Initial commit

app/Http/Middleware/ForceStaffTwoFactorMiddleware.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Symfony\Component\HttpFoundation\Response;
+
+class ForceStaffTwoFactorMiddleware
+{
+    public function handle(Request $request, Closure $next): Response
+    {
+        if (! Auth::check() || ! setting('force_staff_2fa')) {
+            return $next($request);
+        }
+
+        $user = $request->user();
+        $urls = [
+            'user/settings/two-factor',
+            'user/settings/2fa-verify',
+        ];
+
+        if (($user->rank >= setting('min_staff_rank') && ! $user->two_factor_confirmed) && ! in_array(request()->path(), $urls)) {
+            return to_route('settings.two-factor');
+        }
+
+        return $next($request);
+    }
+}