perf: optimize ListUsers and ListCompanies with database-level pagination and search

controllers/auth_controller.go

@@ -399,8 +399,32 @@ func GetMe(c *gin.Context) {
 }
 
 func ListUsers(c *gin.Context) {
+	limitStr := c.Query("limit")
+	skipStr := c.Query("skip")
+	searchQuery := c.Query("search")
+
+	query := config.DB.Preload("Company").Preload("Branch")
+
+	if searchQuery != "" {
+		query = query.Where("name ILIKE ? OR email ILIKE ? OR phone ILIKE ?", 
+			"%"+searchQuery+"%", 
+			"%"+searchQuery+"%", 
+			"%"+searchQuery+"%")
+	}
+
+	if limitStr != "" {
+		if limit, err := strconv.Atoi(limitStr); err == nil {
+			query = query.Limit(limit)
+		}
+	}
+	if skipStr != "" {
+		if skip, err := strconv.Atoi(skipStr); err == nil {
+			query = query.Offset(skip)
+		}
+	}
+
 	var users []models.User
-	if err := config.DB.Preload("Company").Preload("Branch").Find(&users).Error; err != nil {
+	if err := query.Find(&users).Error; err != nil {
 		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal mengambil data user"})
 		return
 	}

controllers/company_controller.go

@@ -72,8 +72,33 @@ type BranchProductResponse struct {
 // ==================== COMPANY CONTROLLER ====================
 
 func ListCompanies(c *gin.Context) {
+	limitStr := c.Query("limit")
+	skipStr := c.Query("skip")
+	searchQuery := c.Query("search")
+
+	query := config.DB.Model(&models.Company{})
+
+	if searchQuery != "" {
+		query = query.Where("name ILIKE ? OR email ILIKE ? OR phone ILIKE ? OR address ILIKE ?", 
+			"%"+searchQuery+"%", 
+			"%"+searchQuery+"%", 
+			"%"+searchQuery+"%",
+			"%"+searchQuery+"%")
+	}
+
+	if limitStr != "" {
+		if limit, err := strconv.Atoi(limitStr); err == nil {
+			query = query.Limit(limit)
+		}
+	}
+	if skipStr != "" {
+		if skip, err := strconv.Atoi(skipStr); err == nil {
+			query = query.Offset(skip)
+		}
+	}
+
 	var companies []models.Company
-	if err := config.DB.Find(&companies).Error; err != nil {
+	if err := query.Find(&companies).Error; err != nil {
 		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal mengambil data perusahaan"})
 		return
 	}