Add UserResource and OIDC linking to Filament user menu

Reviewed-on: #5

.env.example

@@ -33,3 +33,9 @@ MAIL_FROM_NAME=null
 PUSHER_APP_ID=
 PUSHER_APP_KEY=
 PUSHER_APP_SECRET=
+
+OIDC_BASE_URL=
+OIDC_CLIENT_ID=
+OIDC_CLIENT_SECRET=
+OIDC_REDIRECT_URI="${APP_URL}/auth/social/oidc/callback"
+

.phpunit.result.cache

@@ -0,0 +1 @@
+{"version":2,"defects":{"Tests\\Feature\\MyWinningsTest::test_mywinnings_form_is_accessible":8,"Tests\\Feature\\MyWinningsTest::test_mywinnings_results_show_correct_data":8,"Tests\\Feature\\MyWinningsTest::test_mywinnings_invalid_bidder_shows_error":8},"times":{"Tests\\Unit\\PhoneFormattingTest::it_formats_a_10_digit_phone_number":0.018,"Tests\\Unit\\PhoneFormattingTest::it_strips_non_numeric_characters_before_formatting":0,"Tests\\Unit\\PhoneFormattingTest::it_returns_original_value_if_not_10_digits":0,"Tests\\Unit\\PhoneFormattingTest::bidder_model_accessor_formats_phone_number":0.003}}

app/Filament/Resources/BiddersResource.php

@@ -57,7 +57,8 @@ class BiddersResource extends Resource
                 TextColumn::make('bidder_city')->label('City')->sortable(),
                 TextColumn::make('bidder_state')->label('State')->sortable(),
                 TextColumn::make('bidder_zip')->label('Zip')->sortable(),
-                TextColumn::make('bidder_phone')->label('Phone Number')->sortable(),
+                TextColumn::make('bidder_phone')->label('Phone Number')->sortable()
+                    ->formatStateUsing(fn ($state) => \App\Helpers\PhoneHelper::format($state)),
                 TextColumn::make('bidder_email')->label('Email')->sortable(),
             ])
             ->filters([

app/Filament/Resources/UserResource.php

@@ -0,0 +1,76 @@
+<?php
+
+namespace App\Filament\Resources;
+
+use App\User;
+use Filament\Resources\Resource;
+use Filament\Tables\Table;
+use Filament\Tables;
+use Filament\Tables\Columns\TextColumn;
+use Filament\Forms\Components\TextInput;
+use Filament\Schemas\Schema;
+use Filament\Actions\EditAction;
+use Filament\Actions\BulkActionGroup;
+use Filament\Actions\DeleteBulkAction;
+use Filament\Support\Icons\Heroicon;
+
+class UserResource extends Resource
+{
+    protected static ?string $model = User::class;
+
+    protected static ?string $recordTitleAttribute = 'name';
+
+    protected static string | \UnitEnum | null $navigationIcon = 'heroicon-o-users';
+
+    public static function form(Schema $schema): Schema
+    {
+        return $schema
+            ->components([
+                TextInput::make('name')
+                    ->required()
+                    ->maxLength(255),
+                TextInput::make('email')
+                    ->email()
+                    ->required()
+                    ->maxLength(255),
+                TextInput::make('provider_name')
+                    ->label('OIDC Provider')
+                    ->disabled(),
+                TextInput::make('provider_id')
+                    ->label('OIDC ID')
+                    ->disabled(),
+            ]);
+    }
+
+    public static function table(Table $table): Table
+    {
+        return $table
+            ->columns([
+                TextColumn::make('name')->sortable()->searchable(),
+                TextColumn::make('email')->sortable()->searchable(),
+                TextColumn::make('provider_name')->label('OIDC Provider'),
+                TextColumn::make('provider_id')->label('OIDC ID'),
+                TextColumn::make('created_at')->dateTime()->sortable(),
+            ])
+            ->filters([
+                //
+            ])
+            ->recordActions([
+                EditAction::make(),
+            ])
+            ->toolbarActions([
+                BulkActionGroup::make([
+                    DeleteBulkAction::make(),
+                ]),
+            ]);
+    }
+
+    public static function getPages(): array
+    {
+        return [
+            'index' => UserResource\Pages\ListUsers::route('/'),
+            'create' => UserResource\Pages\CreateUsers::route('/create'),
+            'edit' => UserResource\Pages\EditUsers::route('/{record}/edit'),
+        ];
+    }
+}

app/Filament/Resources/UserResource/Pages/CreateUsers.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\Resources\UserResource\Pages;
+
+use App\Filament\Resources\UserResource;
+use Filament\Resources\Pages\CreateRecord;
+
+class CreateUsers extends CreateRecord
+{
+    protected static string $resource = UserResource::class;
+}

app/Filament/Resources/UserResource/Pages/EditUsers.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\Resources\UserResource\Pages;
+
+use App\Filament\Resources\UserResource;
+use Filament\Resources\Pages\EditRecord;
+
+class EditUsers extends EditRecord
+{
+    protected static string $resource = UserResource::class;
+}

app/Filament/Resources/UserResource/Pages/ListUsers.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\Resources\UserResource\Pages;
+
+use App\Filament\Resources\UserResource;
+use Filament\Resources\Pages\ListRecords;
+
+class ListUsers extends ListRecords
+{
+    protected static string $resource = UserResource::class;
+}

app/Helpers/PhoneHelper.php

@@ -0,0 +1,14 @@
+<?php
+namespace App\Helpers;
+
+class PhoneHelper
+{
+    public static function format($phone)
+    {
+        $phone = preg_replace('/[^0-9]/', '', $phone);
+        if (strlen($phone) == 10) {
+            return preg_replace('/([0-9]{3})([0-9]{3})([0-9]{4})/', '$1-$2-$3', $phone);
+        }
+        return $phone;
+    }
+}

app/Http/Controllers/Auth/SocialiteController.php

@@ -0,0 +1,68 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\User;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Laravel\Socialite\Facades\Socialite;
+use Illuminate\Support\Str;
+
+class SocialiteController extends Controller
+{
+    public function redirectToProvider($provider)
+    {
+        return Socialite::driver($provider)->redirect();
+    }
+
+    public function handleProviderCallback($provider)
+    {
+        try {
+            $socialUser = Socialite::driver($provider)->user();
+        } catch (\Exception $e) {
+            return redirect('/login')->with('error', 'Authentication failed.');
+        }
+
+        if (Auth::check()) {
+            $user = Auth::user();
+            $user->update([
+                'provider_name' => $provider,
+                'provider_id' => $socialUser->getId(),
+            ]);
+            
+            return redirect()->intended('/admin')->with('status', 'Account linked successfully!');
+        }
+
+        // Find user by provider_id
+        $user = User::where('provider_name', $provider)
+            ->where('provider_id', $socialUser->getId())
+            ->first();
+
+        if (!$user) {
+            // Find user by email to link
+            $user = User::where('email', $socialUser->getEmail())->first();
+
+            if ($user) {
+                // Link the account
+                $user->update([
+                    'provider_name' => $provider,
+                    'provider_id' => $socialUser->getId(),
+                ]);
+            } else {
+                // Optionally create a new user
+                $user = User::create([
+                    'name' => $socialUser->getName() ?? $socialUser->getNickname() ?? $socialUser->getEmail(),
+                    'email' => $socialUser->getEmail(),
+                    'provider_name' => $provider,
+                    'provider_id' => $socialUser->getId(),
+                    'password' => bcrypt(Str::random(24)),
+                ]);
+            }
+        }
+
+        Auth::login($user);
+
+        return redirect()->intended('/admin'); // Redirect to filament admin or home
+    }
+}

app/Http/Controllers/PagesController.php

@@ -515,4 +515,30 @@ class PagesController extends Controller
         //dd($showcarlist_results);
         return view('showcarlist', ['showcarlist_results' => $showcarlist_results]);
     }
+
+    public function myWinnings(Request $request)
+    {
+        if (!$request->bidder_number) {
+            return view('mywinnings_form');
+        }
+
+        $bidder_number = $request->bidder_number;
+        $bidder = Bidders::where('bidder_assigned_number', $bidder_number)->first();
+
+        if (!$bidder) {
+            return view('mywinnings_form', ['error' => 'Bidder number not found.']);
+        }
+
+        $winnings = WinningBids::with('items')
+            ->where('winning_bidder_num', $bidder->idbidders)
+            ->get();
+
+        $total_cost = $winnings->sum('winning_cost');
+
+        return view('mywinnings_results', [
+            'bidder' => $bidder,
+            'winnings' => $winnings,
+            'total_cost' => $total_cost
+        ]);
+    }
 }

app/Models/WinningBids.php

@@ -28,7 +28,7 @@ class WinningBids extends Model
 
     public function items()
     {
-        return $this->hasOne(Items::class, 'iditems', 'winning_item_num');
+        return $this->belongsTo(Items::class, 'winning_item_num', 'iditems');
     }
 
     public function bidders()

app/Providers/EventServiceProvider.php

@@ -16,6 +16,9 @@ class EventServiceProvider extends ServiceProvider
         'App\Events\Event' => [
             'App\Listeners\EventListener',
         ],
+        \SocialiteProviders\Manager\SocialiteWasCalled::class => [
+            \SocialiteProviders\OIDC\OIDCExtendSocialite::class.'@handle',
+        ],
     ];
 
     /**

app/Providers/Filament/AdminPanelProvider.php

@@ -18,8 +18,32 @@ use Illuminate\Routing\Middleware\SubstituteBindings;
 use Illuminate\Session\Middleware\StartSession;
 use Illuminate\View\Middleware\ShareErrorsFromSession;
 
+use Filament\Support\Facades\FilamentView;
+use Illuminate\Support\Facades\Blade;
+
+use Filament\Navigation\MenuItem;
+
 class AdminPanelProvider extends PanelProvider
 {
+    public function boot()
+    {
+        FilamentView::registerRenderHook(
+            'panels::auth.login.form.after',
+            fn (): string => Blade::render('
+                <div class="mt-4">
+                    <x-filament::button
+                        :href="url(\'auth/social/oidc\')"
+                        tag="a"
+                        color="info"
+                        class="w-full"
+                    >
+                        Login with OIDC
+                    </x-filament::button>
+                </div>
+            '),
+        );
+    }
+
     public function panel(Panel $panel): Panel
     {
         return $panel
@@ -29,6 +53,12 @@ class AdminPanelProvider extends PanelProvider
             ->login()
             ->brandName(env('APP_NAME'))
             ->homeUrl('/')
+            ->userMenuItems([
+                MenuItem::make()
+                    ->label('Link OIDC Account')
+                    ->icon('heroicon-o-link')
+                    ->url(fn (): string => url('auth/social/oidc')),
+            ])
             ->colors([
                 'primary' => Color::Amber,
             ])

app/User.php

@@ -18,7 +18,7 @@ class User extends Authenticatable implements FilamentUser, HasName
      * @var array
      */
     protected $fillable = [
-        'name', 'email', 'password',
+        'name', 'email', 'password', 'provider_name', 'provider_id',
     ];
 
     /**

composer.json

@@ -9,9 +9,12 @@
         "barryvdh/laravel-snappy": "^1.0",
         "carlos-meneses/laravel-mpdf": "^2.1",
         "filament/filament": "^5.0",
+        "kovah/laravel-socialite-oidc": "^0.7.0",
         "laravel/framework": "^11.0",
+        "laravel/socialite": "^5.26",
         "laravel/tinker": "^2.9",
-        "laravel/ui": "^4.2"
+        "laravel/ui": "^4.2",
+        "socialiteproviders/manager": "^4.9"
     },
     "require-dev": {
         "barryvdh/laravel-debugbar": "^3.8",

composer.lock

@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "513e167cc5aa3dc9285bd5312b837eca",
+    "content-hash": "3c08b43425d232f81481839d3c2286fc",
     "packages": [
         {
             "name": "barryvdh/laravel-snappy",
@@ -1545,6 +1545,70 @@
             },
             "time": "2026-04-03T15:40:06+00:00"
         },
+        {
+            "name": "firebase/php-jwt",
+            "version": "v7.0.5",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/googleapis/php-jwt.git",
+                "reference": "47ad26bab5e7c70ae8a6f08ed25ff83631121380"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/googleapis/php-jwt/zipball/47ad26bab5e7c70ae8a6f08ed25ff83631121380",
+                "reference": "47ad26bab5e7c70ae8a6f08ed25ff83631121380",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8.0"
+            },
+            "require-dev": {
+                "guzzlehttp/guzzle": "^7.4",
+                "phpfastcache/phpfastcache": "^9.2",
+                "phpspec/prophecy-phpunit": "^2.0",
+                "phpunit/phpunit": "^9.5",
+                "psr/cache": "^2.0||^3.0",
+                "psr/http-client": "^1.0",
+                "psr/http-factory": "^1.0"
+            },
+            "suggest": {
+                "ext-sodium": "Support EdDSA (Ed25519) signatures",
+                "paragonie/sodium_compat": "Support EdDSA (Ed25519) signatures when libsodium is not present"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Firebase\\JWT\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Neuman Vong",
+                    "email": "neuman+pear@twilio.com",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Anant Narayanan",
+                    "email": "anant@php.net",
+                    "role": "Developer"
+                }
+            ],
+            "description": "A simple library to encode and decode JSON Web Tokens (JWT) in PHP. Should conform to the current spec.",
+            "homepage": "https://github.com/firebase/php-jwt",
+            "keywords": [
+                "jwt",
+                "php"
+            ],
+            "support": {
+                "issues": "https://github.com/googleapis/php-jwt/issues",
+                "source": "https://github.com/googleapis/php-jwt/tree/v7.0.5"
+            },
+            "time": "2026-04-01T20:38:03+00:00"
+        },
         {
             "name": "fruitcake/php-cors",
             "version": "v1.4.0",
@@ -2220,6 +2284,74 @@
             },
             "time": "2026-02-13T12:50:40+00:00"
         },
+        {
+            "name": "kovah/laravel-socialite-oidc",
+            "version": "v0.7.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/Kovah/laravel-socialite-oidc.git",
+                "reference": "7c4495d833f041e74726da99d6588803eedf6b9e"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/Kovah/laravel-socialite-oidc/zipball/7c4495d833f041e74726da99d6588803eedf6b9e",
+                "reference": "7c4495d833f041e74726da99d6588803eedf6b9e",
+                "shasum": ""
+            },
+            "require": {
+                "ext-json": "*",
+                "firebase/php-jwt": "^6.4|^7.0",
+                "illuminate/http": "^9.0 | ^10.0 | ^11.0 | ^12.0 | ^13.0",
+                "illuminate/support": "^9.0 | ^10.0 | ^11.0 | ^12.0 | ^13.0",
+                "php": "^8.1",
+                "socialiteproviders/manager": "^4.0"
+            },
+            "conflict": {
+                "jp-gauthier/socialiteproviders-oidc": "*"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "SocialiteProviders\\OIDC\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "JPG Dev",
+                    "homepage": "https://jpgdev.com"
+                },
+                {
+                    "name": "Kevin Woblick",
+                    "email": "contact@woblick.dev",
+                    "homepage": "https://woblick.dev",
+                    "role": "Developer"
+                }
+            ],
+            "description": "OpenID Connect OAuth2 Provider for Laravel Socialite",
+            "homepage": "https://github.com/kovah/laravel-socialite-oidc",
+            "keywords": [
+                "laravel",
+                "oauth",
+                "oidc",
+                "provider",
+                "socialite"
+            ],
+            "support": {
+                "issues": "https://github.com/Kovah/laravel-socialite-oidc/issues",
+                "source": "https://github.com/Kovah/laravel-socialite-oidc/tree/v0.7.0"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sponsors/kovah",
+                    "type": "github"
+                }
+            ],
+            "time": "2026-03-18T10:06:36+00:00"
+        },
         {
             "name": "laravel/framework",
             "version": "v11.51.0",
@@ -2555,6 +2687,78 @@
             },
             "time": "2026-04-14T13:33:34+00:00"
         },
+        {
+            "name": "laravel/socialite",
+            "version": "v5.26.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/laravel/socialite.git",
+                "reference": "db6ec2ee967b7f06412c3a0cf1daaf072f4752a4"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/laravel/socialite/zipball/db6ec2ee967b7f06412c3a0cf1daaf072f4752a4",
+                "reference": "db6ec2ee967b7f06412c3a0cf1daaf072f4752a4",
+                "shasum": ""
+            },
+            "require": {
+                "ext-json": "*",
+                "firebase/php-jwt": "^6.4|^7.0",
+                "guzzlehttp/guzzle": "^6.0|^7.0",
+                "illuminate/contracts": "^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0",
+                "illuminate/http": "^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0",
+                "illuminate/support": "^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0",
+                "league/oauth1-client": "^1.11",
+                "php": "^7.2|^8.0",
+                "phpseclib/phpseclib": "^3.0"
+            },
+            "require-dev": {
+                "mockery/mockery": "^1.0",
+                "orchestra/testbench": "^4.18|^5.20|^6.47|^7.55|^8.36|^9.15|^10.8|^11.0",
+                "phpstan/phpstan": "^1.12.23",
+                "phpunit/phpunit": "^8.0|^9.3|^10.4|^11.5|^12.0"
+            },
+            "type": "library",
+            "extra": {
+                "laravel": {
+                    "aliases": {
+                        "Socialite": "Laravel\\Socialite\\Facades\\Socialite"
+                    },
+                    "providers": [
+                        "Laravel\\Socialite\\SocialiteServiceProvider"
+                    ]
+                },
+                "branch-alias": {
+                    "dev-master": "5.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Laravel\\Socialite\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Taylor Otwell",
+                    "email": "taylor@laravel.com"
+                }
+            ],
+            "description": "Laravel wrapper around OAuth 1 & OAuth 2 libraries.",
+            "homepage": "https://laravel.com",
+            "keywords": [
+                "laravel",
+                "oauth"
+            ],
+            "support": {
+                "issues": "https://github.com/laravel/socialite/issues",
+                "source": "https://github.com/laravel/socialite"
+            },
+            "time": "2026-03-29T14:50:53+00:00"
+        },
         {
             "name": "laravel/tinker",
             "version": "v2.11.1",
@@ -3152,6 +3356,82 @@
             ],
             "time": "2024-09-21T08:32:55+00:00"
         },
+        {
+            "name": "league/oauth1-client",
+            "version": "v1.11.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/thephpleague/oauth1-client.git",
+                "reference": "f9c94b088837eb1aae1ad7c4f23eb65cc6993055"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/thephpleague/oauth1-client/zipball/f9c94b088837eb1aae1ad7c4f23eb65cc6993055",
+                "reference": "f9c94b088837eb1aae1ad7c4f23eb65cc6993055",
+                "shasum": ""
+            },
+            "require": {
+                "ext-json": "*",
+                "ext-openssl": "*",
+                "guzzlehttp/guzzle": "^6.0|^7.0",
+                "guzzlehttp/psr7": "^1.7|^2.0",
+                "php": ">=7.1||>=8.0"
+            },
+            "require-dev": {
+                "ext-simplexml": "*",
+                "friendsofphp/php-cs-fixer": "^2.17",
+                "mockery/mockery": "^1.3.3",
+                "phpstan/phpstan": "^0.12.42",
+                "phpunit/phpunit": "^7.5||9.5"
+            },
+            "suggest": {
+                "ext-simplexml": "For decoding XML-based responses."
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0-dev",
+                    "dev-develop": "2.0-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "League\\OAuth1\\Client\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Ben Corlett",
+                    "email": "bencorlett@me.com",
+                    "homepage": "http://www.webcomm.com.au",
+                    "role": "Developer"
+                }
+            ],
+            "description": "OAuth 1.0 Client Library",
+            "keywords": [
+                "Authentication",
+                "SSO",
+                "authorization",
+                "bitbucket",
+                "identity",
+                "idp",
+                "oauth",
+                "oauth1",
+                "single sign on",
+                "trello",
+                "tumblr",
+                "twitter"
+            ],
+            "support": {
+                "issues": "https://github.com/thephpleague/oauth1-client/issues",
+                "source": "https://github.com/thephpleague/oauth1-client/tree/v1.11.0"
+            },
+            "time": "2024-12-10T19:59:05+00:00"
+        },
         {
             "name": "league/uri",
             "version": "7.8.1",
@@ -4600,6 +4880,116 @@
             ],
             "time": "2025-12-27T19:41:33+00:00"
         },
+        {
+            "name": "phpseclib/phpseclib",
+            "version": "3.0.51",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phpseclib/phpseclib.git",
+                "reference": "d59c94077f9c9915abb51ddb52ce85188ece1748"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phpseclib/phpseclib/zipball/d59c94077f9c9915abb51ddb52ce85188ece1748",
+                "reference": "d59c94077f9c9915abb51ddb52ce85188ece1748",
+                "shasum": ""
+            },
+            "require": {
+                "paragonie/constant_time_encoding": "^1|^2|^3",
+                "paragonie/random_compat": "^1.4|^2.0|^9.99.99",
+                "php": ">=5.6.1"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "*"
+            },
+            "suggest": {
+                "ext-dom": "Install the DOM extension to load XML formatted public keys.",
+                "ext-gmp": "Install the GMP (GNU Multiple Precision) extension in order to speed up arbitrary precision integer arithmetic operations.",
+                "ext-libsodium": "SSH2/SFTP can make use of some algorithms provided by the libsodium-php extension.",
+                "ext-mcrypt": "Install the Mcrypt extension in order to speed up a few other cryptographic operations.",
+                "ext-openssl": "Install the OpenSSL extension in order to speed up a wide variety of cryptographic operations."
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "phpseclib/bootstrap.php"
+                ],
+                "psr-4": {
+                    "phpseclib3\\": "phpseclib/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Jim Wigginton",
+                    "email": "terrafrost@php.net",
+                    "role": "Lead Developer"
+                },
+                {
+                    "name": "Patrick Monnerat",
+                    "email": "pm@datasphere.ch",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Andreas Fischer",
+                    "email": "bantu@phpbb.com",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Hans-Jürgen Petrich",
+                    "email": "petrich@tronic-media.com",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Graham Campbell",
+                    "email": "graham@alt-three.com",
+                    "role": "Developer"
+                }
+            ],
+            "description": "PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc.",
+            "homepage": "http://phpseclib.sourceforge.net",
+            "keywords": [
+                "BigInteger",
+                "aes",
+                "asn.1",
+                "asn1",
+                "blowfish",
+                "crypto",
+                "cryptography",
+                "encryption",
+                "rsa",
+                "security",
+                "sftp",
+                "signature",
+                "signing",
+                "ssh",
+                "twofish",
+                "x.509",
+                "x509"
+            ],
+            "support": {
+                "issues": "https://github.com/phpseclib/phpseclib/issues",
+                "source": "https://github.com/phpseclib/phpseclib/tree/3.0.51"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/terrafrost",
+                    "type": "github"
+                },
+                {
+                    "url": "https://www.patreon.com/phpseclib",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/phpseclib/phpseclib",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-04-10T01:33:53+00:00"
+        },
         {
             "name": "pragmarx/google2fa",
             "version": "v9.0.0",
@@ -5636,6 +6026,80 @@
             ],
             "time": "2026-03-13T08:38:20+00:00"
         },
+        {
+            "name": "socialiteproviders/manager",
+            "version": "4.9.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/SocialiteProviders/Manager.git",
+                "reference": "35372dc62787e61e91cfec73f45fd5d5ae0f8891"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/SocialiteProviders/Manager/zipball/35372dc62787e61e91cfec73f45fd5d5ae0f8891",
+                "reference": "35372dc62787e61e91cfec73f45fd5d5ae0f8891",
+                "shasum": ""
+            },
+            "require": {
+                "illuminate/support": "^11.0 || ^12.0 || ^13.0",
+                "laravel/socialite": "^5.5",
+                "php": "^8.2"
+            },
+            "require-dev": {
+                "mockery/mockery": "^1.2",
+                "phpunit/phpunit": "^9.0"
+            },
+            "type": "library",
+            "extra": {
+                "laravel": {
+                    "providers": [
+                        "SocialiteProviders\\Manager\\ServiceProvider"
+                    ]
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "SocialiteProviders\\Manager\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Andy Wendt",
+                    "email": "andy@awendt.com"
+                },
+                {
+                    "name": "Anton Komarev",
+                    "email": "a.komarev@cybercog.su"
+                },
+                {
+                    "name": "Miguel Piedrafita",
+                    "email": "soy@miguelpiedrafita.com"
+                },
+                {
+                    "name": "atymic",
+                    "email": "atymicq@gmail.com",
+                    "homepage": "https://atymic.dev"
+                }
+            ],
+            "description": "Easily add new or override built-in providers in Laravel Socialite.",
+            "homepage": "https://socialiteproviders.com",
+            "keywords": [
+                "laravel",
+                "manager",
+                "oauth",
+                "providers",
+                "socialite"
+            ],
+            "support": {
+                "issues": "https://github.com/socialiteproviders/manager/issues",
+                "source": "https://github.com/socialiteproviders/manager"
+            },
+            "time": "2026-03-18T22:13:24+00:00"
+        },
         {
             "name": "spatie/invade",
             "version": "2.1.0",

config/services.php

@@ -35,4 +35,11 @@ return [
         'secret' => env('STRIPE_SECRET'),
     ],
 
+    'oidc' => [
+        'base_url' => env('OIDC_BASE_URL'),
+        'client_id' => env('OIDC_CLIENT_ID'),
+        'client_secret' => env('OIDC_CLIENT_SECRET'),
+        'redirect' => env('OIDC_REDIRECT_URI'),
+    ],
+
 ];

database/migrations/2026_04_26_162522_add_socialite_fields_to_users_table.php

@@ -0,0 +1,31 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::table('users', function (Blueprint $table) {
+            $table->string('provider_name')->nullable();
+            $table->string('provider_id')->nullable();
+            $table->unique(['provider_name', 'provider_id']);
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::table('users', function (Blueprint $table) {
+            $table->dropUnique(['provider_name', 'provider_id']);
+            $table->dropColumn(['provider_name', 'provider_id']);
+        });
+    }
+};

readme.md

@@ -49,3 +49,21 @@ If you discover a security vulnerability within Laravel, please send an e-mail t
 ## License
 
 The Laravel framework is open-sourced software licensed under the [MIT license](http://opensource.org/licenses/MIT).
+
+## Changelog
+
+### [bidder-facing-checkout] - 2026-04-24
+
+#### Added
+- **Public Winnings View:** Introduced a new feature allowing bidders to check their won items by entering their bidder number.
+- **Routes:** Added `/mywinnings` (GET and POST) routes to `routes/web.php`.
+- **Controller Logic:** Implemented `myWinnings` method in `PagesController` to handle bidder lookups and display results.
+- **Views:** 
+    - `resources/views/mywinnings_form.blade.php`: Search form for bidder number.
+    - `resources/views/mywinnings_results.blade.php`: Detailed list of won items and total cost.
+- **Navigation:** Added "Check My Winnings" link to the main layout navbar for easy public access.
+- **Testing:** Created `tests/Feature/MyWinningsTest.php` to ensure the new feature works as expected.
+
+#### Changed
+- **Models:** Updated `App\Models\WinningBids` relationship `items()` from `hasOne` to `belongsTo` to correctly map the database structure and support eager loading.
+

resources/views/auth/login.blade.php

@@ -54,6 +54,10 @@
                                     Login
                                 </button>
 
+                                <a href="{{ url('auth/social/oidc') }}" class="btn btn-info">
+                                    Login with OIDC
+                                </a>
+
                                 <a class="btn btn-link" href="{{ route('password.request') }}">
                                     Forgot Your Password?
                                 </a>

resources/views/bidderlist.blade.php

@@ -66,7 +66,7 @@
                 {{ $bidderlist_result->bidder_zip }}
               </td>
               <td>
-                {{ $bidderlist_result->bidder_phone }}
+                {{ \App\Helpers\PhoneHelper::format($bidderlist_result->bidder_phone) }}
               </td>
               <td>
                 {{ $bidderlist_result->bidder_email }}

resources/views/checkout.blade.php

@@ -33,7 +33,7 @@
                       Name: {{ $checkout_info_result->bidder_fname }} {{ $checkout_info_result->bidder_lname }}
                     </th>
                     <th colspan="2">
-                      Phone Number: {{ $checkout_info_result->bidder_phone }}
+                      Phone Number: {{ \App\Helpers\PhoneHelper::format($checkout_info_result->bidder_phone) }}
                     </th>
                   </tr>
                   <tr>

resources/views/checkout_complete.blade.php

@@ -51,7 +51,7 @@
                     Name: {{ $checkout_info_result->bidder_fname }} {{ $checkout_info_result->bidder_lname }}
                   </th>
                   <th colspan="2">
-                    Phone Number: {{ $checkout_info_result->bidder_phone }}
+                    Phone Number: {{ \App\Helpers\PhoneHelper::format($checkout_info_result->bidder_phone) }}
                   </th>
                 </tr>
                 <tr>

resources/views/checkout_complete_list.blade.php

@@ -70,7 +70,7 @@
                       {{ $checkout_complete_result->bidder_zip }}
                     </td>
                     <td>
-                      {{ $checkout_complete_result->bidder_phone }}
+                      {{ \App\Helpers\PhoneHelper::format($checkout_complete_result->bidder_phone) }}
                     </td>
                     <td>
                       {{ $checkout_complete_result->bidder_email }}

resources/views/checkout_select_form.blade.php

@@ -1,5 +1,22 @@
 @extends('layouts.app')
 
+@push('styles')
+<link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" rel="stylesheet" />
+<style>
+  .select2-container .select2-selection--single {
+    height: 34px;
+    border: 1px solid #ccc;
+    border-radius: 4px;
+  }
+  .select2-container--default .select2-selection--single .select2-selection__rendered {
+    line-height: 34px;
+  }
+  .select2-container--default .select2-selection--single .select2-selection__arrow {
+    height: 32px;
+  }
+</style>
+@endpush
+
 @section('content')
 <div class="container">
   <div class="row">
@@ -32,3 +49,15 @@
   </div>
 </div>
 @endsection
+
+@push('scripts')
+<script src="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js"></script>
+<script>
+$(document).ready(function() {
+    $('#checkoutbiddernum').select2({
+        placeholder: "Select a bidder",
+        allowClear: true
+    });
+});
+</script>
+@endpush

resources/views/editwinners.blade.php

@@ -1,5 +1,22 @@
 @extends('layouts.app')
 
+@push('styles')
+<link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" rel="stylesheet" />
+<style>
+  .select2-container .select2-selection--single {
+    height: 34px;
+    border: 1px solid #ccc;
+    border-radius: 4px;
+  }
+  .select2-container--default .select2-selection--single .select2-selection__rendered {
+    line-height: 34px;
+  }
+  .select2-container--default .select2-selection--single .select2-selection__arrow {
+    height: 32px;
+  }
+</style>
+@endpush
+
 @section('content')
 <div class="container">
   <div class="row">
@@ -13,7 +30,7 @@
               <label for=winneritemnum class="col-sm-3 col-sm-offset-1 control-label">
                 Item Number:
               </label>
-              <div class=col-sm-2>
+              <div class=col-sm-4>
                 <select name="winid" id="winid" required class=form-control>
                   <?php echo App\Helpers\WinningBidSelectList::winningBidShowNumbers(); ?>
                 </select>
@@ -23,7 +40,7 @@
               <label for=winnerbiddernum class="col-sm-3 col-sm-offset-1 control-label">
                 Bidder Number:
               </label>
-              <div class=col-sm-2>
+              <div class=col-sm-4>
                 <select name="winnerbiddernum" id="winnerbiddernum" required class=form-control>
                   <?php echo App\Helpers\BidderSelectList::bidderShowNumbers(); ?>
                 </select>
@@ -49,3 +66,19 @@
   </div>
 </div>
 @endsection
+
+@push('scripts')
+<script src="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js"></script>
+<script>
+$(document).ready(function() {
+    $('#winid').select2({
+        placeholder: "Select an item/winner",
+        allowClear: true
+    });
+    $('#winnerbiddernum').select2({
+        placeholder: "Select a bidder",
+        allowClear: true
+    });
+});
+</script>
+@endpush

resources/views/finaltally.blade.php

@@ -67,8 +67,7 @@
                   {{ $finaltally_result->bidder_zip }}
                 </td>
                 <td>
-                  {{ $finaltally_result->bidder_phone }}
+                  {{ \App\Helpers\PhoneHelper::format($finaltally_result->bidder_phone) }}                </td>
-                </td>
                 <td>
                   {{ $finaltally_result->bidder_email }}
                 </td>

resources/views/layouts/app.blade.php

@@ -12,6 +12,7 @@
 
   <!-- Styles -->
   <link href="{{ asset('css/app.css') }}" rel="stylesheet">
+  @stack('styles')
 </head>
 <body>
   <div id="app">
@@ -102,6 +103,11 @@
                     Winners by Item
                   </a>
                 </li>
+                <li>
+                  <a href="/mywinnings">
+                    Check My Winnings
+                  </a>
+                </li>                
               </ul>
             </li>
             <li class="dropdown">
@@ -239,5 +245,6 @@
 
 <!-- Scripts -->
 <script src="{{ asset('js/app.js') }}"></script>
+@stack('scripts')
 </body>
 </html>

resources/views/mywinnings_form.blade.php

@@ -0,0 +1,41 @@
+@extends('layouts.app')
+
+@section('content')
+<div class="container">
+  <div class="row">
+    <div class="col-md-8 col-md-offset-2">
+      <div class="panel panel-default">
+        <div class="panel-heading">Check My Winnings</div>
+
+        <div class="panel-body">
+          @if (isset($error))
+            <div class="alert alert-danger">
+              {{ $error }}
+            </div>
+          @endif
+
+          <form class="form-horizontal" method="POST" action="/mywinnings">
+            {{ csrf_field() }}
+
+            <div class="form-group">
+              <label for="bidder_number" class="col-md-4 control-label">Bidder Number</label>
+
+              <div class="col-md-6">
+                <input id="bidder_number" type="text" class="form-control" name="bidder_number" value="{{ old('bidder_number') }}" required autofocus>
+              </div>
+            </div>
+
+            <div class="form-group">
+              <div class="col-md-8 col-md-offset-4">
+                <button type="submit" class="btn btn-primary">
+                  Check Winnings
+                </button>
+              </div>
+            </div>
+          </form>
+        </div>
+      </div>
+    </div>
+  </div>
+</div>
+@endsection

resources/views/mywinnings_results.blade.php

@@ -0,0 +1,49 @@
+@extends('layouts.app')
+
+@section('content')
+<div class="container">
+  <div class="row">
+    <div class="col-md-10 col-md-offset-1">
+      <div class="panel panel-default">
+        <div class="panel-heading">Winnings for Bidder #{{ $bidder->bidder_assigned_number }} - {{ $bidder->bidder_fname }} {{ $bidder->bidder_lname }}</div>
+
+        <div class="panel-body">
+          @if($winnings->count() > 0)
+            <table class="table table-striped">
+              <thead>
+                <tr>
+                  <th>Item #</th>
+                  <th>Description</th>
+                  <th>Amount</th>
+                </tr>
+              </thead>
+              <tbody>
+                @foreach($winnings as $winning)
+                  <tr>
+                    <td>{{ $winning->items->item_assigned_num }}</td>
+                    <td>{{ $winning->items->item_desc }}</td>
+                    <td>${{ number_format($winning->winning_cost, 2) }}</td>
+                  </tr>
+                @endforeach
+              </tbody>
+              <tfoot>
+                <tr>
+                  <th colspan="2" class="text-right">Total:</th>
+                  <th>${{ number_format($total_cost, 2) }}</th>
+                </tr>
+              </tfoot>
+            </table>
+          @else
+            <p>No winning bids found for this bidder number.</p>
+          @endif
+
+          <hr>
+          <div class="text-center">
+            <a href="/mywinnings" class="btn btn-default">Back to Search</a>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</div>
+@endsection

resources/views/receiptpdf.blade.php

@@ -49,8 +49,7 @@
                     Name: {{ $checkout_info_result->bidder_fname }} {{ $checkout_info_result->bidder_lname }}
                   </td>
                   <td colspan="2">
-                    Phone Number: {{ $checkout_info_result->bidder_phone }}
+                    Phone Number: {{ \App\Helpers\PhoneHelper::format($checkout_info_result->bidder_phone) }}                  </td>
-                  </td>
                 </tr>
                 <tr>
                   <td>

resources/views/receiptpdf2.blade.php

@@ -49,8 +49,7 @@
                     Name: {{ $checkout_info_result->bidder_fname }} {{ $checkout_info_result->bidder_lname }}
                   </td>
                   <td colspan="2">
-                    Phone Number: {{ $checkout_info_result->bidder_phone }}
+                    Phone Number: {{ \App\Helpers\PhoneHelper::format($checkout_info_result->bidder_phone) }}                  </td>
-                  </td>
                 </tr>
                 <tr>
                   <td>

resources/views/reprint_receipt_form.blade.php

@@ -1,5 +1,22 @@
 @extends('layouts.app')
 
+@push('styles')
+<link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" rel="stylesheet" />
+<style>
+  .select2-container .select2-selection--single {
+    height: 34px;
+    border: 1px solid #ccc;
+    border-radius: 4px;
+  }
+  .select2-container--default .select2-selection--single .select2-selection__rendered {
+    line-height: 34px;
+  }
+  .select2-container--default .select2-selection--single .select2-selection__arrow {
+    height: 32px;
+  }
+</style>
+@endpush
+
 @section('content')
 <div class="container">
   <div class="row">
@@ -15,7 +32,7 @@
                 Select Bidder Number:
               </label>
               <div class=col-sm-4>
-                <select name="reprintbiddernum" id="checkoutbiddernum" required class=form-control>
+                <select name="reprintbiddernum" id="reprintbiddernum" required class=form-control>
                   <?php echo App\Helpers\CheckoutBidderSelectList::checkoutBidderShowNumbers(); ?>
                 </select>
               </div>
@@ -32,3 +49,15 @@
   </div>
 </div>
 @endsection
+
+@push('scripts')
+<script src="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js"></script>
+<script>
+$(document).ready(function() {
+    $('#reprintbiddernum').select2({
+        placeholder: "Select a bidder",
+        allowClear: true
+    });
+});
+</script>
+@endpush

resources/views/showcarlist.blade.php

@@ -78,7 +78,7 @@
                 {{ $showcarlist_result->bidder_zip }}
               </td>
               <td>
-                {{ $showcarlist_result->bidder_phone }}
+                {{ \App\Helpers\PhoneHelper::format($showcarlist_result->bidder_phone) }}
               </td>
               <td>
                 {{ $showcarlist_result->bidder_email }}

resources/views/winners.blade.php

@@ -1,5 +1,22 @@
 @extends('layouts.app')
 
+@push('styles')
+<link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" rel="stylesheet" />
+<style>
+  .select2-container .select2-selection--single {
+    height: 34px;
+    border: 1px solid #ccc;
+    border-radius: 4px;
+  }
+  .select2-container--default .select2-selection--single .select2-selection__rendered {
+    line-height: 34px;
+  }
+  .select2-container--default .select2-selection--single .select2-selection__arrow {
+    height: 32px;
+  }
+</style>
+@endpush
+
 @section('content')
 <div class="container">
   <div class="row">
@@ -14,22 +31,12 @@
               <label for=winneritemnum class="col-sm-3 col-sm-offset-1 control-label">
                 Item Number:
               </label>
-              <div class=col-sm-2>
+              <div class=col-sm-4>
                 <select name="winneritemnum" id="winneritemnum" required class=form-control>
                   <?php echo App\Helpers\ItemSelectList::itemShowNumbers(); ?>
                 </select>
               </div>
             </div>
-            <div class=form-group>
-              <label for=winnerbiddernum class="col-sm-3 col-sm-offset-1 control-label">
-                Bidder Number:
-              </label>
-              <div class=col-sm-2>
-                <select name="winnerbiddernum" id="winnerbiddernum" required class=form-control>
-                  <?php echo App\Helpers\BidderSelectList::bidderShowNumbers(); ?>
-                </select>
-              </div>
-            </div>
             <div class=form-group>
               <label for=winnerbid class="col-sm-3 col-sm-offset-1 control-label">
                 Winning Bid:
@@ -38,6 +45,16 @@
                 <input type="text" name="winnerbid" id="winnerbid" class=form-control />
               </div>
             </div>
+            <div class=form-group>
+              <label for=winnerbiddernum class="col-sm-3 col-sm-offset-1 control-label">
+                Bidder Number:
+              </label>
+              <div class=col-sm-4>
+                <select name="winnerbiddernum" id="winnerbiddernum" required class=form-control>
+                  <?php echo App\Helpers\BidderSelectList::bidderShowNumbers(); ?>
+                </select>
+              </div>
+            </div>
             <div class=form-group>
               <div class="col-sm-offset-5 col-sm-10">
                 <button type="submit" value="Submit" class="btn btn-primary">Submit</button>
@@ -50,3 +67,20 @@
   </div>
 </div>
 @endsection
+
+@push('scripts')
+<script src="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js"></script>
+<script>
+$(document).ready(function() {
+    $('#winnerbiddernum').select2({
+        placeholder: "Select a bidder",
+        allowClear: true
+    });
+    // Also making item number searchable as it's generally expected for "typed in" lookups
+    $('#winneritemnum').select2({
+        placeholder: "Select an item",
+        allowClear: true
+    });
+});
+</script>
+@endpush

resources/views/winnertotal.blade.php

@@ -20,8 +20,7 @@
                 Name: {{ $winnertotal_info_result->bidder_fname }} {{ $winnertotal_info_result->bidder_lname }}
               </th>
               <th>
-                Phone Number: {{ $winnertotal_info_result->bidder_phone }}
+                Phone Number: {{ \App\Helpers\PhoneHelper::format($winnertotal_info_result->bidder_phone) }}              </th>
-              </th>
               <th>
                 Total: ${{ $winnertotal_info_result->total_cost }}
               </th>

resources/views/winnertotalform.blade.php

@@ -1,5 +1,22 @@
 @extends('layouts.app')
 
+@push('styles')
+<link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" rel="stylesheet" />
+<style>
+  .select2-container .select2-selection--single {
+    height: 34px;
+    border: 1px solid #ccc;
+    border-radius: 4px;
+  }
+  .select2-container--default .select2-selection--single .select2-selection__rendered {
+    line-height: 34px;
+  }
+  .select2-container--default .select2-selection--single .select2-selection__arrow {
+    height: 32px;
+  }
+</style>
+@endpush
+
 @section('content')
 <div class="container">
   <div class="row">
@@ -32,3 +49,15 @@
   </div>
 </div>
 @endsection
+
+@push('scripts')
+<script src="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js"></script>
+<script>
+$(document).ready(function() {
+    $('#winnerbiddernum').select2({
+        placeholder: "Select a bidder",
+        allowClear: true
+    });
+});
+</script>
+@endpush

routes/web.php

@@ -14,12 +14,18 @@ if (env('APP_ENV') === 'production') {
     URL::forceScheme('https');
 }
 Auth::routes(['register' => false]);
+
+Route::get('auth/social/{provider}', 'Auth\SocialiteController@redirectToProvider');
+Route::get('auth/social/{provider}/callback', 'Auth\SocialiteController@handleProviderCallback');
+
 Route::get('/', [ 'uses' => 'PagesController@home']);
 Route::get('home', [ 'uses' => 'PagesController@home']);
 Route::get('winningbidderlist', [ 'uses' => 'PagesController@winningbidderlist']);
 Route::get('showwinners', [ 'uses' => 'PagesController@showwinners']);
 Route::get('showscores', [ 'uses' => 'PagesController@showscores']);
 Route::get('showscoresbycar', [ 'uses' => 'PagesController@showscoresbycar']);
+Route::get('mywinnings', [ 'uses' => 'PagesController@myWinnings']);
+Route::post('mywinnings', [ 'uses' => 'PagesController@myWinnings']);
 
 Route::group(['middleware' => 'auth'], function() {
   Route::get('bidders', [ 'uses' => 'PagesController@bidders']);

tests/Feature/MyWinningsTest.php

@@ -0,0 +1,65 @@
+<?php
+
+namespace Tests\Feature;
+
+use Tests\TestCase;
+use Illuminate\Foundation\Testing\DatabaseTransactions;
+use App\Models\Bidders;
+use App\Models\Items;
+use App\Models\WinningBids;
+
+class MyWinningsTest extends TestCase
+{
+    use DatabaseTransactions;
+
+    public function test_mywinnings_form_is_accessible()
+    {
+        $response = $this->get('/mywinnings');
+        $response->assertStatus(200);
+        $response->assertSee('Check My Winnings');
+    }
+
+    public function test_mywinnings_results_show_correct_data()
+    {
+        // Create a bidder
+        $bidder = Bidders::create([
+            'bidder_assigned_number' => '999',
+            'bidder_fname' => 'Test',
+            'bidder_lname' => 'User',
+        ]);
+
+        // Create an item
+        $item = Items::create([
+            'item_assigned_num' => '777',
+            'item_desc' => 'Test Item',
+            'item_min_bid' => 10,
+            'item_est_value' => 20,
+        ]);
+
+        // Create a winning bid
+        WinningBids::create([
+            'winning_bidder_num' => $bidder->idbidders,
+            'winning_item_num' => $item->iditems,
+            'winning_cost' => 15,
+        ]);
+
+        $response = $this->post('/mywinnings', [
+            'bidder_number' => '999'
+        ]);
+
+        $response->assertStatus(200);
+        $response->assertSee('Winnings for Bidder #999');
+        $response->assertSee('Test Item');
+        $response->assertSee('$15.00');
+    }
+
+    public function test_mywinnings_invalid_bidder_shows_error()
+    {
+        $response = $this->post('/mywinnings', [
+            'bidder_number' => 'NONEXISTENT'
+        ]);
+
+        $response->assertStatus(200);
+        $response->assertSee('Bidder number not found.');
+    }
+}

tests/Unit/PhoneFormattingTest.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace Tests\Unit;
+
+use Tests\TestCase;
+use App\Models\Bidders;
+use App\Helpers\PhoneHelper;
+
+class PhoneFormattingTest extends TestCase
+{
+    /** @test */
+    public function it_formats_a_10_digit_phone_number()
+    {
+        $formatted = PhoneHelper::format('1234567890');
+        $this->assertEquals('123-456-7890', $formatted);
+    }
+
+    /** @test */
+    public function it_strips_non_numeric_characters_before_formatting()
+    {
+        $formatted = PhoneHelper::format('(123) 456-7890');
+        $this->assertEquals('123-456-7890', $formatted);
+    }
+
+    /** @test */
+    public function it_returns_original_value_if_not_10_digits()
+    {
+        $formatted = PhoneHelper::format('1234567');
+        $this->assertEquals('1234567', $formatted);
+    }
+}