user()->currentAccessToken()?->id; $tokens = $request->user()->tokens()->orderByDesc('last_used_at')->get()->map(fn ($token) => [ 'id' => $token->id, 'name' => $token->name, 'is_current_device' => $token->id === $currentTokenId, 'last_used_at' => $token->last_used_at, 'created_at' => $token->created_at, ]); return response()->json(['data' => $tokens]); } public function destroy(Request $request, int $tokenId): JsonResponse { $deleted = $request->user()->tokens()->where('id', $tokenId)->delete(); if (!$deleted) { abort(404); } return response()->json(['message' => 'Device signed out']); } }