From 21566aeca31edf3b46026a4fc2fd9710b79e390b Mon Sep 17 00:00:00 2001
From: DarkGhostHunter <DarkGhostHunter@Gmail.com>
Date: Mon, 8 Jun 2020 03:32:55 -0400
Subject: [PATCH] Removed undocumented safe device from middleware.

---
 src/Http/Middleware/ConfirmTwoFactorCode.php  | 37 ++++---------------
 .../ConfirmTwoFactorEnabledTest.php           | 22 -----------
 2 files changed, 8 insertions(+), 51 deletions(-)

diff --git a/src/Http/Middleware/ConfirmTwoFactorCode.php b/src/Http/Middleware/ConfirmTwoFactorCode.php
index fef7d04..a3d7182 100644
--- a/src/Http/Middleware/ConfirmTwoFactorCode.php
+++ b/src/Http/Middleware/ConfirmTwoFactorCode.php
@@ -51,22 +51,17 @@ public function __construct(ResponseFactory $response, UrlGenerator $url, Authen
      * @param  \Illuminate\Http\Request  $request
      * @param  \Closure  $next
      * @param  string  $redirectToRoute
-     * @param  bool  $useSafeDevice
      * @return mixed
      */
-    public function handle($request, Closure $next, $redirectToRoute = '2fa.confirm', $useSafeDevice = false)
+    public function handle($request, Closure $next, $redirectToRoute = '2fa.confirm')
     {
-        if ($this->userHasTwoFactorEnabled()) {
-            if ($this->codeWasValidated($request) || $this->isSafeDevice($request, $useSafeDevice)) {
-                return $next($request);
-            }
-
-            return $request->expectsJson()
-                ? $this->response->json(['message' => trans('laraguard::messages.required')], 403)
-                : $this->response->redirectGuest($this->url->route($redirectToRoute));
+        if ($this->userHasNotEnabledTwoFactorAuth() || $this->codeWasValidated($request)) {
+            return $next($request);
         }
 
-        return $next($request);
+        return $request->expectsJson()
+            ? $this->response->json(['message' => trans('laraguard::messages.required')], 403)
+            : $this->response->redirectGuest($this->url->route($redirectToRoute));
     }
 
     /**
@@ -74,25 +69,9 @@ public function handle($request, Closure $next, $redirectToRoute = '2fa.confirm'
      *
      * @return bool
      */
-    protected function userHasTwoFactorEnabled()
+    protected function userHasNotEnabledTwoFactorAuth()
     {
-        return $this->user instanceof TwoFactorAuthenticatable && $this->user->hasTwoFactorEnabled();
-    }
-
-    /**
-     * Check if the current Request was made from a Safe Device.
-     *
-     * @param  \Illuminate\Http\Request  $request
-     * @param  string|bool  $useSafeDevice
-     * @return bool
-     */
-    protected function isSafeDevice($request, $useSafeDevice)
-    {
-        if ($useSafeDevice = filter_var($useSafeDevice, FILTER_VALIDATE_BOOLEAN)) {
-            return false;
-        }
-
-        return $this->user->isSafeDevice($request);
+        return ! ($this->user instanceof TwoFactorAuthenticatable && $this->user->hasTwoFactorEnabled());
     }
 
     /**
diff --git a/tests/Http/Middleware/ConfirmTwoFactorEnabledTest.php b/tests/Http/Middleware/ConfirmTwoFactorEnabledTest.php
index cf83a52..a27eefc 100644
--- a/tests/Http/Middleware/ConfirmTwoFactorEnabledTest.php
+++ b/tests/Http/Middleware/ConfirmTwoFactorEnabledTest.php
@@ -4,7 +4,6 @@
 
 use Tests\Stubs\UserStub;
 use Tests\RegistersPackage;
-use Illuminate\Http\Request;
 use Tests\CreatesTwoFactorUser;
 use Orchestra\Testbench\TestCase;
 use Tests\RunsPublishableMigrations;
@@ -147,25 +146,4 @@ public function test_routes_to_alternate_named_route()
         $this->get('intended_to_foo')
             ->assertRedirect('foo');
     }
-
-    public function test_bypasses_check_if_not_forced_and_using_safe_devices()
-    {
-        Date::setTestNow($now = Date::create(2020, 04, 01, 20, 20));
-
-        $this->app['router']->get('intended_forced', function () {
-            return 'ok';
-        })->name('intended')->middleware('web', 'auth', '2fa.confirm:2fa.confirm,false');
-
-        $this->actingAs($this->user);
-
-        $this->followingRedirects()
-            ->get('intended_forced')
-            ->assertViewIs('laraguard::confirm');
-
-        $this->user->addSafeDevice(new Request());
-
-        $this->followingRedirects()
-            ->get('intended_forced')
-            ->assertSee('ok');
-    }
 }
\ No newline at end of file