2fa: protect all user routes

NottingHack · May 21, 2019 · 75af8c7 · 75af8c7
1 parent ee591e1
commit 75af8c7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/routes/web.php b/routes/web.php
@@ -54,7 +54,7 @@
 });
 
 // Routes in the following group can only be access once logged-in
-Route::middleware(['auth'])->group(function () {
+Route::middleware(['auth', '2fa'])->group(function () {
     Route::view('registration-complete', 'pages.registrationComplete')->name('registrationComplete');
 
     // Users (show, edit, update) to allow users to update there email if they can't verify it