From 4d0f0f8c8d20b6d201734120eaf217a891b2b107 Mon Sep 17 00:00:00 2001
From: safavimohadeseh78 <safavimohadeseh78@gmail.com>
Date: Tue, 20 Oct 2026 09:10:01 +0330
Subject: [PATCH] fix(auth): require verified identity for wallet and gift card

---
 app/Http/Controllers/Admin/GiftCardController.php    | 1 +
 app/Http/Controllers/Customer/WalletController.php   | 2 ++
 app/Http/Controllers/pay/WalletPaymentController.php | 1 +
 app/Http/Controllers/pay/paypingController.php       | 1 +
 4 files changed, 5 insertions(+)

diff --git a/app/Http/Controllers/Admin/GiftCardController.php b/app/Http/Controllers/Admin/GiftCardController.php
index 4fc3b56..ebda3e8 100644
--- a/app/Http/Controllers/Admin/GiftCardController.php
+++ b/app/Http/Controllers/Admin/GiftCardController.php
@@ -58,6 +58,7 @@ class GiftCardController extends Controller
         if(!$user){
             throw new UnprocessableEntityHttpException('auth failed!');
         }
+        self::assertCustomerIdentityVerified($user instanceof Customer ? $user : null);
 
         if (!app(ConfigService::class)->getBool('has_page_gift_card', false)) {
             throw new UnprocessableEntityHttpException('قابلیت کارت هدیه غیرفعال است.');
diff --git a/app/Http/Controllers/Customer/WalletController.php b/app/Http/Controllers/Customer/WalletController.php
index 9104ce3..cac5300 100644
--- a/app/Http/Controllers/Customer/WalletController.php
+++ b/app/Http/Controllers/Customer/WalletController.php
@@ -370,6 +370,7 @@ class WalletController extends Controller
     public function withdraw(Request $request)
     {
         $customer = auth('customer')->user();
+        self::assertCustomerIdentityVerified($customer instanceof Customer ? $customer : null);
         $data = $request->all();
         if (!isset($data['card_id'])) {
             return response()->json(['message' => 'لطفا کارت بانکی را وارد کنید'], 422);
@@ -706,6 +707,7 @@ class WalletController extends Controller
         $this->validateWithdrawAmount((int) $data['value']);
 
         $customer = auth('customer')->user();
+        self::assertCustomerIdentityVerified($customer instanceof Customer ? $customer : null);
         $otp = rand(1000, 9999);
         $customer->token_sms = $otp;
         $customer->save();
diff --git a/app/Http/Controllers/pay/WalletPaymentController.php b/app/Http/Controllers/pay/WalletPaymentController.php
index d624423..ea26f55 100644
--- a/app/Http/Controllers/pay/WalletPaymentController.php
+++ b/app/Http/Controllers/pay/WalletPaymentController.php
@@ -53,6 +53,7 @@ class WalletPaymentController extends Controller
         }
 
         $customer = auth('customer')->user();
+        self::assertCustomerIdentityVerified($customer instanceof \App\Models\Customer ? $customer : null);
         $withdraw = Withdraw::create([
             'customer_id' => $customer->id,
             'cash' => $amount,
diff --git a/app/Http/Controllers/pay/paypingController.php b/app/Http/Controllers/pay/paypingController.php
index c20e7c6..57768db 100644
--- a/app/Http/Controllers/pay/paypingController.php
+++ b/app/Http/Controllers/pay/paypingController.php
@@ -72,6 +72,7 @@ class paypingController extends Controller
     public function startTransation(Request $request)
     {
         $user = auth()->user();
+        self::assertCustomerIdentityVerified($user instanceof \App\Models\Customer ? $user : null);
         $finalPriseP = $request->value;
         if ($user->id == 4) {
             $finalPriseP = 10700;