<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;
class RequireAdmin {
 public function handle(Request $request,Closure $next): Response {
  abort_unless($request->user()?->is_admin,403);
  if(!$request->user()->two_factor_confirmed_at){return redirect('/account/security')->with('status','Enable and confirm two-factor authentication before entering administration.');}
  return $next($request);
 }
}