validate([ 'email' => 'required|email', 'password' => 'required', ]); if (! Auth::attempt($request->only('email', 'password'))) { throw ValidationException::withMessages([ 'email' => ['The provided credentials are incorrect.'], ]); } $user = Auth::user(); $token = $user->createToken('auth-token')->plainTextToken; return response()->json([ 'user' => $user, 'token' => $token, ]); } public function logout(Request $request) { $request->user()->currentAccessToken()->delete(); return response()->json([ 'message' => 'Logged out successfully', ]); } }