App\Http\Middleware\Google2FA::handle()

Complexity

Conditions	10
Paths	11

Size

Total Lines	33
Code Lines	18

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

<?php
    public function handle($request, Closure $next)
    {
        $authenticator = app(Authenticator::class)->boot($request);
        $user = $request->user();

        if ($user !== null) {
            $remember = $request->cookie($user->getRememberDeviceKey());
            // If tokens do not match, cookie is no longer valid.
            if ($remember !== null && $remember !== $user->getRememberDeviceToken()) {
                    Cookie::queue(
                        Cookie::forget($user->getRememberDeviceKey())
                    );
            }

            if ($authenticator->isAuthenticated() || ($remember !== null && $remember === $user->getRememberDeviceToken())) {
                if (!$authenticator->isAuthenticated()) {
                    Log::notice('User skipped OTP entry with known device.', ['id' => $request->user()->id]);
                    $authenticator->login();
                }
                return $next($request);
            }
        } else {
            if ($authenticator->isAuthenticated()) {
                return $next($request);
            }
        }

        // Unlike \PragmaRX\Google2FALaravel\Middleware, set the intended url.
        // Check if the intended url already exists, if not then store in global session.
        if (!session()->has('url.expected')) {
            Session::put('url.expected', URL::full());
        }
        return $authenticator->makeRequestOneTimePasswordResponse();
    }