Refine forced password change flow
This commit is contained in:
@@ -25,14 +25,19 @@ class RequirePasswordChange
|
||||
'logout',
|
||||
'password.confirm',
|
||||
'password.confirm.*',
|
||||
'password.force-change.edit',
|
||||
'security.edit',
|
||||
'user-password.update',
|
||||
])) {
|
||||
return $next($request);
|
||||
}
|
||||
|
||||
if ($request->isMethod('get') && ! $request->expectsJson()) {
|
||||
$request->session()->put('url.intended', $request->fullUrl());
|
||||
}
|
||||
|
||||
return redirect()
|
||||
->route('security.edit')
|
||||
->route('password.force-change.edit')
|
||||
->with('status', 'You must change your password before continuing.');
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user