refactor: use form requests in auth controllers, remove double hashing

This commit is contained in:
2026-03-19 23:14:52 +01:00
parent da97c45dd4
commit 44c1cbe5f6
5 changed files with 41 additions and 93 deletions

View File

@@ -3,8 +3,8 @@
namespace App\Http\Controllers\Auth;
use App\Http\Controllers\Controller;
use App\Http\Requests\Auth\ForgotPasswordRequest;
use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Password;
use Inertia\Inertia;
use Inertia\Response;
@@ -26,18 +26,10 @@ class ForgotPasswordController extends Controller
/**
* Handle an incoming password reset link request.
*/
public function store(Request $request): RedirectResponse
public function store(ForgotPasswordRequest $request): RedirectResponse
{
if (! config('auth-ui.features.password_reset')) {
abort(404);
}
$request->validate([
'email' => ['required', 'email'],
]);
$status = Password::sendResetLink(
$request->only('email')
$request->validated()
);
if ($status === Password::RESET_LINK_SENT) {