izyim-api/app/Http/Controllers/ContactController.php

<?php

namespace App\Http\Controllers;

use App\Contact;
use App\Company;
use Illuminate\Http\Request;

class ContactController extends Controller
{
    /**
     * Display a listing of the resource.
     *
     * @return \Illuminate\Http\Response
     */
    public function index()
    {
        $contact=Contact::all();
        $response=[

            'contact'=>$contact

        ];
        return response()->json($contact, 200);
    }

    /**
     * Store a newly created resource in storage.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return \Illuminate\Http\Response
     */
    public function store(Request $request)
    {
        // get company id from request ex:
        //$request->input('company_id');
        $company_id = $request->input('company_id');

         // query to find company asisng to $company
         $company = Company::find($company_id);

        // get user from session
         //$request->user();
         $user = $request->user();

        // prepare query
        $contact = new Contact();
        $contact->company_id = $company->id;
        $contact->user_id = $user->id;
        $contact->save();

        // insert into database


        return response()->json($contact, 201);
    }

    /**
     * Remove the specified resource from storage.
     *
     * @param  int  $id
     * @return \Illuminate\Http\Response
     */
    public function destroy($id)
    {
        $contact = Contact::where("user_id", Auth::user()->id)->where('id', $id)->first();
        //$contact=Contact::find($id);
        $contact->delete();

        return response()->json($contact, 204);
    }

    public function postApprove(Request $request, $id)
    {
        $contact = Contact::where('id', '=', e($id))->first();
        if($contact)
        {

            $action=$request->input('action');
            if ($action==1)
            {
                $contact->status=1;
            }
            if ($action==0)
            {
                $contact->status=0;
            }
            else{
                return response()->json(["message" => "not allowed"], 400);
            }

            $saved = $contact->save();
            if ($saved){
                return response()->json($contact, 201);
            }
                return response()->json($contact, 400);

//            $contact = $request->input('id');
//            $contact->status = 1;
//            $contact->save();
           //return redirect()->back()->with('info','Request has been approved ');

        }


    }
}