fix(auth): isolate password reset flows by application role

2026-09-04 14:17:27 -03:00
parent 99594b17e7
commit 75152b53a4
5 changed files with 20 additions and 9 deletions
--- a/app/Domains/Auth/routes/scanner.php
+++ b/app/Domains/Auth/routes/scanner.php
@@ -12,8 +12,10 @@ Route::prefix('v1/scanner')->group(function (): void {
    Route::post('password/reset-attempts', CreateScannerResetPasswordAttemptController::class)
        ->middleware('throttle:5,1');
    Route::post('password/reset-attempts/validate', ValidateResetPasswordAttemptController::class)
+        ->defaults('reset_role', 'scanner')
        ->middleware('throttle:10,1');
    Route::post('password/reset', ResetPasswordController::class)
+        ->defaults('reset_role', 'scanner')
        ->middleware('throttle:5,1');
    Route::middleware(['auth:sanctum', 'scanner.tenant'])
        ->get('me', ScannerMeController::class);