feat(auth): implement token expiration for personal access tokens and update tests

tests/Feature/Auth/LoginControllerTest.php

@@ -34,6 +34,12 @@ class LoginControllerTest extends TestCase
 
         $this->assertIsString($response->json('token'));
         $this->assertNotEmpty($response->json('token'));
+        $accessToken = $user->tokens()->sole();
+        $this->assertTrue(
+            $accessToken->expires_at->equalTo(
+                $accessToken->created_at->copy()->addMinutes(config('sanctum.expiration'))
+            )
+        );
 
         $this->withHeader('Authorization', 'Bearer '.$response->json('token'))
             ->getJson('/api/me')
@@ -42,6 +48,21 @@ class LoginControllerTest extends TestCase
             ->assertJsonPath('email', 'grace@example.com');
     }
 
+    public function test_personal_access_tokens_expire_after_twelve_hours(): void
+    {
+        $this->travelTo(now()->startOfSecond());
+
+        $user = User::factory()->create();
+        $token = $user->createToken('api-token')->plainTextToken;
+
+        $this->travel(12)->hours();
+        $this->travel(1)->minutes();
+
+        $this->withHeader('Authorization', 'Bearer '.$token)
+            ->getJson('/api/me')
+            ->assertUnauthorized();
+    }
+
     public function test_it_rejects_access_to_the_current_user_endpoint_without_a_token(): void
     {
         $this->getJson('/api/me')->assertUnauthorized();