ladill-frontdesk/app/Http/Middleware/AuthenticateFrontdeskDevice.php

<?php

namespace App\Http\Middleware;

use App\Services\Frontdesk\DeviceService;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;

class AuthenticateFrontdeskDevice
{
    public function __construct(
        protected DeviceService $devices,
    ) {}

    public function handle(Request $request, Closure $next, string $type = 'kiosk'): Response
    {
        $token = $request->route('token') ?? $request->header('X-Device-Token');

        abort_unless(is_string($token) && $token !== '', 404);

        $device = $this->devices->findByToken($token);

        abort_unless($device && $device->type === $type, 404);

        $this->devices->recordHeartbeat($device);

        $request->attributes->set('frontdesk.device', $device->fresh());

        return $next($request);
    }
}