12-05-2026 Frontend dev

app/Http/Controllers/Auth/MagicLinkConsumeController.php

@@ -0,0 +1,52 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Models\MagicLink;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+
+class MagicLinkConsumeController extends Controller
+{
+    public function __invoke(Request $request, string $token): RedirectResponse
+    {
+        $magicLink = MagicLink::query()
+            ->with('user')
+            ->where('token_hash', hash('sha256', $token))
+            ->where('purpose', 'login')
+            ->first();
+
+        if (! $magicLink || ! $magicLink->user) {
+            return redirect()->route('login')->with('status', __('The magic login link is invalid.'));
+        }
+
+        if ($magicLink->consumed_at !== null || $magicLink->expires_at->isPast()) {
+            return redirect()->route('login')->with('status', __('The magic login link has expired or was already used.'));
+        }
+
+        if (! $magicLink->user->is_active) {
+            return redirect()->route('login')->with('status', __('Your account is not active.'));
+        }
+
+        $magicLink->update([
+            'consumed_at' => now(),
+            'ip_consumed' => $request->ip(),
+        ]);
+
+        $magicLink->user->update([
+            'last_login_at' => now(),
+            'last_login_ip' => $request->ip(),
+        ]);
+
+        Auth::guard('web')->login($magicLink->user);
+        $request->session()->regenerate();
+
+        $home = $magicLink->user->canAccessAdmin()
+            ? route('dashboard', absolute: false)
+            : route('me.dashboard', absolute: false);
+
+        return redirect()->intended($home);
+    }
+}

app/Http/Controllers/Auth/VerifyEmailController.php

@@ -4,6 +4,7 @@ namespace App\Http\Controllers\Auth;
 
 use App\Http\Controllers\Controller;
 use Illuminate\Auth\Events\Verified;
+use Illuminate\Contracts\Auth\MustVerifyEmail;
 use Illuminate\Foundation\Auth\EmailVerificationRequest;
 use Illuminate\Http\RedirectResponse;
 
@@ -14,17 +15,21 @@ class VerifyEmailController extends Controller
      */
     public function __invoke(EmailVerificationRequest $request): RedirectResponse
     {
+        $home = $request->user()->canAccessAdmin()
+            ? route('dashboard', absolute: false)
+            : route('me.dashboard', absolute: false);
+
         if ($request->user()->hasVerifiedEmail()) {
-            return redirect()->intended(route('dashboard', absolute: false).'?verified=1');
+            return redirect()->intended($home.'?verified=1');
         }
 
         if ($request->user()->markEmailAsVerified()) {
-            /** @var \Illuminate\Contracts\Auth\MustVerifyEmail $user */
+            /** @var MustVerifyEmail $user */
             $user = $request->user();
 
             event(new Verified($user));
         }
 
-        return redirect()->intended(route('dashboard', absolute: false).'?verified=1');
+        return redirect()->intended($home.'?verified=1');
     }
 }