require 2fa if enabled

2026-10-08 11:29:28 +02:00
parent f2b12c36af
commit b6e0ec539c
6 changed files with 40 additions and 15 deletions
@@ -5,15 +5,21 @@ namespace App\Actions\Teams;
 use App\Models\TeamInvite;
 use App\Models\User;
 use Illuminate\Support\Facades\DB;
+use Illuminate\Validation\ValidationException;

 readonly class AcceptTeamInvite
 {
-    public function __invoke(TeamInvite $invite): void
+    public function __invoke(TeamInvite $invite, User $newUser): void
    {
-        abort_unless(auth()->user()->email === $invite->invited_email, 403);
+        abort_unless($newUser->email === $invite->invited_email, 403);

        $team = $invite->team;
-        $newUser = User::whereEmail($invite->invited_email)->firstOrFail();
+
+        if ($invite->team->require_2fa && ! $newUser->hasEnabledTwoFactorAuthentication()) {
+            throw ValidationException::withMessages([
+                'require_2fa' => 'Du musst 2FA einrichten, damit du dem Team beitreten kannst',
+            ]);
+        }

        try {
            DB::transaction(function () use ($team, $newUser, $invite) {