izyim-api/app/Http/Controllers/ContactController.php

<?php

namespace App\Http\Controllers;

use App\Contact;
use App\Company;
use Illuminate\Http\Request;

class ContactController extends Controller
{
    public function index()
    {
        $contact=Contact::all();
        $response=[
            'contact'=>$contact
        ];
        return response()->json($contact, 200);
    }

    public function store(Request $request)
    {
        $user = Auth::user();

        $contact = new Contact;
        $contact->com_id = $user->company();

        // get company id from request ex:

        // query to find company asisng to $company
        // $company = Company::find($company_id);

        // get user from session
        // $request->user();
        // $user = $request->user();

        // prepare query
        $contact = new Contact();
        $contact->company_id = $company->id;
        $contact->user_id = $user->id;
        $contact->save();
        // insert into database
        return response()->json($contact, 201);
    }

    public function destroy($id)
    {
        $contact = Contact::where("user_id", Auth::user()->id)->where('id', $id)->first();
        //$contact=Contact::find($id);
        $contact->delete();

        return response()->json($contact, 204);
    }

    public function postApprove(Request $request, $id)
    {
        $contact = Contact::where("user_id", Auth::user()->id)->where('id', $id)->first();
        //$contact = Contact::where('id', '=', e($id))->first();
        if($contact)
        {
            $action=$request->input('action');
            if ($action==1)
            {
                $contact->status=1;
            }
            if ($action==0)
            {
                $contact->status=0;
            }
            else{
                return response()->json(["message" => "not allowed"], 400);
            }

            $saved = $contact->save();
            if ($saved){
                return response()->json($contact, 201);
            }
                return response()->json($contact, 400);

//            $contact = $request->input('id');
//            $contact->status = 1;
//            $contact->save();
           //return redirect()->back()->with('info','Request has been approved ');
        }
    }
}