RequireApp
class
Vendidit\AuthServer\Laravel\Middleware\RequireAppSource:src/Middleware/RequireApp.php
vauth.app:my-app-code — require the JWT to be scoped to a specific
registered consuming app (app_code claim). A token minted for app A
never authenticates against app B.