bearerToken(); if (!$token) { return response()->json(['message' => 'Token no proporcionado'], 401); } try { JWT::decode($token, new Key(config('app.jwt_secret'), 'HS256')); return $next($request); } catch (\Exception $e) { return response()->json(['message' => 'Token inválido'], 401); } } }