<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;

class CheckSanctumToken
{
    public function handle(Request $request, Closure $next)
    {
        // Check if the token exists in the Authorization header
        if (!$request->bearerToken()) {
            return response()->json([
                'message' => 'Token is missing.',
            ], Response::HTTP_UNAUTHORIZED);
        }

        // Check if the token is valid for a Sanctum user
        if (!$request->user('sanctum')) {
            return response()->json([
                'message' => 'Token is invalid.',
            ], Response::HTTP_UNAUTHORIZED);
        }

        return $next($request);
    }
}