get('/user', function (Request $request) { return $request->user(); }); Route::post('/login', function (Request $request) { $request->validate([ 'email' => 'required|email', 'password' => 'required', ]); $user = User::where('email', $request->email)->first(); if (! $user || ! Hash::check($request->password, $user->password)) { throw ValidationException::withMessages([ 'email' => ['The provided credentials are incorrect.'], ]); } return [ 'token' => $user->createToken('login')->plainTextToken, 'userData' => json_encode($user) ]; }); Route::middleware('auth:sanctum')->post('/logout', function (Request $request) { $user = $request->user(); // $user->tokens()->delete(); $user->tokens()->where('tokenable_id', $user->id)->delete(); return $user; });