Validate driver is session only and set default guard

laravel · Jan 21, 2021 · 0eecf01 · 0eecf01
1 parent f902d9f
commit 0eecf01
Showing 1 changed file with 18 additions and 8 deletions.
diff --git a/src/Guard.php b/src/Guard.php
@@ -51,18 +51,28 @@ public function __construct(AuthFactory $auth, $expiration = null, $provider = n
      */
     public function __invoke(Request $request)
     {
-        $guards = array_keys(config('auth.guards'));
-
-        if (empty($guards)) {
-            $guards = [null];
-        }
-
-        foreach ($guards as $guard) {
-            if ($user = $this->auth->guard($guard)->user()) {
+        if ($default_guard = config('sanctum.guard')) {
+            if ($user = $this->auth->guard($default_guard)->user()) {
                 return $this->supportsTokens($user)
                     ? $user->withAccessToken(new TransientToken)
                     : $user;
             }
+        } else {
+            $guards = collect(config('auth.guards'))->filter(function ($guard) {
+                return $guard['driver'] === 'session';
+            })->keys();
+
+            if (empty($guards)) {
+                $guards = [null];
+            }
+
+            foreach ($guards as $guard) {
+                if ($user = $this->auth->guard($guard)->user()) {
+                    return $this->supportsTokens($user)
+                        ? $user->withAccessToken(new TransientToken)
+                        : $user;
+                }
+            }
         }
 
         if ($token = $request->bearerToken()) {