*/ public const GUARDED_ROUTES = [ 'passkey.registration-options', 'passkey.store', ]; public function __construct(private readonly SecurityConfirmation $confirmation) {} public function handle(Request $request, Closure $next): Response { if (! in_array($request->route()?->getName(), self::GUARDED_ROUTES, true)) { return $next($request); } $user = $request->user(); if (! $user instanceof User || app(UserImpersonation::class)->isActive() || ! $this->confirmation->isFresh($user)) { abort(403, __('Bitte bestätigen Sie zuerst Ihre Identität.')); } return $next($request); } }