MacBook Air（M1,2020）
Mac OS Montereyバージョン11.6.4

$ php -v
PHP 8.1.9 (cli) (built: Aug 4 2022 15:11:08) (NTS)

$ composer -v
Composer version 2.3.9 2022-07-05 16:52:11

$ php artisan -V
Laravel Framework 9.26.1

$ brew --version
Homebrew 3.5.10

$ mysql --version
mysql Ver 14.14 Distrib 5.6.51, for osx10.17 (x86_64) using EditLine wrapper

$ composer create-project laravel/laravel tech_blog

$ php artisan serve

INFO Server running on[<http://127.0.0.1:8000>].

Press Ctrl+C to stop the server

//追加
protected $fillable =[
'name',
'email',
'password',
'api_token',
'is_admin',
];

<?php

use Illuminate\Database\Migrations\Migration;
use Illuminate\Database\Schema\Blueprint;
use Illuminate\Support\Facades\Schema;

class CreateUsersTable extends Migration
public function up()
{
Schema::create('users', function (Blueprint $table) {
$table->id();
$table->string('name');
$table->string('email')->unique();
$table->timestamp('email_verified_at')->nullable();
$table->string('password');
$table->string('api_token', 80)->unique()->nullable()->default(null)->comment('guardが参照するtoken');
$table->boolean('is_admin')->default(false)->comment('true->admin権限をあり');
$table->rememberToken();
$table->timestamps();
});
}

/**
 * Reverse the migrations.
 *
 * @return void
 */
public function down()
{
    Schema::dropIfExists('users');
}

$ php artisan make:seeder UserTableSeeder

<?php

namespace Database\Seeders;

use Illuminate\Database\Seeder;
use Illuminate\Support\Facades\DB;
use Illuminate\Support\Str;

class UserTableSeeder extends Seeder
    public function run()
    {
        //ユーザーのダミーデータを2つ作成
        DB::table('users')->insert([
            [
                //admin権限を持つユーザー
                'name'      => 'test1',
                'email'     => 'test1@test',
                'is_admin'  => true,
                'password'  => bcrypt('test'),
                'api_token' => Str::random(60),
            ],
            [
                //admin権限を持たないユーザー
                'name'     => 'test',
                'email'    => 'test@test',
                'password' => bcrypt('test'),
                'token'    => Str::random(60),
            ],
        ]);
    }

public function run()
{
    $this->call([
        UserTableSeeder::class,
    ]);
}

$ mysql -u root
$ create database laravel;
// Query OK, 1 row affected (0.00 sec)

$ show databases;

+--------------------------+
| Database |
+--------------------------+
| information_schema |
| laravel |
+--------------------------+

mysql> exit
Bye
$ php artisan migrate;
$ php artisan db:seed;

'guards' => [
        'web' => [
                'driver' => 'session',
                'provider' => 'users',
        ],
                //以下を追加
        'api' => [
                'driver' => 'token',
                'provider' => 'users',
        ],
],

$ php artisan make:controller Auth/LoginController

<?php

namespace App\Http\Controllers\Auth;

use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use App\Models\User;
use \Symfony\Component\HttpFoundation\Response;
use Illuminate\Support\Str;

class LoginController extends Controller
{

    public function login(Request $request) {
            //requestからemail,passwordだけ取得する。
        $credentials = $request->only(['email', 'password']);
        $guard = $request->guard;

        if(Auth::guard($guard)->attempt($credentials)) {

            //api_tokenのアップデート
            $user_info = User::whereEmail($request->email)->first();
            $user_id = $user_info->id;

            //usersテーブルから対象userを見つけてapi_tokenを再生成する。
            $user = User::find($user_id);
            $user->api_token = Str::random(60);
            $user->save();

            //loginが成功するとtokenと共に情報をjson形式で返却。
            return response()->json([
                'token' => $user->api_token,
                'id'.   => $user->id,
                'name'  => $user->name,
                'email' => $user->email,
            ], Response::HTTP_OK);
        }

        return 'login failed!';
    }
}

$ php artisan make:middleware AdminAuth

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;

class AdminAuth
//usersテーブルのis_adminを見て管理者権限があるかどうかを調べる。
public function handle(Request $request, Closure $next)
{
//auth()->check() 認証済かどうか
//auth()->user()->is_admin adminかどうか
if(auth()->check() && auth()->user()->is_admin)
{

        return $next($request);
    }

    //エラーメッセージ
    abort(403, 'This action is unauthorized.');
}

'admin_auth' => \App\Http\Middleware\AdminAuth::class

<?php

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Route;
use App\Http\Controllers\Auth\LoginController;

Route::post('login', [LoginController::class, 'login']);

// admin権限の操作
Route::middleware('auth:api', 'admin_auth')->group(function(){
    Route::get('/admin', function(){
        return 'you are admin user!';
    });
});

// user権限の操作
Route::middleware('auth:api')->group(function(){
    Route::get('/user', function(){
        return 'you are member user!';
    });
});