllers/ContactController.php

<?php

namespace App\Http\Controllers;

use App\Contact;
use App\Company;
use Illuminate\Http\Request;
use Auth;

class ContactController extends Controller
{
    public function index()
    {
        $output= array();
        $contacts = Contact::where('user_id', Auth::user()->id)->get();
        $companies= Contact::with('companies')->get();
        //$companies =\DB::table('companies')->select('contacts.com_id', 'companies.id', 'companies.company_name')->join('contacts', 'contacts.com_id', '=', 'companies.id')->get();
        //$companies = "SELECT contacts.com_id, companies.id, companies.company_name FROM `companies` INNER JOIN contacts ON contacts.com_id = companies.id";

        // $companies = \DB::table('companies')
        //                     ->select('id', 'company_name')
        //                     ->where('com_id', Auth::user()->id)
        //                     ->get();

        if (!$contacts)
        {
            return response()->json(['message'=>'Access Denied!'], 404);
        }

        return response()->json($companies, 200);
    }

    public function sendRequest(Request $request)
    {
        $user = Auth::user();
        $com_id = $request->input('com_id');

        // query to find company asisng to $company
        $company = Company::find($com_id);

        // get user from session
        $request->user();
        $user = $request->user();

        // prepare query
         $contact = new Contact();
         $contact->com_id = $company->id;
         $contact->user_id = $user->id;
         $contact->save();

        return response()->json($contact, 201);
    }

    public function acceptRequest(Request $request, $id)
    {
        $contact = Contact::where('com_id', Auth::user()->company())->where('id', $id)->first();
        //$contact = Contact::where('id', '=', e($id))->first();
        if($contact)
        {
            $action=$request->input('action');
            if ($action==1)
            {
                $contact->status=1;
            }
            if ($action==0)
            {
                $contact->status=0;
            }
            else{

                return response()->json(["message" => "not allowed"], 400);
            }

            $saved = $contact->save();
            if ($saved){
                return response()->json($contact, 201);
            }
                return response()->json($contact, 400);
        }
    }

    public function destroy($id)
    {
        $contact = Contact::where('com_id', Auth::user()->company())->where('id', $id)->first();

        if (!$contact)
        {
            return response()->json(['message'=>'Access Denied!'], 404);
        }

        $contact->delete($id);

        return response()->json($contact, 204);
    }
}