From 3b01190bc2485cb1921925176f38a14fa597b550 Mon Sep 17 00:00:00 2001 From: David Bomba Date: Tue, 11 May 2021 14:57:36 +1000 Subject: [PATCH] Return error when the user isn't attached to a company --- app/Http/Controllers/Auth/LoginController.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/app/Http/Controllers/Auth/LoginController.php b/app/Http/Controllers/Auth/LoginController.php index 4d45cb8520a7..9d44665779d0 100644 --- a/app/Http/Controllers/Auth/LoginController.php +++ b/app/Http/Controllers/Auth/LoginController.php @@ -207,6 +207,9 @@ class LoginController extends BaseController $cu = CompanyUser::query() ->where('user_id', auth()->user()->id); + if(!$cu->exists()) + return response()->json(['message' => 'User not linked to any companies'], 403); + $cu->first()->account->companies->each(function ($company) use($cu, $request){ if($company->tokens()->where('is_system', true)->count() == 0)