validate([ 'email' => ['required', 'email'], 'password' => ['required', 'string'], ]); if (! Auth::attempt($credentials, $request->boolean('remember'))) { return back()->withErrors(['email' => 'The provided credentials do not match our records.'])->onlyInput('email'); } $request->session()->regenerate(); return redirect()->intended(route('dashboard')); } public function destroy(Request $request): RedirectResponse { Auth::guard('web')->logout(); $request->session()->invalidate(); $request->session()->regenerateToken(); return redirect()->route('home'); } }