<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Symfony\Component\HttpFoundation\Response;

class ForceStaffTwoFactorMiddleware
{
    public function handle(Request $request, Closure $next): Response
    {
        if (! Auth::check() || ! setting('force_staff_2fa')) {
            return $next($request);
        }

        $user = $request->user();
        $urls = [
            'user/settings/two-factor',
            'user/settings/2fa-verify',
        ];

        if (($user->rank >= setting('min_staff_rank') && ! $user->two_factor_confirmed) && ! in_array(request()->path(), $urls)) {
            return to_route('settings.two-factor');
        }

        return $next($request);
    }
}