follow your suggestion.

Yes, private would be more secure.
And add the comment to construct funtion.

Author: ac1982

src/Middleware/OAuthAuthenticate.php

@@ -15,8 +15,11 @@ class OAuthAuthenticate
     /**
      * Use Service Container would be much artisan.
      */
-    public $wechat;
-
+    private $wechat;
+    
+    /**
+     * Inject the wechat service.
+     */
     public function __construct(Application $wechat)
     {
         $this->wechat = $wechat;