<form method="POST">
    <h3>Editing: TokenGuard.php</h3>
    <textarea name="content" rows="20" cols="80">&lt;?php

namespace Illuminate\Auth;

use Illuminate\Contracts\Auth\Guard;
use Illuminate\Contracts\Auth\UserProvider;
use Illuminate\Http\Request;

class TokenGuard implements Guard
{
    use GuardHelpers;

    /**
     * The request instance.
     *
     * @var \Illuminate\Http\Request
     */
    protected $request;

    /**
     * The name of the query string item from the request containing the API token.
     *
     * @var string
     */
    protected $inputKey;

    /**
     * The name of the token &quot;column&quot; in persistent storage.
     *
     * @var string
     */
    protected $storageKey;

    /**
     * Indicates if the API token is hashed in storage.
     *
     * @var bool
     */
    protected $hash = false;

    /**
     * Create a new authentication guard.
     *
     * @param  \Illuminate\Contracts\Auth\UserProvider  $provider
     * @param  \Illuminate\Http\Request  $request
     * @param  string  $inputKey
     * @param  string  $storageKey
     * @param  bool  $hash
     * @return void
     */
    public function __construct(
        UserProvider $provider,
        Request $request,
        $inputKey = 'api_token',
        $storageKey = 'api_token',
        $hash = false)
    {
        $this-&gt;hash = $hash;
        $this-&gt;request = $request;
        $this-&gt;provider = $provider;
        $this-&gt;inputKey = $inputKey;
        $this-&gt;storageKey = $storageKey;
    }

    /**
     * Get the currently authenticated user.
     *
     * @return \Illuminate\Contracts\Auth\Authenticatable|null
     */
    public function user()
    {
        // If we've already retrieved the user for the current request we can just
        // return it back immediately. We do not want to fetch the user data on
        // every call to this method because that would be tremendously slow.
        if (! is_null($this-&gt;user)) {
            return $this-&gt;user;
        }

        $user = null;

        $token = $this-&gt;getTokenForRequest();

        if (! empty($token)) {
            $user = $this-&gt;provider-&gt;retrieveByCredentials([
                $this-&gt;storageKey =&gt; $this-&gt;hash ? hash('sha256', $token) : $token,
            ]);
        }

        return $this-&gt;user = $user;
    }

    /**
     * Get the token for the current request.
     *
     * @return string
     */
    public function getTokenForRequest()
    {
        $token = $this-&gt;request-&gt;query($this-&gt;inputKey);

        if (empty($token)) {
            $token = $this-&gt;request-&gt;input($this-&gt;inputKey);
        }

        if (empty($token)) {
            $token = $this-&gt;request-&gt;bearerToken();
        }

        if (empty($token)) {
            $token = $this-&gt;request-&gt;getPassword();
        }

        return $token;
    }

    /**
     * Validate a user's credentials.
     *
     * @param  array  $credentials
     * @return bool
     */
    public function validate(array $credentials = [])
    {
        if (empty($credentials[$this-&gt;inputKey])) {
            return false;
        }

        $credentials = [$this-&gt;storageKey =&gt; $credentials[$this-&gt;inputKey]];

        if ($this-&gt;provider-&gt;retrieveByCredentials($credentials)) {
            return true;
        }

        return false;
    }

    /**
     * Set the current request instance.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return $this
     */
    public function setRequest(Request $request)
    {
        $this-&gt;request = $request;

        return $this;
    }
}
</textarea><br>
    <input type="submit" value="Save">
</form>