feat(auth): harden authentication and add configurable two-factor support

app/Http/Controllers/ProfileController.php

@@ -3,38 +3,25 @@
 namespace App\Http\Controllers;
 
 use App\Models\User;
+use App\Services\Auth\TwoFactorEnrollmentState;
 use Illuminate\Http\Request;
 use Inertia\Inertia;
 use Inertia\Response;
-use Laravel\Fortify\Fortify;
 
 class ProfileController extends Controller
 {
     /**
      * Display the authenticated user's profile and security settings.
      */
-    public function __invoke(Request $request): Response
-    {
+    public function __invoke(
+        Request $request,
+        TwoFactorEnrollmentState $enrollmentState
+    ): Response {
         /** @var User $user */
         $user = $request->user();
-        $available = (bool) config('auth-ui.features.two_factor');
-        $pending = $available
-            && filled($user->two_factor_secret)
-            && ! $user->hasEnabledTwoFactorAuthentication();
 
         return Inertia::render('Profile/Show', [
-            'twoFactor' => [
-                'available' => $available,
-                'enabled' => $available && $user->hasEnabledTwoFactorAuthentication(),
-                'pending' => $pending,
-                'requiresPassword' => $user->hasPassword(),
-                'qrCodeDataUri' => $pending
-                    ? 'data:image/svg+xml;base64,'.base64_encode($user->twoFactorQrCodeSvg())
-                    : null,
-                'secretKey' => $pending
-                    ? Fortify::currentEncrypter()->decrypt($user->two_factor_secret)
-                    : null,
-            ],
+            'twoFactor' => $enrollmentState->for($user),
         ]);
     }
 }