feat: add two-factor authentication support and related configurations

app/Http/Controllers/Auth/LoginController.php

@@ -5,6 +5,7 @@ namespace App\Http\Controllers\Auth;
 use App\Http\Controllers\Controller;
 use App\Http\Requests\Auth\LoginRequest;
 use App\Models\User;
+use App\Services\Auth\TwoFactorChallenge;
 use Illuminate\Http\RedirectResponse;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
@@ -25,26 +26,42 @@ class LoginController extends Controller
     /**
      * Handle an incoming authentication request.
      */
-    public function store(LoginRequest $request): RedirectResponse
+    public function store(LoginRequest $request, TwoFactorChallenge $twoFactor): RedirectResponse
     {
         $login = $request->validated('login');
         $password = $request->validated('password');
 
         $isEmail = filter_var($login, FILTER_VALIDATE_EMAIL);
-        $credentials = $isEmail
-            ? ['email' => $login, 'password' => $password]
-            : ['email' => User::whereRaw('LOWER(username) = ?', [strtolower($login)])->value('email'), 'password' => $password];
+        $email = $isEmail
+            ? $login
+            : User::whereRaw('LOWER(username) = ?', [strtolower($login)])->value('email');
+        $credentials = ['email' => $email, 'password' => $password];
 
         $remember = config('auth-ui.features.remember_me')
             ? $request->boolean('remember')
             : false;
 
-        if (! $credentials['email'] || ! Auth::attempt($credentials, $remember)) {
+        $provider = Auth::getProvider();
+        $user = $credentials['email']
+            ? $provider->retrieveByCredentials($credentials)
+            : null;
+
+        if (! $user || ! $provider->validateCredentials($user, $credentials)) {
             throw ValidationException::withMessages([
                 'login' => __('auth.failed'),
             ]);
         }
 
+        if (config('hashing.rehash_on_login', true)
+            && method_exists($provider, 'rehashPasswordIfRequired')) {
+            $provider->rehashPasswordIfRequired($user, $credentials);
+        }
+
+        if ($twoFactor->requiredFor($user)) {
+            return $twoFactor->begin($request, $user, $remember);
+        }
+
+        Auth::login($user, $remember);
         $request->session()->regenerate();
 
         return redirect()->intended(config('auth-ui.redirects.login', '/'));