<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Symfony\Component\HttpFoundation\Response;

class ForceStaffTwoFactorMiddleware
{
    public function handle(Request $request, Closure $next): Response
    {
        if (! Auth::check() || ! setting('force_staff_2fa')) {
            return $next($request);
        }

        $user = $request->user();
        $allowedRoutes = [
            'settings.two-factor',
            'two-factor.verify',
        ];

        if (($user->rank >= setting('min_staff_rank', config('habbo.defaults.min_staff_rank')) && ! $user->two_factor_confirmed) && ! in_array(request()->route()?->getName(), $allowedRoutes)) {
            return to_route('settings.two-factor');
        }

        return $next($request);
    }
}