Fix team authorization, invite revocation, and slug handling

app/Http/Requests/StoreTeamRequest.php

@@ -5,6 +5,7 @@ namespace App\Http\Requests;
 use Illuminate\Contracts\Validation\ValidationRule;
 use Illuminate\Foundation\Http\FormRequest;
 use Illuminate\Support\Str;
+use Illuminate\Validation\Rule;
 
 class StoreTeamRequest extends FormRequest
 {
@@ -17,7 +18,7 @@ class StoreTeamRequest extends FormRequest
     {
         return [
             'name' => ['required', 'string', 'max:255'],
-            'slug' => ['required', 'string', 'max:255', 'unique:teams,slug'],
+            'slug' => ['required', 'string', 'max:255', Rule::notIn(['create']), Rule::unique('teams', 'slug')],
             'require_2fa' => ['required', 'boolean'],
         ];
     }
@@ -25,9 +26,8 @@ class StoreTeamRequest extends FormRequest
     public function messages(): array
     {
         return [
-            'slug.string' => '',
-            'slug.required' => '',
-            'slug.max' => '',
+            'slug.required' => 'The name must contain letters or numbers.',
+            'slug.not_in' => 'This name is reserved.',
             'slug.unique' => 'The name has already been taken.',
         ];
     }
@@ -35,7 +35,7 @@ class StoreTeamRequest extends FormRequest
     protected function prepareForValidation(): void
     {
         $this->merge([
-            'slug' => Str::slug($this->name),
+            'slug' => is_string($this->input('name')) ? Str::slug($this->input('name')) : null,
         ]);
     }
 }