user()->forceFill([ 'api_token' => hash('sha256', $token), ])->save(); return ['token' => $token]; } }