How to make a private API on Laravel?

Question

API

Hello. Now I'm doing a full back on Laravel 5.5, I'm studying the passport docks, but the advice of an experienced person in this matter is extremely important.
Passport, as I understand it, provides the opportunity to develop an open API, a lot has been written about this in the docs. But what if I need an API that needs to be closed "from the outside"? Those. it will be used on the website (SPA, Vue.js) and mobile app. What exactly do I need to watch, what should be the sequence of requests?
As I understand it, I need this: https://laravel.com/docs/5.5/passport#consuming-yo...
But it's not clear why we add middleware CreateFreshApiToken to the web group? And how does this change the behavior of the API, what to do next?

Answer 1

It is necessary to add middleware in all API controllers
https://laravel.com/docs/5.5/middleware
https://laracasts.com/discuss/channels/laravel/whe...