Added API

app/Http/Middleware/HandleInertiaRequests.php

@@ -37,6 +37,7 @@ class HandleInertiaRequests extends Middleware
                 'user' => $request->user(),
                 'roles' => $request->user()?->getRoleNames() ?? [],
                 'permissions' => $request->user()?->getAllPermissions()->pluck('name') ?? [],
+                'apiToken' => session('api_token'),
             ],
             'achievement_notifications' => fn() => $request->user()
                 ? $request->user()

app/Http/Middleware/SanctumOrTrustedOrigin.php

@@ -4,6 +4,7 @@ namespace App\Http\Middleware;
 
 use Closure;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
 use Symfony\Component\HttpFoundation\Response;
 
 class SanctumOrTrustedOrigin
@@ -11,7 +12,8 @@ class SanctumOrTrustedOrigin
     public function handle(Request $request, Closure $next): Response
     {
         // Authenticated via Sanctum (cookie or token) — let it through, auth()->user() is set.
-        if ($request->user('sanctum')) {
+        if ($user = $request->user('sanctum')) {
+            Auth::setUser($user);
             return $next($request);
         }