Require fork before submitting a challenge

Both submit and submitWithoutDeploy now return 422 if the user
hasn't forked the repository. Prevents submissions without
proper GitHub integration.

Author: icaroharry

app/Http/Controllers/ChallengeController.php

@@ -311,6 +311,10 @@ public function submit(Request $request, $slug)
             abort(400, 'Você já submeteu esse Mini Projeto');
         }
 
+        if (! $challengeUser->pivot->fork_url) {
+            abort(422, 'Você precisa fazer o fork do repositório antes de submeter.');
+        }
+
         // Check if the URL is not from a github repository
         if (Str::contains($validated['submission_url'], 'github.com')) {
             abort(
@@ -390,6 +394,11 @@ public function submitWithoutDeploy(Request $request, $slug)
             ->where('user_id', $request->user()->id)
             ->firstOrFail();
 
+        // Check if the user has forked
+        if (! $challengeUser->pivot->fork_url) {
+            abort(422, 'Você precisa fazer o fork do repositório antes de submeter.');
+        }
+
         // Check if the user has already submitted
         if ($challengeUser->pivot['submitted_at']) {
             abort(400, 'Você já submeteu esse Mini Projeto');

tests/Feature/ChallengeSubmissionTest.php

@@ -276,4 +276,42 @@ public function it_allows_marking_complete_after_submission(): void
             $challenge->users()->where('user_id', $user->id)->first()->pivot->completed
         );
     }
+
+    /** @test */
+    public function it_prevents_submit_without_fork(): void
+    {
+        Event::fake();
+        Mail::fake();
+        $this->mockAllExternalServices();
+
+        $user = User::factory()->create();
+        $challenge = Challenge::factory()->create(['status' => 'published']);
+        $challenge->users()->attach($user->id);
+
+        $response = $this->signIn($user)
+            ->postJson("/api/challenges/{$challenge->slug}/submit", [
+                'submission_url' => 'https://example.com',
+            ]);
+
+        $response->assertStatus(422);
+    }
+
+    /** @test */
+    public function it_prevents_submit_without_deploy_without_fork(): void
+    {
+        Event::fake();
+        Mail::fake();
+        $this->mockAllExternalServices();
+
+        $user = User::factory()->create();
+        $challenge = Challenge::factory()->create(['status' => 'published']);
+        $challenge->users()->attach($user->id);
+
+        $response = $this->signIn($user)
+            ->postJson("/api/challenges/{$challenge->slug}/submit-without-deploy", [
+                'submission_image' => \Illuminate\Http\UploadedFile::fake()->image('screenshot.png'),
+            ]);
+
+        $response->assertStatus(422);
+    }
 }