feat(auth): harden authentication and add configurable two-factor support

app/Http/Controllers/Auth/RegisterController.php

@@ -5,6 +5,8 @@ namespace App\Http\Controllers\Auth;
 use App\Http\Controllers\Controller;
 use App\Http\Requests\Auth\RegisterRequest;
 use App\Models\User;
+use App\Services\Auth\SecurityEventRecorder;
+use App\Services\Auth\TwoFactorChallenge;
 use Illuminate\Auth\Events\Registered;
 use Illuminate\Http\RedirectResponse;
 use Illuminate\Support\Facades\Auth;
@@ -28,8 +30,11 @@ class RegisterController extends Controller
     /**
      * Handle an incoming registration request.
      */
-    public function store(RegisterRequest $request): RedirectResponse
-    {
+    public function store(
+        RegisterRequest $request,
+        TwoFactorChallenge $twoFactor,
+        SecurityEventRecorder $securityEvents
+    ): RedirectResponse {
         $validated = $request->validated();
 
         $user = User::create([
@@ -43,11 +48,22 @@ class RegisterController extends Controller
         event(new Registered($user));
 
         Auth::login($user);
+        $request->session()->regenerate();
+        $securityEvents->record('registration.completed', $user, $request);
 
         if (config('auth-ui.features.email_verification')) {
             return redirect()->route('verification.notice');
         }
 
+        if ($twoFactor->enrollmentRequiredFor($user)) {
+            $request->session()->put(
+                'url.intended',
+                config('auth-ui.redirects.register', '/')
+            );
+
+            return redirect()->route('two-factor.setup');
+        }
+
         return redirect(config('auth-ui.redirects.register', '/'));
     }
 }