middleware(['auth:sanctum', 'adminapp.tenant']) ->group(function (): void { Route::get('staff/{staff}/scan-attempts', [AdminAppStaffController::class, 'scanAttempts']); Route::apiResource('staff', AdminAppStaffController::class)->except('show'); });