如何将API信息限制为用户？Laravel 5.7

php artisan make:middleware ApiAuthMiddleware

public function handle($request, Closure $next)
{
    // 验证用户身份和权限
    if (!Auth::check() || !Auth::user()->hasRole('api_user')) {
        return response()->json(['error' => 'Unauthorized'], 401);
    }

    return $next($request);
}

protected $routeMiddleware = [
    // ...
    'api.auth' => \App\Http\Middleware\ApiAuthMiddleware::class,
];

Route::middleware('api.auth')->group(function () {
    // 这里是需要限制的API路由
});