ldc-crm/app/Http/Middleware/Authenticate.php

<?php

namespace App\Http\Middleware;

use App\Lib\Helper;
use App\Models\Service;
use Closure;
use Illuminate\Auth\Middleware\Authenticate as Middleware;

/**
 * Updated for ApiV2
 */
class Authenticate extends Middleware
{
    /**
     * Handle an incoming request.
     *
     * @param mixed    $request
     * @param \Closure $next
     * @param mixed    ...$guards
     * @return mixed
     *
     * @throws \Illuminate\Auth\AuthenticationException If authentification fails.
     */
    public function handle($request, Closure $next, ...$guards)
    {
        if (Helper::isRequestForApiV1($request)) {
            // @codeCoverageIgnoreStart
            // Use patched v1 Auth mecanism (without bearer reimplementation).
            $bearerToken = Helper::getBearerTokenFromRequest($request) ?? $request->api_token ?? '';
            $service     = Service::getFromBearerToken($bearerToken);
            $request->request->add(['brand_id' => $service->brand->id]);
            $response = $next($request);
            // @codeCoverageIgnoreEnd
        } else {
            // Use Laravel auth check mecanism.
            $response = \call_user_func_array(
                [$this, 'parent::' . __FUNCTION__],
                array_merge([$request, $next], $guards)
            );
        }

        return $response;
    }
    /**
     * Get the path the user should be redirected to when they are not authenticated.
     *
     * @param  mixed $request
     * @return string|null
     * @codeCoverageIgnore
     */
    protected function redirectTo($request)
    {
        if (! $request->expectsJson()) {
            return route('login');
        }
    }
}