tymon/jwt-auth. Token via Authorization: Bearer. Expiry: now + 1 month (User::getJWTCustomClaims).
| Route prefix | Middleware |
|---|---|
| v1/auth/* | Public auth + jwt.verify for me/logout |
| Company routes | jwt.verify, checkType:company, ensure.company.user |
| Customer routes | jwt.verify, checkType:customer, ensure.customer.user, check.user.active.status |
| Driver routes | jwt.verify, checkType:driver, ensure.driver.user, check.user.active.status |
| Admin | jwt.verify, admin |