validate([ 'email' => ['required', 'string', 'max:255'], 'password' => ['required', 'string'], ]); $remember = $request->boolean('remember'); if (! Auth::attempt($credentials, $remember)) { throw ValidationException::withMessages([ 'email' => __('auth.failed'), ]); } $request->session()->regenerate(); return redirect()->intended(route('recipients.index', absolute: false)); } public function destroy(Request $request): RedirectResponse { Auth::guard('web')->logout(); $request->session()->invalidate(); $request->session()->regenerateToken(); return redirect()->route('login'); } }