fix: Access token middleware

app/Http/Kernel.php

@@ -19,15 +19,13 @@ class Kernel extends HttpKernel
         \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,
         Middleware\TrustProxies::class,
         Middleware\EncryptCookies::class,
-        Middleware\CookieJWTAuthenticator::class,
-        Middleware\ClearTokenOnUnauthorized::class,
+        Middleware\APILogin::class,
     ];
 
     protected $middlewareGroups = [
         'web' => [
             \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
             \Illuminate\Session\Middleware\StartSession::class,
-            \App\Http\Middleware\APILogin::class,
             \Illuminate\Session\Middleware\AuthenticateSession::class,
             \Illuminate\View\Middleware\ShareErrorsFromSession::class,
             \Illuminate\Routing\Middleware\SubstituteBindings::class,
@@ -37,7 +35,9 @@ class Kernel extends HttpKernel
         'api' => [
             'throttle:600,1',
             'bindings', 
-            \App\Http\Middleware\APILocalization::class
+            Middleware\CookieJWTAuthenticator::class,
+            Middleware\ClearTokenOnUnauthorized::class,
+            Middleware\APILocalization::class,
         ],
     ];
 

app/Http/Middleware/APILogin.php

@@ -3,6 +3,7 @@
 namespace App\Http\Middleware;
 
 use App\Models\AccessToken;
+use App\User;
 use Carbon\Carbon;
 use Closure;
 use Illuminate\Support\Facades\Auth;
@@ -40,7 +41,15 @@ public function handle($request, Closure $next)
                 'last_used_at' => Carbon::now()->toDateTimeString(),
                 'last_used_ip' => $request->ip(),
             ]);
-            Auth::loginUsingId($obj->user_id);
+
+            $token = auth('api')->login(User::find($obj->user_id));
+            if (! $token) {
+                return response()->json([
+                    'message' => 'Invalid token.',
+                ], 403);
+            }
+
+            $request->headers->set('Authorization', 'Bearer ' . $token);
         }
 
         return $next($request);