feature: remove change password for admin

2026-07-08 13:45:23 +07:00
parent 6056e33ef8
commit 7d9ba527a3
5 changed files with 32 additions and 7 deletions
@@ -12,7 +12,7 @@ class ForceChangePasswordMiddleware
 {
    public function handle(Request $request, Closure $next): Response
    {
-        if (Auth::check() && Auth::user()->first_login == User::FIRST_LOGIN_TRUE) {
+        if (Auth::check() && Auth::user()->role != User::ROLE_ADMIN && Auth::user()->first_login == User::FIRST_LOGIN_TRUE) {
            if (!$request->routeIs('user.change_password') && !$request->routeIs('user.update_password') && !$request->routeIs('logout')) {
                return redirect()->route('user.change_password');
            }