<?php

namespace App\Http\Middleware;

use Closure;
use App\User;

class SecretTokenMiddleware
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        // dd($request->route('local'), $request->header('secret'), $request->bearerToken());
        $secret = '3563f62d0cdb88eff401907c36d6b9e1';
        if(!$request->hasHeader('secret') || $secret != $request->header('secret')){
            return response()->json(['message' => 'Unauthenticated', 'status' => 401], 401);
        }
        // update last seen
//        $token = $request->bearerToken();
//        $user = User::where('api_token', $token)->first();
        // set Last Seen time
//        if($user){
//            $user->last_seen_at = now();
//            $user->save();
//        }
        // dd($user->toArray());
        return $next($request);
    }
}
