Laravel Middleware that injects the access_token url parameter into the Authorization header.

AccessTokenInjector.php

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Support\Str;

/**
 * Checks for the `access_token` parameter, and if exists, puts it in the Authorization header.
 */
class AccessTokenInjector
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request $request
     * @param  \Closure                 $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        if ($request->filled('access_token') && !$request->hasHeader('Authorization')) {
            $request->headers->set('Authorization',
                $this->getTokenFromRequest($request)
            );
        }

        return $next($request);
    }

    /**
     * Get the token from the request.
     *
     * @param  \Illuminate\Http\Request $request
     * @return string
     */
    protected function getTokenFromRequest($request)
    {
        return Str::startsWith($token = $request->input('access_token'), 'Bearer ') ? $token : 'Bearer ' . $token;
    }
}