session()->regenerate(); // return redirect()->intended('/'); // } // return back()->withErrors([...]); // } /** * Log the user out of the application. */ public function logout(Request $request) { // 1. Log the user out Auth::logout(); // 2. Invalidate the user's session $request->session()->invalidate(); // 3. Regenerate the CSRF token for security $request->session()->regenerateToken(); // 4. Redirect them back to the login page return redirect('/login'); } }