only('email', 'password'); if (Auth::attempt($credentials)) { $user = Auth::user(); $token = $user->createToken('YourAppName')->plainTextToken; return response()->json(['token' => $token]); } return response()->json(['message' => 'Unauthorized'], 401); } }