Advice

Using this middleware without Authenticate usually makes no sense.

In most of the cases you really want to have Authenticate and VerifyCsrfToken together.

For this situations we recommend to use auth group.

middleware:
  - LMS\Routes\Middleware\Api\Authenticate
  - LMS\Routes\Middleware\Api\VerifyCsrfToken

Or (which is the same as above)

middleware:
  - auth