middleware('auth'). class AuthenticateMiddleware { public function handle($request, Closure $next) { if (empty($request->user)) { return response('unauthorized', 401); } return $next($request); } }