Laravel API token authentication

ApiSearchController.php

/**
 *  Laravel's Sanctum is not great at validating bearer tokens. 
 *  If you want to validate a token for more than "does it exist", you need to do it manually. 
 *  Here's an example inside an controller:
 */

class ApiSearchController extends Controller
{
    public function store(Request $request)
    {
        if (!$request->bearerToken()) {
            return response()->json([
                'status' => 401,
                'message' => 'Invalid API token!'
            ], 401);
        }

        $token = \Laravel\Sanctum\PersonalAccessToken::where('token', $request->bearerToken())->first();
        if (!$token) {
            return response()->json([
                'status' => 401,
                'message' => 'Invalid API token!'
            ], 401);
        }
        $user = $token->tokenable;
        if (!$user) {
            return response()->json([
                'status' => 401,
                'error' => 'Invalid API token!'
            ], 401);
        }

        if (!$user->onTrial() && !$user->subscribed()) {
            return response()->json([
                'status' => 401,
                'error' => 'Your trial or subscription have expired'
            ], 401);
        }

        // do your thing
    }
}