fix: manual cascading deletes in company_controller and add public ip check endpoint

controllers/company_controller.go

@@ -380,7 +380,7 @@ func DeleteCompany(c *gin.Context) {
 		}
 	}()
 
-	// Ambil semua user terkait company ini, lalu hapus record OTP mereka
+	// 1. Ambil semua user terkait company ini, lalu hapus record OTP mereka
 	var users []models.User
 	tx.Where("company_id = ?", companyID).Find(&users)
 	for _, u := range users {
@@ -389,7 +389,56 @@ func DeleteCompany(c *gin.Context) {
 		}
 	}
 
-	// Cascading deletes Company (users, branches, products, categories, dll)
+	// 2. Hapus order_items terlebih dahulu (menggunakan subquery) untuk menghindari FK violations
+	if err := tx.Exec("DELETE FROM order_items WHERE order_id IN (SELECT id FROM orders WHERE company_id = ?)", companyID).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data order items"})
+		return
+	}
+
+	// 3. Hapus orders
+	if err := tx.Where("company_id = ?", companyID).Delete(&models.Order{}).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data order"})
+		return
+	}
+
+	// 4. Hapus branch_products
+	if err := tx.Exec("DELETE FROM branch_products WHERE product_id IN (SELECT id FROM products WHERE company_id = ?)", companyID).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data branch products"})
+		return
+	}
+
+	// 5. Hapus products
+	if err := tx.Where("company_id = ?", companyID).Delete(&models.Product{}).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data produk"})
+		return
+	}
+
+	// 6. Hapus categories
+	if err := tx.Where("company_id = ?", companyID).Delete(&models.Category{}).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data kategori"})
+		return
+	}
+
+	// 7. Hapus users
+	if err := tx.Where("company_id = ?", companyID).Delete(&models.User{}).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data user"})
+		return
+	}
+
+	// 8. Hapus branches
+	if err := tx.Where("company_id = ?", companyID).Delete(&models.Branch{}).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data cabang"})
+		return
+	}
+
+	// 9. Terakhir hapus company utama
 	if err := tx.Delete(&company).Error; err != nil {
 		tx.Rollback()
 		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data perusahaan"})
@@ -429,6 +478,7 @@ func RejectCompany(c *gin.Context) {
 		}
 	}()
 
+	// 1. Ambil semua user terkait company ini, lalu hapus record OTP mereka
 	var users []models.User
 	tx.Where("company_id = ?", companyID).Find(&users)
 	for _, u := range users {
@@ -437,7 +487,62 @@ func RejectCompany(c *gin.Context) {
 		}
 	}
 
-	tx.Delete(&company)
+	// 2. Hapus order_items terlebih dahulu (menggunakan subquery)
+	if err := tx.Exec("DELETE FROM order_items WHERE order_id IN (SELECT id FROM orders WHERE company_id = ?)", companyID).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data order items"})
+		return
+	}
+
+	// 3. Hapus orders
+	if err := tx.Where("company_id = ?", companyID).Delete(&models.Order{}).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data order"})
+		return
+	}
+
+	// 4. Hapus branch_products
+	if err := tx.Exec("DELETE FROM branch_products WHERE product_id IN (SELECT id FROM products WHERE company_id = ?)", companyID).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data branch products"})
+		return
+	}
+
+	// 5. Hapus products
+	if err := tx.Where("company_id = ?", companyID).Delete(&models.Product{}).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data produk"})
+		return
+	}
+
+	// 6. Hapus categories
+	if err := tx.Where("company_id = ?", companyID).Delete(&models.Category{}).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data kategori"})
+		return
+	}
+
+	// 7. Hapus users
+	if err := tx.Where("company_id = ?", companyID).Delete(&models.User{}).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data user"})
+		return
+	}
+
+	// 8. Hapus branches
+	if err := tx.Where("company_id = ?", companyID).Delete(&models.Branch{}).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data cabang"})
+		return
+	}
+
+	// 9. Terakhir hapus company utama
+	if err := tx.Delete(&company).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menghapus data perusahaan"})
+		return
+	}
+
 	tx.Commit()
 
 	c.JSON(http.StatusOK, gin.H{

main.go

@@ -1,6 +1,7 @@
 package main
 
 import (
+	"io"
 	"log"
 	"net/http"
 
@@ -68,6 +69,24 @@ func main() {
 		c.JSON(http.StatusOK, gin.H{"status": "healthy"})
 	})
 
+	r.GET("/api/ip", func(c *gin.Context) {
+		resp, err := http.Get("https://api.ipify.org")
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Gagal mendapatkan IP outbound: " + err.Error()})
+			return
+		}
+		defer resp.Body.Close()
+		ipBytes, err := io.ReadAll(resp.Body)
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Gagal membaca IP response: " + err.Error()})
+			return
+		}
+		c.JSON(http.StatusOK, gin.H{
+			"public_ip": string(ipBytes),
+			"info":      "Gunakan IP ini untuk di-whitelist di Tripay",
+		})
+	})
+
 	// API Routing Group
 	api := r.Group("/api")
 	{