validate([ 'email' => ['required', 'string', 'email'], 'password' => ['required', 'string'], ]); $remember = config('auth-ui.features.remember_me') ? $request->boolean('remember') : false; if (! Auth::attempt($credentials, $remember)) { throw ValidationException::withMessages([ 'email' => __('auth.failed'), ]); } $request->session()->regenerate(); return redirect()->intended(config('auth-ui.redirects.login', '/')); } /** * Destroy an authenticated session. */ public function destroy(Request $request): RedirectResponse { Auth::logout(); $request->session()->invalidate(); $request->session()->regenerateToken(); return redirect(config('auth-ui.redirects.logout', '/')); } }