<?php

namespace App\Http\Middleware;

use Closure;

class ApiGuard
{
    public function handle($request, Closure $next)
    {
        if (auth()->check()) {
            $user  = auth()->user();
            $token = $request->bearerToken();

            if (!$user->jwt_token || $user->jwt_token !== $token) {
                return response()->json([
                    'error' => 'logged_in_from_another_device'
                ], 401);
            }
        }

        return $next($request);
    }
}