hasValidSignature()) { abort(401, 'Invalid signature'); } // user doesn't have password if (is_null($user->password)) { // route to create password form return view('auth.invited-onboarding', [ 'portfolio' => $portfolio, 'user' => $user ]); } // redirect user to portfolio return redirect(route('portfolio.show', ['portfolio' => $portfolio->id])); } }