fix: 🐛 remove auth middleware from email verification

This commit is contained in:
Corentin Huet 2026-04-10 11:25:09 +02:00
parent 25ecbca185
commit 087a2c08fb

View file

@ -28,7 +28,7 @@ class VerificationController extends Controller
*/
public function __construct()
{
$this->middleware('auth:frontend');
$this->middleware('auth:frontend')->except('verify');
$this->middleware('signed')->only('verify');
$this->middleware('throttle:6,1')->only('verify', 'resend');
}
@ -58,7 +58,7 @@ class VerificationController extends Controller
public function verify(Request $request): JsonResponse|RedirectResponse
{
/** @var \App\Models\Customer */
$user = $request->user('frontend');
$user = Customer::findOrFail($request->route('id'));
if (!hash_equals((string) $request->route('id'), (string) $user->getKey())) {
throw new AuthorizationException();