first commit

app/Http/Middleware/ForcePasswordChange.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Support\Authorization\PasswordChangeManager;
+use Closure;
+use Illuminate\Http\Request;
+
+class ForcePasswordChange
+{
+    public function __construct(private readonly PasswordChangeManager $forcePasswordChange) {}
+
+    /**
+     * Handle an incoming request.
+     *
+     * @param  Request  $request
+     * @return mixed
+     */
+    public function handle($request, Closure $next)
+    {
+        if (! $this->forcePasswordChange->isPasswordChangeForcedForUser($request->user())) {
+            return $next($request);
+        }
+
+        if (in_array($request->route()->getName(), ['profile', 'profile.update.login-details'])) {
+            return $next($request);
+        }
+
+        return $request->expectsJson() ?
+            abort(403, __('Before continuing please update your password and set a new one.')) :
+            redirect(route('profile'));
+    }
+}