Authentication

API Authentication with Laravel Sanctum: Tokens, Abilities and SPA Auth

How Sanctum handles both SPA cookie authentication and mobile API tokens, and how to scope tokens with abilities instead of all-or-nothing access.