fix(auth): isolate password reset flows by application role

2026-09-04 14:17:27 -03:00
parent 99594b17e7
commit 75152b53a4
5 changed files with 20 additions and 9 deletions
--- a/app/Domains/Auth/routes/adminapp.php
+++ b/app/Domains/Auth/routes/adminapp.php
@@ -12,8 +12,10 @@ Route::prefix('v1/adminapp')->group(function (): void {
    Route::post('password/reset-attempts', CreateAdminAppResetPasswordAttemptController::class)
        ->middleware('throttle:5,1');
    Route::post('password/reset-attempts/validate', ValidateResetPasswordAttemptController::class)
+        ->defaults('reset_role', 'adminapp')
        ->middleware('throttle:10,1');
    Route::post('password/reset', ResetPasswordController::class)
+        ->defaults('reset_role', 'adminapp')
        ->middleware('throttle:5,1');
    Route::middleware(['auth:sanctum', 'adminapp.tenant'])
        ->get('me', AdminAppMeController::class);