2021-08-02 23:02:25 +02:00
|
|
|
<?php
|
|
|
|
|
|
|
|
namespace BookStack\Http\Middleware;
|
|
|
|
|
2023-05-17 18:56:55 +02:00
|
|
|
use BookStack\Access\LoginService;
|
|
|
|
use BookStack\Access\Mfa\MfaSession;
|
2021-08-02 23:02:25 +02:00
|
|
|
use Closure;
|
|
|
|
|
|
|
|
class AuthenticatedOrPendingMfa
|
|
|
|
{
|
|
|
|
protected $loginService;
|
|
|
|
protected $mfaSession;
|
|
|
|
|
|
|
|
public function __construct(LoginService $loginService, MfaSession $mfaSession)
|
|
|
|
{
|
|
|
|
$this->loginService = $loginService;
|
|
|
|
$this->mfaSession = $mfaSession;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Handle an incoming request.
|
|
|
|
*
|
2021-08-21 16:49:40 +02:00
|
|
|
* @param \Illuminate\Http\Request $request
|
|
|
|
* @param \Closure $next
|
|
|
|
*
|
2021-08-02 23:02:25 +02:00
|
|
|
* @return mixed
|
|
|
|
*/
|
|
|
|
public function handle($request, Closure $next)
|
|
|
|
{
|
|
|
|
$user = auth()->user();
|
|
|
|
$loggedIn = $user !== null;
|
|
|
|
$lastAttemptUser = $this->loginService->getLastLoginAttemptUser();
|
|
|
|
|
|
|
|
if ($loggedIn || ($lastAttemptUser && $this->mfaSession->isPendingMfaSetup($lastAttemptUser))) {
|
|
|
|
return $next($request);
|
|
|
|
}
|
|
|
|
|
2021-08-21 16:14:24 +02:00
|
|
|
return redirect()->to(url('/login'));
|
2021-08-02 23:02:25 +02:00
|
|
|
}
|
|
|
|
}
|