$user = User::query()->findOrFail($userId);
+ $this->setPageTitle(trans('settings.user_api_token_create'));
+
return view('users.api-tokens.create', [
'user' => $user,
'back' => $this->getRedirectPath($user),
[$user, $token] = $this->checkPermissionAndFetchUserToken($userId, $tokenId);
$secret = session()->pull('api-token-secret:' . $token->id, null);
+ $this->setPageTitle(trans('settings.user_api_token'));
+
return view('users.api-tokens.edit', [
'user' => $user,
'token' => $token,
{
[$user, $token] = $this->checkPermissionAndFetchUserToken($userId, $tokenId);
+ $this->setPageTitle(trans('settings.user_api_token_delete'));
+
return view('users.api-tokens.delete', [
'user' => $user,
'token' => $token,
protected function getRedirectPath(User $relatedUser): string
{
$context = session()->get('api-token-context');
- if ($context === 'settings') {
+ if ($context === 'settings' || user()->id !== $relatedUser->id) {
return $relatedUser->getEditUrl('#api_tokens');
}