https://javiercobossanz.com/2017/05/06/laravel-5-4-securizando-la-api/