From 9d828633646ef8c3d88701692ad5acd643524481 Mon Sep 17 00:00:00 2001 From: Jeremy Angele Date: Sun, 27 Oct 2024 20:07:37 +0100 Subject: [PATCH] Add authorization for force-password-resets --- app/Livewire/ForcePasswordReset.php | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/app/Livewire/ForcePasswordReset.php b/app/Livewire/ForcePasswordReset.php index a732ef1c9..73ce5bcc0 100644 --- a/app/Livewire/ForcePasswordReset.php +++ b/app/Livewire/ForcePasswordReset.php @@ -24,6 +24,9 @@ class ForcePasswordReset extends Component public function mount() { + if (auth()->user()->force_password_reset === false) { + return redirect()->route('dashboard'); + } $this->email = auth()->user()->email; } @@ -34,6 +37,10 @@ class ForcePasswordReset extends Component public function submit() { + if (auth()->user()->force_password_reset === false) { + return redirect()->route('dashboard'); + } + try { $this->rateLimit(10); $this->validate();