GCTC-NTGC / TalentCloud

routes/web.php

<?php

use Illuminate\Support\Facades\Lang;

/*
|--------------------------------------------------------------------------
| Web Routes
|--------------------------------------------------------------------------
|
| Here is where you can register web routes for your application. These
| routes are loaded by the RouteServiceProvider within a group which
| contains the "web" middleware group. Now create something great!
|
 */

/* ADD ALL LOCALIZED ROUTES INSIDE THIS GROUP */

Route::group(
    [
        'prefix' => LaravelLocalization::setLocale(),
        'middleware' => ['localeSessionRedirect', 'localizationRedirect', 'localeViewPath']
    ],
    function (): void {
        /* Routes used for local demos */
        /* If creating public demos, make sure to add a meta robots noindex, nofollow tag */
        Route::group(['prefix' => 'demo'], function (): void {

            /* Temporary Blog Index */
            Route::view('blog', 'common/blog-index')->middleware('localOnly')->name('blog');

            /* Temporary Blog Post */
            Route::view('post', 'common/blog-post')->middleware('localOnly')->name('post');

            /* Static - Reliability Form Demo */
            Route::view('reliability', 'demos/reliability/index', ['reliability' => Lang::get('common/reliability')])->name('reliability');

            /* Temp Builder 01 (Intro) */
            Route::view('builder-01', 'manager/builder-01')->middleware('localOnly')->name('jpb1');
            /* Temp Builder 02 (Job info) */
            Route::view('builder-02', 'manager/builder-02')->middleware('localOnly')->name('jpb2');
            /* Temp Builder 03 (Work Environment) */
            Route::view('builder-03', 'manager/builder-03')->middleware('localOnly')->name('jpb3');
            /* Temp Builder 04 (Impact) */
            Route::view('builder-04', 'manager/builder-04')->middleware('localOnly')->name('jpb4');
            /* Temp Builder 05 (Tasks) */
            Route::view('builder-05', 'manager/builder-05')->middleware('localOnly')->name('jpb5');
            /* Temp Builder 06 (Skills) */
            Route::view('builder-06', 'manager/builder-06')->middleware('localOnly')->name('jpb6');
            /* Temp Builder 07 (Education) */
            Route::view('builder-07', 'manager/builder-07')->middleware('localOnly')->name('jpb7');
            /* Temp Builder 08 (Review) */
            Route::view('builder-08', 'manager/builder-08')->middleware('localOnly')->name('jpb8');

            /* Profile (Experience) */
            /* Temp Resources */
            Route::view('resources', 'common/resources')->middleware('localOnly')->name('resources');

            /* Application (Welcome Mat) */
            Route::view('application-01', 'applicant/application/01-welcome')->middleware('localOnly')->name('app1');
            /* Application (Intro Information & Education) */
            Route::view('application-02', 'applicant/application/02-info-edu')->middleware('localOnly')->name('app2');
            /* Application (Experience Instruction) */
            Route::view('application-03', 'applicant/application/03-exp-instructions')->middleware('localOnly')->name('app3');
            /* Application (Experience) */
            Route::view('application-04', 'applicant/application/04-exp')->middleware('localOnly')->name('app4');
            /* Application (Skills Instruction) */
            Route::view('application-05', 'applicant/application/05-skill-instructions')->middleware('localOnly')->name('app5');
            /* Application (Skills) */
            Route::view('application-06', 'applicant/application/06-skill')->middleware('localOnly')->name('app6');
            /* Application (Questions) */
            Route::view('application-07', 'applicant/application/07-questions')->middleware('localOnly')->name('app7');
            /* Application (Review) */
            Route::view('application-08', 'applicant/application/08-review')->middleware('localOnly')->name('app8');
            /* Application (Signature & Submission) */
            Route::view('application-09', 'applicant/application/09-submit')->middleware('localOnly')->name('app9');

            /* Response Home */
            Route::view('response', 'response/index/index')->middleware('localOnly')->name('response.test');
            /* Response Screening */
            Route::view('response-screening', 'response/screening/index')->middleware('localOnly')->name('responseScreening');

            Route::view('response/api-test', 'applicant/str_api_test')->middleware('localOnly');
        });

        Route::group(['prefix' => config('app.applicant_prefix')], function (): void {

The function config was not found. Maybe you did not declare it correctly or list all dependencies?

            Route::get('two-factor/use-recovery-code', 'Auth\RecoveryCodeController@use')->name('recovery_codes.use');
            Route::post('two-factor/use-recovery-code', 'Auth\RecoveryCodeController@authenticate')->name('recovery_codes.authenticate');

            /* Require being logged in */
            Route::middleware(['auth'])->group(function (): void {

                /* Managers */
                Route::get('jobs/{jobPoster}/manager', 'ManagerProfileController@show')
                    ->middleware('can:view,jobPoster')
                    ->name('managers.show');
            });

            /*
             * IF user is logged in AND has activated 2fa, require one-time password.
             * This should include all routes except those related to authentication, to avoid loops.
             */
            Route::middleware(['2fa'])->group(function (): void {
                Route::post('/2fa', 'Auth\TwoFactorController@redirectToExpected')->name('2fa');

                /* Home */
                Route::get('/', 'HomepageController@applicant')->name('home');

                /* Jobs */
                Route::get('jobs', 'JobController@index')->name('jobs.index');

                Route::get('jobs/{jobPoster}', 'JobController@show')
                    ->middleware('can:view,jobPoster')
                    ->name('jobs.summary');

                /* Response Home */
                // Redirect /en/response to /response so it reaches the Talent Reserve app.
                Route::redirect('response', URL::to('/response'));

                /* Reserve Redirect */
                Route::redirect('reserve', URL::to('/response'));

                /* Require being logged in as applicant */
                Route::middleware(['auth', 'role:applicant'])->group(function (): void {

                    // Application permissions are handled within the controller instead of with middleware.
                    /* Applications */
                    Route::get('applications', 'ApplicationController@index')->name('applications.index');

                    /* View Application */
                    Route::get('applications/{application}', 'ApplicationController@show')
                        ->middleware('can:view,application')
                        ->name('applications.show');

                    Route::get('applications/{application}/edit', 'ApplicationTimelineController@show')
                        ->middleware('can:update,application')
                        ->name('applications.timeline');
                    Route::get('applications/{application}/next', 'ApplicationTimelineController@complete')
                        ->middleware('can:view,application')
                        ->name('applications.timeline.next');
                    Route::get('applications/{application}/{step}', 'ApplicationTimelineController@show')
                        ->middleware('can:update,application')
                        ->name('applications.timeline.step');


                    Route::get('jobs/{jobPoster}/apply', 'JobController@apply')
                        ->name('jobs.apply');

                    /* Step 01 */
                    Route::get('jobs/{jobPoster}/application/step-01', 'ApplicationByJobController@editBasics')->name('job.application.edit.1');

                    /* Step 02 */
                    Route::get('jobs/{jobPoster}/application/step-02', 'ApplicationByJobController@editExperience')->name('job.application.edit.2');

                    /* Step 03 */
                    Route::get('jobs/{jobPoster}/application/step-03', 'ApplicationByJobController@editEssentialSkills')->name('job.application.edit.3');

                    /* Step 04 */
                    Route::get('jobs/{jobPoster}/application/step-04', 'ApplicationByJobController@editAssetSkills')->name('job.application.edit.4');

                    /* Step 05 */
                    Route::get('jobs/{jobPoster}/application/step-05', 'ApplicationByJobController@preview')->name('job.application.edit.5');

                    /* Step 06 */
                    Route::get('jobs/{jobPoster}/application/step-06', 'ApplicationByJobController@confirm')->name('job.application.edit.6');

                    /* Step 06: Complete */
                    Route::get('jobs/{jobPoster}/application/complete', 'ApplicationByJobController@complete')->name('job.application.complete');

                    /* Application Update routes */

                    /* Step 01 */
                    Route::post('jobs/{jobPoster}/application/step-01/update', 'ApplicationByJobController@updateBasics')->name('job.application.update.1');

                    /* Step 02 */
                    Route::post('jobs/{jobPoster}/application/step-02/update', 'ApplicationByJobController@updateExperience')->name('job.application.update.2');

                    /* Step 03 */
                    Route::post('jobs/{jobPoster}/application/step-03/update', 'ApplicationByJobController@updateEssentialSkills')->name('job.application.update.3');

                    /* Step 04 */
                    Route::post('jobs/{jobPoster}/application/step-04/update', 'ApplicationByJobController@updateAssetSkills')->name('job.application.update.4');

                    /* Step 05 */
                    Route::post('jobs/{jobPoster}/application/submit', 'ApplicationByJobController@submit')->name('job.application.submit');

                    Route::get('profile', 'ApplicantProfileController@editAuthenticated')->name('profile');
                    Route::get('profile/about', 'ApplicantProfileController@editAuthenticated');

                    /* Profile - My Experience */
                    Route::get('profile/experience', 'ExperienceController@editAuthenticated');
                    Route::get('profile/{applicant}/experience', 'ExperienceController@edit')
                        ->middleware('can:view,applicant')
                        ->middleware('can:update,applicant')
                        ->name('profile.experience.edit');

                    /* Profile - My Skills */
                    Route::get('profile/skills', 'ApplicantSkillsController@editAuthenticated');
                    Route::get('profile/{applicant}/skills', 'ApplicantSkillsController@edit')
                        ->middleware('can:view,applicant')
                        ->middleware('can:update,applicant')
                        ->name('profile.skills.edit');

                    /* Profile - About Me (archived) */
                    Route::get('profile/{applicant}/about', 'ApplicantProfileController@edit')
                        ->middleware('can:view,applicant')
                        ->middleware('can:update,applicant')
                        ->name('profile.about.edit');

                    /* Profile - My Skills Declarations (archived) */
                    Route::get('profile/skills-old', 'SkillDeclarationController@editAuthenticated');
                    Route::get('profile/{applicant}/skills-old', 'SkillDeclarationController@edit')
                        ->middleware('can:view,applicant')
                        ->middleware('can:update,applicant')
                        ->name('profile.skills-old.edit');

                    /* Profile - My References  (archived) */
                    Route::get('profile/references', 'ReferencesController@editAuthenticated');

                    Route::get('profile/{applicant}/references', 'ReferencesController@edit')
                        ->middleware('can:view,applicant')
                        ->middleware('can:update,applicant')
                        ->name('profile.references.edit');

                    /* Profile - My Portfolio (archived) */
                    Route::get('profile/portfolio', 'WorkSamplesController@editAuthenticated');

                    Route::get('profile/{applicant}/portfolio', 'WorkSamplesController@edit')
                        ->middleware('can:view,applicant')
                        ->middleware('can:update,applicant')
                        ->name('profile.work_samples.edit');

                    /* Account Settings */
                    Route::get('settings', 'SettingsController@editAuthenticated')
                        // Permission is checked in controller.
                        ->name('settings.edit');

                    Route::post(
                        'settings/{user}/personal/update',
                        'SettingsController@updatePersonal'
                    )
                        ->middleware('can:view,user')
                        ->middleware('can:update,user')
                        ->name('settings.personal.update');

                    Route::post(
                        'settings/{user}/password/update',
                        'SettingsController@updatePassword'
                    )
                        ->middleware('can:view,user')
                        ->middleware('can:update,user')
                        ->name('settings.password.update');

                    Route::post(
                        'settings/{user}/government/update',
                        'SettingsController@updateGovernment'
                    )
                        ->middleware('can:view,user')
                        ->middleware('can:update,user')
                        ->name('settings.government.update');

                    Route::post(
                        'settings/{user}/contact-preferences/update',
                        'SettingsController@updateContactPreferences'
                    )
                        ->middleware('can:view,user')
                        ->middleware('can:update,user')
                        ->name('settings.contact_preferences.update');

                    Route::post(
                        'settings/{user}/account/delete',
                        'SettingsController@deleteAccount'
                    )
                        ->middleware('can:view,user')
                        ->middleware('can:update,user')
                        ->name('settings.account.delete');

                    /* 2FA Settings */
                    Route::get('two-factor/activate', 'Auth\TwoFactorController@activate')->name('two_factor.activate');
                    Route::post('two-factor/deactivate', 'Auth\TwoFactorController@deactivate')->name('two_factor.deactivate');
                    Route::post('two-factor/forget', 'Auth\TwoFactorController@forget')->name('two_factor.forget');
                    Route::post('two-factor/confirm', 'Auth\TwoFactorController@confirm')->name('two_factor.confirm');

                    Route::post('two-factor/generate-recovery-codes', 'Auth\RecoveryCodeController@generate')->name('recovery_codes.generate');
                    Route::get('two-factor/recovery-codes', 'Auth\RecoveryCodeController@show')->name('recovery_codes.show');
                });

                /* Static - FAQ */
                Route::get('faq', 'FaqController')->name('faq');

                /* Static - Privacy Policy */
                Route::view(
                    'privacy',
                    'common/static_privacy',
                    [
                        'privacy' => Lang::get('common/privacy'),
                        'custom_breadcrumbs' => [
                            'home' => LaravelLocalization::localizeUrl('/'),
                            Lang::get('common/privacy.title') => '',
                        ],
                    ]
                )->name('privacy');

                /* Static - Terms of Service */
                Route::view(
                    'tos',
                    'common/static_tos',
                    [
                        'tos' => Lang::get('common/tos'),
                        'custom_breadcrumbs' => [
                            'home' => LaravelLocalization::localizeUrl('/'),
                            Lang::get('common/tos.title') => '',
                        ],
                    ]
                )->name('tos');

                /* Static - ITP */
                Route::view('indigenous', 'common/static-itp', ['itp' => Lang::get('common/itp')])->name('itp');
            });

            /* Authentication =========================================================== */

            // Laravel default login, logout, register, and reset routes.
            Route::get('login', 'Auth\LoginController@showLoginForm')->name('login');
            Route::post('login', 'Auth\LoginController@login')->name('login.post');
            Route::post('logout', 'Auth\LoginController@logout')->name('logout');

            // Registration Routes...
            Route::get('register', 'Auth\RegisterController@showRegistrationForm')->name('register');
            Route::post('register', 'Auth\RegisterController@register')->name('register.post');

            // Password Reset Routes...
            Route::get('password/reset', 'Auth\ForgotPasswordController@showLinkRequestForm')->name('password.request');
            Route::post('password/email', 'Auth\ForgotPasswordController@sendResetLinkEmail')->name('password.email');
            Route::get('password/reset/{token}', 'Auth\ResetPasswordController@showResetForm')->name('password.reset');
            Route::post('password/reset', 'Auth\ResetPasswordController@reset')->name('password.reset.post');
        });

        /* Manager Portal =========================================================== */
        Route::group(['prefix' => config('app.manager_prefix')], function (): void {

            Route::middleware(['finishManagerRegistration'])->group(function (): void {

                Route::get('two-factor/use-recovery-code', 'Auth\RecoveryCodeController@use')->name('manager.recovery_codes.use');
                Route::post('two-factor/use-recovery-code', 'Auth\RecoveryCodeController@authenticate')->name('manager.recovery_codes.authenticate');

                /*
                 * IF user is logged in AND has activated 2fa, require one-time password.
                 * This should include all routes except those related to authentication, to avoid loops.
                 */
                Route::middleware(['2fa'])->group(function (): void {

                    Route::post('/2fa', 'Auth\TwoFactorController@redirectToExpected')->name('manager.2fa');

                    /* Home */
                    Route::get('/', 'HomepageController@manager')->name('manager.home');

                    /* Static - FAQ */
                    Route::get(
                        'faq',
                        'ManagerProfileController@faq'
                    )->name('manager.faq');

                    Route::get(
                        'faq#managers',
                        'ManagerProfileController@faq'
                    )->name('manager.faq.section');

                    Route::middleware(['auth', 'role:manager'])->group(function (): void {

                        Route::get('profile', 'ManagerProfileController@editAuthenticated')->name('manager.profile');

                        /* Profile */
                        Route::get('profile/{manager}', 'ManagerProfileController@edit')
                            ->middleware('can:view,manager')
                            ->middleware('can:update,manager')
                            ->name('manager.profile.edit');

                        Route::post('profile/{manager}/update', 'ManagerProfileController@update')
                            ->middleware('can:update,manager')
                            ->name('manager.profile.update');

                        /* Reviewing applications/applicants requires two-factor authentication */
                        // TODO: Eventually we'll want to wrap the routes for viewing applications in the 2fa.required middleware
                        Route::get('jobs/{jobPoster}/applications', 'ApplicationByJobController@index')
                            ->where('jobPoster', '[0-9]+')
                            ->middleware('can:reviewApplicationsFor,jobPoster')
                            ->name('manager.jobs.applications');

                        /* View Application */
                        Route::get(
                            'jobs/{jobPoster}/applications/{application}',
                            'ApplicationController@showWithToolbar'
                        )
                            ->middleware('can:manage,jobPoster')
                            ->middleware('can:view,application')
                            ->name('manager.applications.show');

                        /* View Applicant Profile with Job */
                        Route::get('jobs/{jobPoster}/applicants/{applicant}', 'ApplicantProfileController@showWithJob')
                            ->middleware('can:manage,jobPoster')
                            ->middleware('can:view,applicant')
                            ->name('manager.applicants.show');

                        /* Job Index */
                        Route::get('jobs', 'JobController@managerIndex')->name('manager.jobs.index');

                        /* View Job Poster */
                        Route::get('jobs/{jobPoster}/preview', 'JobController@show')
                            ->where('jobPoster', '[0-9]+')
                            ->middleware('can:view,jobPoster')
                            ->name('manager.jobs.preview');

                        /* View Job Summary */
                        Route::get('jobs/{jobPoster}', 'JobSummaryController@show')
                            ->middleware('can:manage,jobPoster')
                            ->name('manager.jobs.summary')
                            ->where('jobPoster', '[0-9]+');

                        /* Job Builder */
                        Route::get(
                            'jobs/builder',
                            'JobBuilderController@show'
                        )->name('manager.jobs.create');

                        Route::get(
                            'jobs/{jobPoster}/builder',
                            'JobBuilderController@show'
                        )
                            ->where('jobPoster', '[0-9]+')
                            ->name('manager.jobs.edit');

                        Route::get(
                            'jobs/{jobPoster}/builder/intro',
                            'JobBuilderController@show'
                        )->where('jobPoster', '[0-9]+');

                        Route::get(
                            'jobs/{jobPoster}/builder/details',
                            'JobBuilderController@show'
                        )->where('jobPoster', '[0-9]+');

                        Route::get(
                            'jobs/{jobPoster}/builder/environment',
                            'JobBuilderController@show'
                        )->where('jobPoster', '[0-9]+');

                        Route::get(
                            'jobs/{jobPoster}/builder/impact',
                            'JobBuilderController@show'
                        )->where('jobPoster', '[0-9]+');

                        Route::get(
                            'jobs/{jobPoster}/builder/tasks',
                            'JobBuilderController@show'
                        )->where('jobPoster', '[0-9]+');

                        Route::get(
                            'jobs/{jobPoster}/builder/skills',
                            'JobBuilderController@show'
                        )->where('jobPoster', '[0-9]+');

                        Route::get(
                            'jobs/{jobPoster}/builder/review',
                            'JobBuilderController@show'
                        )
                            ->where('jobPoster', '[0-9]+')
                            ->name('manager.jobs.review');

                        /* Delete Job */
                        Route::delete('jobs/{jobPoster}', 'JobController@destroy')
                            ->where('jobPoster', '[0-9]+')
                            ->middleware('can:delete,jobPoster')
                            ->name('manager.jobs.destroy');
                        Route::post(
                            'jobs/{jobPoster}/status/{status}',
                            'JobStatusController@setJobStatus'
                        )
                            ->middleware('can:manage,jobPoster')
                            ->where('jobPoster', '[0-9]+')
                            ->name('manager.jobs.setJobStatus');

                        /* Screening Plan Builder */
                        Route::get(
                            'jobs/{jobPoster}/assessment-plan',
                            'AssessmentPlanController@show'
                        )
                            ->middleware('can:viewAssessmentPlan,jobPoster')
                            ->where('jobPoster', '[0-9]+')
                            ->name('manager.jobs.screening_plan');

                        /* Account Settings */
                        Route::get('settings', 'SettingsController@editAuthenticated')
                            // Permissions are checked in Controller.
                            ->name('manager.settings.edit');

                        Route::post(
                            'settings/{user}/personal/update',
                            'SettingsController@updatePersonal'
                        )
                            ->middleware('can:view,user')
                            ->middleware('can:update,user')
                            ->name('manager.settings.personal.update');

                        Route::post(
                            'settings/{user}/password/update',
                            'SettingsController@updatePassword'
                        )
                            ->middleware('can:view,user')
                            ->middleware('can:update,user')
                            ->name('manager.settings.password.update');

                        Route::post(
                            'settings/{user}/government/update',
                            'SettingsController@updateGovernment'
                        )
                            ->middleware('can:view,user')
                            ->middleware('can:update,user')
                            ->name('manager.settings.government.update');

                        Route::post(
                            'settings/{user}/contact-preferences/update',
                            'SettingsController@updateContactPreferences'
                        )
                            ->middleware('can:view,user')
                            ->middleware('can:update,user')
                            ->name('manager.settings.contact_preferences.update');

                        Route::post(
                            'settings/{user}/account/delete',
                            'SettingsController@deleteAccount'
                        )
                            ->middleware('can:view,user')
                            ->middleware('can:update,user')
                            ->name('manager.settings.account.delete');

                        Route::get('resources', 'ResourcesController@show')
                            ->middleware('can:view-resources')
                            ->name('manager.resources');

                        /* Two-factor Authentication */
                        Route::get('two-factor/activate', 'Auth\TwoFactorController@activate')->name('manager.two_factor.activate');
                        Route::post('two-factor/deactivate', 'Auth\TwoFactorController@deactivate')->name('manager.two_factor.deactivate');
                        Route::post('two-factor/forget', 'Auth\TwoFactorController@forget')->name('manager.two_factor.forget');
                        Route::post('two-factor/confirm', 'Auth\TwoFactorController@confirm')->name('manager.two_factor.confirm');

                        Route::post('two-factor/generate-recovery-codes', 'Auth\RecoveryCodeController@generate')->name('manager.recovery_codes.generate');
                        Route::get('two-factor/recovery-codes', 'Auth\RecoveryCodeController@show')->name('manager.recovery_codes.show');
                    });
                });
            });

            // These routes must be excluded from the finishManagerRegistration middleware
            // to avoid an infinite loop of redirects.
            Route::middleware(['auth', 'role:manager'])->group(function (): void {
                Route::get('first-visit', 'Auth\FirstVisitController@showFirstVisitManagerForm')
                    ->name('manager.first_visit');
                Route::post('finish_registration', 'Auth\FirstVisitController@finishManagerRegistration')
                    ->name('manager.finish_registration');
            });

            // Laravel default login, logout, register, and reset routes.
            Route::get('login', 'Auth\LoginController@showLoginForm')->name('manager.login');
            Route::post('login', 'Auth\LoginController@login')->name('manager.login.post');
            Route::post('logout', 'Auth\LoginController@logout')->name('manager.logout');

            // Registration Routes...
            Route::get('register', 'Auth\RegisterController@showManagerRegistrationForm')->name('manager.register');
            Route::post('register', 'Auth\RegisterController@registerManager')->name('manager.register.post');

            // Password Reset Routes...
            Route::get('password/reset', 'Auth\ForgotPasswordController@showLinkRequestForm')->name('manager.password.request');
            Route::post('password/email', 'Auth\ForgotPasswordController@sendResetLinkEmail')->name('manager.password.email');
            Route::get('password/reset/{token}', 'Auth\ResetPasswordController@showResetForm')->name('manager.password.reset');
            Route::post('password/reset', 'Auth\ResetPasswordController@reset')->name('manager.password.reset.post');
        });

        /* AJAX calls =============================================================== */

        /* Require being logged in */
        Route::middleware(['auth'])->group(function (): void {

            Route::delete('applications/{application}', 'ApplicationController@destroy')
                ->middleware('can:delete,application')
                ->name('applications.destroy');
        });

        /* Non-Backpack Admin Portal (localized pages) =========================================================== */
        Route::group(
            [
                'prefix' => 'admin',
                'middleware' => ['auth', 'role:admin']
            ],
            function (): void {
                /* Edit Job */
                Route::get('jobs/{jobPoster}/edit', 'JobController@edit')
                    ->where('jobPoster', '[0-9]+')
                    ->middleware('can:update,jobPoster')
                    ->name('admin.jobs.edit');
                Route::post('jobs/{jobPoster}', 'JobController@store')
                    ->where('jobPoster', '[0-9]+')
                    ->middleware('can:update,jobPoster')
                    ->name('admin.jobs.update');
            }
        );

        /* HR Advisor Portal =========================================================== */

        Route::group([
            'prefix' => config('app.hr_prefix'),
        ], function (): void {

            Route::middleware(['finishHrRegistration'])->group(function (): void {

                Route::get('two-factor/use-recovery-code', 'Auth\RecoveryCodeController@use')->name('hr_advisor.recovery_codes.use');
                Route::post('two-factor/use-recovery-code', 'Auth\RecoveryCodeController@authenticate')->name('hr_advisor.recovery_codes.authenticate');

                /*
                 * IF user is logged in AND has activated 2fa, require one-time password.
                 * This should include all routes except those related to authentication, to avoid loops.
                 */
                Route::middleware(['2fa'])->group(function (): void {

                    Route::post('/2fa', 'Auth\TwoFactorController@redirectToExpected')->name('hr_advisor.2fa');

                    Route::get('/', 'HomepageController@hr_advisor')->name('hr_advisor.home');

                    Route::middleware(['auth', 'role:hr_advisor'])->group(function (): void {

                        Route::get('jobs', 'JobController@hrIndex')->name('hr_advisor.jobs.index');

                        /* Application Index */
                        Route::get('jobs/{jobPoster}/applications', 'ApplicationByJobController@index')
                            ->where('jobPoster', '[0-9]+')
                            ->middleware('can:reviewApplicationsFor,jobPoster')
                            ->name('hr_advisor.jobs.applications');

                        /* View Application */
                        Route::get(
                            'jobs/{jobPoster}/applications/{application}',
                            'ApplicationController@showWithToolbar'
                        )
                            ->middleware('can:manage,jobPoster')
                            ->middleware('can:view,application')
                            ->name('hr_advisor.applications.show');

                        /* View Applicant Profile */
                        Route::get('jobs/{jobPoster}/applicants/{applicant}', 'ApplicantProfileController@showWithJob')
                            ->middleware('can:manage,jobPoster')
                            ->middleware('can:view,applicant')
                            ->name('hr_advisor.applicants.show');

                        Route::get('jobs/{jobPoster}', 'JobSummaryController@show')
                            ->middleware('can:manage,jobPoster')
                            ->name('hr_advisor.jobs.summary')
                            ->where('jobPoster', '[0-9]+');

                        Route::post('jobs/{job}/unclaim', 'JobSummaryController@unclaimJob')
                            ->name('hr_advisor.jobs.unclaim')
                            ->middleware('can:unClaim,job')
                            ->where('job', '[0-9]+');

                        Route::get(
                            'jobs/{jobPoster}/assessment-plan',
                            'AssessmentPlanController@show'
                        )
                            ->middleware('can:viewAssessmentPlan,jobPoster')
                            ->where('jobPoster', '[0-9]+')
                            ->name('hr_advisor.jobs.screening_plan');

                        Route::get(
                            'jobs/{jobPoster}/review',
                            'JobBuilderController@hrReview'
                        )
                            ->middleware('can:manage,jobPoster')
                            ->where('job', '[0-9]+')
                            ->name('hr_advisor.jobs.review');

                        Route::get(
                            'jobs/{jobPoster}/preview',
                            'JobController@show'
                        )
                            ->middleware('can:view,jobPoster')
                            ->where('jobPoster', '[0-9]+')
                            ->name('hr_advisor.jobs.preview');

                        Route::post(
                            'jobs/{jobPoster}/status/{status}',
                            'JobStatusController@setJobStatus'
                        )
                            ->middleware('can:manage,jobPoster')
                            ->where('jobPoster', '[0-9]+')
                            ->name('hr_advisor.jobs.setJobStatus');

                        /* Account Settings */
                        Route::get('settings', 'SettingsController@editAuthenticated')
                            // Permissions are checked in Controller.
                            ->name('hr_advisor.settings.edit');

                        Route::post(
                            'settings/{user}/personal/update',
                            'SettingsController@updatePersonal'
                        )
                            ->middleware('can:view,user')
                            ->middleware('can:update,user')
                            ->name('hr_advisor.settings.personal.update');

                        Route::post(
                            'settings/{user}/password/update',
                            'SettingsController@updatePassword'
                        )
                            ->middleware('can:view,user')
                            ->middleware('can:update,user')
                            ->name('hr_advisor.settings.password.update');

                        Route::post(
                            'settings/{user}/government/update',
                            'SettingsController@updateGovernment'
                        )
                            ->middleware('can:view,user')
                            ->middleware('can:update,user')
                            ->name('hr_advisor.settings.government.update');

                        Route::post(
                            'settings/{user}/contact-preferences/update',
                            'SettingsController@updateContactPreferences'
                        )
                            ->middleware('can:view,user')
                            ->middleware('can:update,user')
                            ->name('hr_advisor.settings.contact_preferences.update');

                        Route::get('resources', 'ResourcesController@show')
                            ->middleware('can:view-resources')
                            ->name('hr_advisor.resources');

                        /* Two-factor Authentication */
                        Route::get('two-factor/activate', 'Auth\TwoFactorController@activate')->name('hr_advisor.two_factor.activate');
                        Route::post('two-factor/deactivate', 'Auth\TwoFactorController@deactivate')->name('hr_advisor.two_factor.deactivate');
                        Route::post('two-factor/forget', 'Auth\TwoFactorController@forget')->name('hr_advisor.two_factor.forget');
                        Route::post('two-factor/confirm', 'Auth\TwoFactorController@confirm')->name('hr_advisor.two_factor.confirm');

                        Route::post('two-factor/generate-recovery-codes', 'Auth\RecoveryCodeController@generate')->name('hr_advisor.recovery_codes.generate');
                        Route::get('two-factor/recovery-codes', 'Auth\RecoveryCodeController@show')->name('hr_advisor.recovery_codes.show');
                    });
                });
            });
            // These routes must be excluded from the finishHrAdvisorRegistration middleware to avoid an infinite loop of redirects
            Route::middleware(['auth', 'role:hr_advisor'])->group(function (): void {
                Route::get('first-visit', 'Auth\FirstVisitController@showFirstVisitHrForm')
                    ->name('hr_advisor.first_visit');
                Route::post('finish_registration', 'Auth\FirstVisitController@finishHrRegistration')
                    ->name('hr_advisor.finish_registration');
            });

            // Laravel default login, logout, register, and reset routes
            Route::get('login', 'Auth\LoginController@showLoginForm')->name('hr_advisor.login');
            Route::post('login', 'Auth\LoginController@login')->name('hr_advisor.login.post');
            Route::post('logout', 'Auth\LoginController@logout')->name('hr_advisor.logout');

            // Registration Routes...
            Route::get('register', 'Auth\RegisterController@showHrRegistrationForm')->name('hr_advisor.register');
            Route::post('register', 'Auth\RegisterController@registerHrAdvisor')->name('hr_advisor.register.post');

            // Password Reset Routes...
            Route::get('password/reset', 'Auth\ForgotPasswordController@showLinkRequestForm')->name('hr_advisor.password.request');
            Route::post('password/email', 'Auth\ForgotPasswordController@sendResetLinkEmail')->name('hr_advisor.password.email');
            Route::get('password/reset/{token}', 'Auth\ResetPasswordController@showResetForm')->name('hr_advisor.password.reset');
            Route::post('password/reset', 'Auth\ResetPasswordController@reset')->name('hr_advisor.password.reset.post');
        });

        /* Non-Backpack Admin Portal (non-localized pages) =========================================================== */
        Route::group(
            [
                'prefix' => 'admin',
                'middleware' => ['auth', 'role:admin']
            ],
            function (): void {
                // This page is non-localized, because the middleware that redirects to localized
                // pages changes POSTs to GETs and messes up the request.
                Route::match(['get','post'], 'jobs/create/as-manager/{manager}', 'JobController@createAsManager')
                    ->middleware('can:create,App\Models\JobPoster')
                    ->name('admin.jobs.create_as_manager');

                Route::post('/2fa', 'Auth\TwoFactorController@redirectToExpected')->name('admin.2fa');

                Route::get('two-factor/activate', 'Auth\TwoFactorController@activate')->name('admin.two_factor.activate');
                Route::post('two-factor/deactivate', 'Auth\TwoFactorController@deactivate')->name('admin.two_factor.deactivate');
                Route::post('two-factor/forget', 'Auth\TwoFactorController@forget')->name('admin.two_factor.forget');
                Route::post('two-factor/confirm', 'Auth\TwoFactorController@confirm')->name('admin.two_factor.confirm');

                Route::post('two-factor/generate-recovery-codes', 'Auth\RecoveryCodeController@generate')->name('admin.recovery_codes.generate');
                Route::get('two-factor/recovery-codes', 'Auth\RecoveryCodeController@show')->name('admin.recovery_codes.show');

                Route::get('{jobPoster}/download-applicants', 'JobController@downloadApplicants')
                    ->middleware('can:downloadApplicants,jobPoster')
                    ->name('admin.jobs.download.applicants');

                /* View Applicant Profile */
                Route::get('applicants/{applicant}', 'ApplicantProfileController@profile')
                    ->middleware('can:view,applicant')
                    ->name('admin.applicants.profile');
            }
        );
    }
);

/* ALL NON-LOCALIZED ROUTES **/

/* API routes - currently using same default http auth, but not localized */
Route::prefix('api/v1')->name('api.v1.')->group(function (): void {
    // Protected by a gate in the controller, instead of policy middleware.
    Route::get('jobs/{jobPoster}/assessment-plan', 'AssessmentPlanController@getForJob')
        ->middleware('can:viewAssessmentPlan,jobPoster')
        ->where('jobPoster', '[0-9]+');
    Route::get('users', 'Api\UserController@index');
    Route::get('users/{user}', 'Api\UserController@show')
        ->where('user', '[0-9]+');

    // Public, not protected by policy or gate.
    Route::get('award-recipient-types', 'Api\AwardRecipientTypeController@index');
    Route::get('award-recognition-types', 'Api\AwardRecognitionTypeController@index');
    Route::get('education-statuses', 'Api\EducationStatusController@index');
    Route::get('education-types', 'Api\EducationTypeController@index');
    Route::get('departments', 'Api\DepartmentController@index');
    Route::get('job-poster-statuses', 'Api\JobStatusController@index');
    Route::get('skills', 'Api\SkillController@index');
    Route::get('skill-categories', 'Api\SkillCategoryController@index');

    // Resource Routes are protected by policies in controllers instead of middleware.
    Route::resource('assessments', 'AssessmentController')->except([
        'create', 'edit', 'index'
    ]);
    Route::apiResource('rating-guide-answers', 'RatingGuideAnswerController')->except([
        'index'
    ])->parameters([
        'rating-guide-answers' => 'ratingGuideAnswer'
    ]);
    Route::resource('rating-guide-questions', 'RatingGuideQuestionController')->except([
        'create', 'edit', 'index'
    ]);
    Route::resource('assessment-plan-notifications', 'AssessmentPlanNotificationController')->except([
        'store', 'create', 'edit'
    ]);
    // TODO: add policy middleware
    Route::get('jobs/{jobPoster}/tasks', 'Api\JobPosterKeyTaskController@indexByJob')
        ->where('jobPoster', '[0-9]+')
        ->middleware('can:view,jobPoster');
    Route::put('jobs/{jobPoster}/tasks', 'Api\JobPosterKeyTaskController@batchUpdate')
        ->where('jobPoster', '[0-9]+')
        ->middleware('can:update,jobPoster');

    Route::get('jobs/{jobPoster}/criteria', 'Api\CriteriaController@indexByJob')
        ->where('jobPoster', '[0-9]+')
        ->middleware('can:view,jobPoster');
    Route::put('jobs/{jobPoster}/criteria', 'Api\CriteriaController@batchUpdate')
        ->where('jobPoster', '[0-9]+')
        ->middleware('can:update,jobPoster');

    Route::put(
        'jobs/{jobPoster}/status/{status}',
        'JobStatusController@setJobStatus'
    )
        ->middleware('can:manage,jobPoster')
        ->where('jobPoster', '[0-9]+')
        ->name('jobs.setJobStatus');
    Route::resource('jobs', 'Api\JobController')->only([
        'show', 'store', 'update', 'index'
    ])->names([ // Specify custom names because default names collided with existing routes.
        'show' => 'jobs.show',
        'store' => 'jobs.store',
        'update' => 'jobs.update',
        'index' => 'jobs.index'
    ]);

    Route::put('applications/{application}/review', 'ApplicationReviewController@updateForApplication')
        ->middleware('can:review,application')
        ->name('application_reviews.update');

    Route::get('applications/{application}/reference-emails/', 'Api\MicroReferenceController@index')
        ->middleware('can:review,application')
        ->name('api.application.reference_mail.index');
    Route::get('applications/{application}/reference-emails/director', 'Api\MicroReferenceController@showDirectorEmail')
        ->middleware('can:review,application')
        ->name('api.application.reference_mail.director.show');
    Route::post('applications/{application}/reference-emails/director/send', 'Api\MicroReferenceController@sendDirectorEmail')
        ->middleware('can:review,application')
        ->name('api.application.reference_mail.director.send');
    Route::get('applications/{application}/reference-emails/secondary', 'Api\MicroReferenceController@showSecondaryReferenceEmail')
        ->middleware('can:review,application')
        ->name('api.application.reference_mail.secondary.show');
    Route::post('applications/{application}/reference-emails/secondary/send', 'Api\MicroReferenceController@sendSecondaryReferenceEmail')
        ->middleware('can:review,application')
        ->name('api.application.reference_mail.secondary.send');

    Route::resource('managers', 'Api\ManagerController')->only([
        'show', 'update'
    ])->names([ // Specify custom names because default names collided with existing routes.
        'show' => 'managers.show',
        'update' => 'managers.update'
    ]);

    // User must be logged in to user currentuser routes
    Route::get('currentuser/manager', 'Api\ManagerController@showAuthenticated')
        ->middleware('auth');

    // Comment model routes
    Route::get('jobs/{jobPoster}/comments', 'Api\CommentApiController@indexByJob')
        ->where('jobPoster', '[0-9]+')
        ->middleware('can:viewComments,jobPoster');
    Route::post('jobs/{jobPoster}/comments', 'Api\CommentApiController@store')
        ->where('jobPoster', '[0-9]+')
        ->middleware('can:storeComment,jobPoster');

    // Claim / unclaim job routes, HR portal
    Route::put('jobs/{job}/claim', 'Api\ClaimJobApiController@store')
        ->middleware('can:claim,job')
        ->where('job', '[0-9]+');
    Route::delete('jobs/{job}/claim', 'Api\ClaimJobApiController@destroy')
        ->middleware('can:unClaim,job')
        ->where('job', '[0-9]+');

    Route::get('hr-advisors/{hrAdvisor}', 'Api\HrAdvisorController@show')
        ->middleware('can:view,hrAdvisor');

    Route::put('hr-advisors/{hrAdvisor}/claims/{job}', 'Api\ClaimJobApiController@claimJob')
        ->middleware('can:update,hrAdvisor')
        ->where('hrAdvisor', '[0-9]+')
        ->where('job', '[0-9]+');
    Route::delete('hr-advisors/{hrAdvisor}/claims/{job}', 'Api\ClaimJobApiController@unclaimJob')
        ->middleware('can:update,hrAdvisor')
        ->where('hrAdvisor', '[0-9]+')
        ->where('job', '[0-9]+');

    Route::get('applicants/{applicant}/experience', 'Api\ExperienceController@indexForApplicant')
        ->where('applicant', '[0-9]+')
        ->middleware('can:view,applicant')
        ->name('applicant.experience.index');

    Route::post('applicants/{applicant}/experience-work', 'Api\ExperienceController@storeWork')
        ->where('applicant', '[0-9]+')
        ->middleware('can:update,applicant')
        ->name('applicant.experience-work.store');
    Route::post('applicants/{applicant}/experience-personal', 'Api\ExperienceController@storePersonal')
        ->where('applicant', '[0-9]+')
        ->middleware('can:update,applicant')
        ->name('applicant.experience-personal.store');
    Route::post('applicants/{applicant}/experience-education', 'Api\ExperienceController@storeEducation')
        ->where('applicant', '[0-9]+')
        ->middleware('can:update,applicant')
        ->name('applicant.experience-education.store');
    Route::post('applicants/{applicant}/experience-award', 'Api\ExperienceController@storeAward')
        ->where('applicant', '[0-9]+')
        ->middleware('can:update,applicant')
        ->name('applicant.experience-award.store');
    Route::post('applicants/{applicant}/experience-community', 'Api\ExperienceController@storeCommunity')
        ->where('applicant', '[0-9]+')
        ->middleware('can:update,applicant')
        ->name('applicant.experience-community.store');

    Route::get('applicants/{applicant}/skills', 'Api\ApplicantSkillsController@index')
        ->where('applicant', '[0-9]+')
        ->middleware('can:view,applicant')
        ->name('applicant.skills.index');
    Route::put('applicants/{applicant}/skills', 'Api\ApplicantSkillsController@update')
        ->where('applicant', '[0-9]+')
        ->middleware('can:update,applicant')
        ->name('applicant.skills.update');

    Route::put('experience-work/{work}', 'Api\ExperienceController@updateWork')
        ->where('work', '[0-9]+')
        ->middleware('can:update,work')
        ->name('experience-work.update');
    Route::put('experience-personal/{personal}', 'Api\ExperienceController@updatePersonal')
        ->where('personal', '[0-9]+')
        ->middleware('can:update,personal')
        ->name('experience-personal.update');
    Route::put('experience-education/{education}', 'Api\ExperienceController@updateEducation')
        ->where('education', '[0-9]+')
        ->middleware('can:update,education')
        ->name('experience-education.update');
    Route::put('experience-award/{award}', 'Api\ExperienceController@updateAward')
        ->where('award', '[0-9]+')
        ->middleware('can:update,award')
        ->name('experience-award.update');
    Route::put('experience-community/{community}', 'Api\ExperienceController@updateCommunity')
        ->where('community', '[0-9]+')
        ->middleware('can:update,community')
        ->name('experience-community.update');

    Route::delete('experience-work/{work}', 'Api\ExperienceController@destroyWork')
        ->where('work', '[0-9]+')
        ->middleware('can:delete,work')
        ->name('experience-work.destroy');
    Route::delete('experience-personal/{personal}', 'Api\ExperienceController@destroyPersonal')
        ->where('personal', '[0-9]+')
        ->middleware('can:delete,personal')
        ->name('experience-personal.destroy');
    Route::delete('experience-education/{education}', 'Api\ExperienceController@destroyEducation')
        ->where('education', '[0-9]+')
        ->middleware('can:delete,education')
        ->name('experience-education.destroy');
    Route::delete('experience-award/{award}', 'Api\ExperienceController@destroyAward')
        ->where('award', '[0-9]+')
        ->middleware('can:delete,award')
        ->name('experience-award.destroy');
    Route::delete('experience-community/{community}', 'Api\ExperienceController@destroyCommunity')
        ->where('community', '[0-9]+')
        ->middleware('can:delete,community')
        ->name('experience-community.destroy');

    Route::get('applicants/{applicant}/experience-skills', 'Api\ExperienceSkillsController@indexForApplicant')
        ->where('applicant', '[0-9]+')
        ->middleware('can:view,applicant')
        ->name('applicant.experience-skill.index');
    Route::post('experience-skills', 'Api\ExperienceSkillsController@store')
        ->middleware('can:create,App\Models\ExperienceSkill')
        ->name('experience-skill.store');
    Route::put('experience-skills/{experienceSkill}', 'Api\ExperienceSkillsController@update')
        ->where('experienceSkill', '[0-9]+')
        ->middleware('can:update,experienceSkill')
        ->name('experience-skill.update');
    Route::delete('experience-skills/{experienceSkill}', 'Api\ExperienceSkillsController@destroy')
        ->where('experienceSkill', '[0-9]+')
        ->middleware('can:delete,experienceSkill')
        ->name('experience-skill.destroy');

    Route::post('experience-skills/batch-store', 'Api\ExperienceSkillsController@batchStore')
        ->middleware('can:create,App\Models\ExperienceSkill')
        ->name('experience-skill.batch-store');
    Route::post('experience-skills/batch-update', 'Api\ExperienceSkillsController@batchUpdate')
        ->name('experience-skill.batch-update');
    Route::post('experience-skills/batch-destroy', 'Api\ExperienceSkillsController@batchDestroy')
        ->name('experience-skill.batch-destroy');


    Route::post('job-application-answers', 'Api\JobApplicationAnswerController@store')
        ->middleware('can:create,App\Models\JobApplicationAnswer')
        ->name('job-application-answers.store');
    Route::put('job-application-answers/{jobApplicationAnswer}', 'Api\JobApplicationAnswerController@update')
        ->where('jobApplicationAnswer', '[0-9]+')
        ->middleware('can:update,jobApplicationAnswer')
        ->name('job-application-answers.update');

    Route::get('classifications', 'Api\ClassificationController@index');
        //->middleware('can:view,application');

    Route::get('applicant/{applicant}/profile', 'Api\ApplicantController@getProfile')
        ->where('applicant', '[0-9]+')
        ->middleware('can:view,applicant')
        ->name('applicant.profile');
    Route::put('applicant/{applicant}/profile', 'Api\ApplicantController@updateProfile')
        ->where('applicant', '[0-9]+')
        ->middleware('can:update,applicant')
        ->name('applicant.profile.update');
});

Route::prefix('api/v2')->name('api.v2.')->group(function (): void {
    Route::get('applications/{application}', 'Api\ApplicationController@show')
        ->where('application', '[0-9]+')
        ->middleware('can:view,application')
        ->name('application.show');
    Route::get('applications/{application}/basic', 'Api\ApplicationController@getBasic')
        ->where('application', '[0-9]+')
        ->middleware('can:view,application')
        ->name('application.basic');
    Route::put('applications/{application}/basic', 'Api\ApplicationController@updateBasic')
        ->where('application', '[0-9]+')
        ->middleware('can:update,application')
        ->name('application.basic.update');
    Route::put('applications/{application}/submit', 'Api\ApplicationController@submit')
        ->where('application', '[0-9]+')
        ->middleware('can:update,application')
        ->name('application.submit');
    Route::get('jobs/{jobPoster}/applications', 'Api\ApplicationController@index')
        ->where('jobPoster', '[0-9]+')
        ->middleware('can:reviewApplicationsFor,jobPoster')
        ->name('jobs.applications');
    Route::put('applications/{application}/review', 'Api\ApplicationController@updateReview')
        ->where('application', '[0-9]+')
        ->middleware('can:review,application')
        ->name('application.review.update');
    Route::post('application-reviews/batch-update', 'Api\ApplicationReviewController@batchUpdate')
        ->name('application-reviews.batch-update');
    Route::get('applications/{application}/experience', 'Api\ExperienceController@indexForApplication')
        ->where('application', '[0-9]+')
        ->middleware('can:view,application')
        ->name('application.experience.index');
    Route::put(
        'applications/{application}/job-application-steps/{jobApplicationStep}',
        'Api\ApplicationController@touchStep'
    )
        ->middleware('can:view,application')
        ->name('job-application-step.update');
});