adjust redirect

src/Http/Controllers/TwoFactorAuthenticatedSessionController.php

@@ -3,6 +3,7 @@
 namespace Laravel\Fortify\Http\Controllers;
 
 use Illuminate\Contracts\Auth\StatefulGuard;
+use Illuminate\Http\Exceptions\HttpResponseException;
 use Illuminate\Routing\Controller;
 use Laravel\Fortify\Contracts\FailedTwoFactorLoginResponse;
 use Laravel\Fortify\Contracts\TwoFactorChallengeViewResponse;
@@ -33,12 +34,12 @@ public function __construct(StatefulGuard $guard)
      * Show the two factor authentication challenge view.
      *
      * @param  \Laravel\Fortify\Http\Requests\TwoFactorLoginRequest  $request
-     * @return \Laravel\Fortify\Contracts\TwoFactorChallengeViewResponse|\Illuminate\Http\RedirectResponse
+     * @return \Laravel\Fortify\Contracts\TwoFactorChallengeViewResponse
      */
-    public function create(TwoFactorLoginRequest $request)
+    public function create(TwoFactorLoginRequest $request): TwoFactorChallengeViewResponse
     {
         if (! $request->hasChallengedUser()) {
-            return redirect()->route('login');
+            throw new HttpResponseException(redirect()->route('login'));
         }
 
         return app(TwoFactorChallengeViewResponse::class);

src/Http/Requests/TwoFactorLoginRequest.php

@@ -75,6 +75,22 @@ public function validRecoveryCode()
         });
     }
 
+    /**
+     * Determine if there is a challenged user in the current session.
+     *
+     * @return bool
+     */
+    public function hasChallengedUser()
+    {
+        try {
+            $user = $this->challengedUser();
+        } catch (HttpResponseException $e) {
+            return false;
+        }
+
+        return $user !== null;
+    }
+
     /**
      * Get the user that is attempting the two factor challenge.
      *
@@ -98,22 +114,6 @@ public function challengedUser()
         return $this->challengedUser = $user;
     }
 
-    /**
-     * Determine if there's a challenged user in the current session.
-     *
-     * @return bool
-     */
-    public function hasChallengedUser()
-    {
-        try {
-            $user = $this->challengedUser();
-        } catch (HttpResponseException $e) {
-            return false;
-        }
-
-        return $user !== null;
-    }
-
     /**
      * Determine if the user wanted to be remembered after login.
      *