phpvms/app/Routes/api.php

<?php

/**
 * public routes
 */
Route::group([], function()
{
    Route::get('acars', 'AcarsController@index');

    Route::get('airports/{id}', 'AirportController@get');
    Route::get('airports/{id}/lookup', 'AirportController@lookup');

    Route::get('flights/search', 'FlightController@search');
    Route::get('flights/{id}', 'FlightController@get');

    Route::get('pireps/{id}/acars', 'PirepController@acars_get');
    Route::get('pireps/{id}/geojson', 'PirepController@acars_get');

    Route::get('status', 'StatusController@status');
});

/**
 * these need to be authenticated with a user's API key
 */
Route::group(['middleware' => ['api.auth']], function ()
{
    Route::get('pireps/{id}', 'PirepController@get');

    Route::post('pireps/prefile', 'PirepController@prefile');
    Route::post('pireps/{id}/file', 'PirepController@file');
    Route::post('pireps/{id}/cancel', 'PirepController@cancel');
    Route::post('pireps/{id}/acars', 'PirepController@acars_store');
    Route::post('pireps/{id}/acars/position', 'PirepController@acars_store');
    Route::post('pireps/{id}/acars/log', 'PirepController@acars_log');

    # This is the info of the user whose token is in use
    Route::get('user', 'UserController@index');
    Route::get('users/{id}', 'UserController@get');
    Route::get('users/{id}/bids', 'UserController@bids');
});