// /api/issues/id/pages?page=3&token=... $issue = Issue::find($id); if (!Auth::canAccessIssue($user, $issue, $token)) http_response_code(403); exit;