Automatically detect auth:sanctum

[Shadercloud]

Is there a way to configure scramble to automatically mark any routes behind the auth:sanctum middleware as requiring authentication; and have all other routes be unauthenticated?

Reading the docs it seems like I would need to go through and manually add the tag:
/**
* @Unauthenticated
*/

Above all controller methods that do not require auth...it would be a lot easier to have it auto detect this from the middleware.

[romalytvynenko]

Hey @Shadercloud

Yeah, there is no need to do it manually!

You can use operation transformers and detect the middleware there:

public function boot()
{
    Scramble::configure()
        ->withOperationTransformers(function (Operation $operation, RouteInfo $routeInfo) {
            $routeMiddleware = $routeInfo->route->gatherMiddleware();

            $hasAuthMiddleware = collect($routeMiddleware)->contains(
                fn ($m) => Str::startsWith($m, 'auth:')
            );
    
            if (! $hasAuthMiddleware) {
                $operation->addSecurity([]);
            }
        })
}