21-11-2025

app/Http/Middleware/BasicAuthMiddleware.php

@@ -15,6 +15,19 @@ class BasicAuthMiddleware
      */
     public function handle(Request $request, Closure $next): Response
     {
+        // Skip Basic Auth für Livewire-Requests komplett
+        // Diese sind bereits durch Laravel Session/CSRF geschützt
+        $path = $request->path();
+
+        if (
+            str_starts_with($path, 'livewire/') ||
+            str_contains($path, '/livewire/') ||
+            $request->is('livewire/*') ||
+            $request->is('*/livewire/*')
+        ) {
+            return $next($request);
+        }
+
         // Credentials from .env file
         $user = config('auth.basic.user');
         $pass = config('auth.basic.password');

app/Http/Middleware/EnsurePartnerSetupCompleted.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class EnsurePartnerSetupCompleted
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        $user = $request->user();
+
+        // Wenn User keinen Partner hat, fortfahren
+        if (!$user || !$user->partner_id) {
+            return $next($request);
+        }
+
+        // Wenn User sich auf der Setup-Seite befindet (Route oder URL), fortfahren
+        if ($request->routeIs('partner.setup.wizard') || $request->is('partner/setup*')) {
+            return $next($request);
+        }
+
+        $partner = $user->partner;
+
+        // Wenn Setup bereits abgeschlossen ist, fortfahren
+        if ($partner && $partner->setup_completed) {
+            return $next($request);
+        }
+
+        // Ansonsten zum Setup-Wizard umleiten
+        return redirect()->route('partner.setup.wizard');
+    }
+}