authenticate(); $request->session()->regenerate(); if (!Auth::user()->is_active) { Auth::logout(); return back()->withErrors([ 'email' => 'Account is disabled.', ]); } Auth::user()->update([ 'last_login_at' => now() ]); activity_log( 'login', 'User logged in' ); return redirect()->intended(route('dashboard', absolute: false)); } /** * Destroy an authenticated session. */ public function destroy(Request $request): RedirectResponse { Auth::guard('web')->logout(); $request->session()->invalidate(); $request->session()->regenerateToken(); activity_log( 'logout', 'User logged out' ); return redirect('/'); } }