validate([ 'username' => 'required|string|max:50', 'password' => 'required|string', ]); if (Auth::attempt($credentials)) { $request->session()->regenerate(); return redirect()->intended('/'); } return back()->withErrors([ 'username' => 'Invalid credentials', ])->withInput(); } public function logout(Request $request) { Auth::logout(); $request->session()->invalidate(); $request->session()->regenerateToken(); return redirect('/'); } }