Authentication.php

public function handle($request, Closure $next, $guard = null)
    {
        if ($this->auth->guard($guard)->guest()) {
            //return response('Unauthorized.', 401);
            if ($request->has('api_token')) {
                $token = $request->input('api_token');
                $check_token = User::where('api_token', $token)->first();
                if ($check_token == null) {
                    $res['success'] = false;
                    $res['message'] = 'Permission not allowed!';
                    return response($res);
                }
            }else{
                $res['success'] = false;
                $res['message'] = 'Login please!';
                return response($res);
            }
        }
        return $next($request);
    }



LoginController.php

public function login(Request $request)
    {
        $email=$request->input('email');
        $password=$request->input('password');
        $user=User::where('email',$email)->first();

        if($user!=null){
            if(Hash::check($password,$user->password)){
                $apiToken=base64_encode(str_random(10));
                $user->update([
                    'api_token'=>$apiToken
                ]);

                return response()->json([
                    'success'=> true,
                    'message'=>'Login success',
                    'data'=>[
                        'user'=>$user,
                        'api_token'=>$apiToken
                    ]
                ],201);
            }else{
                return response()->json([
                    'success'=>false,
                    'message'=>'Login fail, wrong password',
                    'data'
                ],401);
            }
        }else{
            return response()->json([
                'success'=>false,
                'message'=>'Login fail, email not registered',
                'data'
            ],401);
        }
    }