<?php

namespace App\Http\Middleware;

use Closure;

class ApiToken
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
    
        $public_key = $request->header('Public-Key');
        $private_key = $request->header('Private-Key');

        if(!$public_key || $public_key != 'bBSUGJGKL4XXQgFc9pZ8DOKYRZke54dSqA2cL2TC' 
            && !$private_key || $private_key != 'u1lDx7obzsNBGpHQ6Psm8sVeO6nwsdqHZpjxT0Jn'){
            return response()->json([
                'response' => [
                    'msg' => 'token mismatch',
                ]
            ]);
        }
        return $next($request);
    }
}