$user->currentAccessToken()

Route::post('login', 'Api\AuthController@login');
Route::post('logout/{user}', 'Api\AuthController@logout');

/*
|--------------------------------------------------------------------------
| ALL ROUTS
|--------------------------------------------------------------------------
 */
Route::group(['middleware' => 'auth:sanctum'], static function () {

});

Route::middleware('auth:sanctum')->get('/user', function (Request $request) {
  return $request->user();
});

public function login(Request $request) {
    try {
      $request->validate([
        'email' => 'email|required',
        'password' => 'required'
      ]);

      $credentials = request(['email', 'password']);

      if (!Auth::attempt($credentials)) {
        return response()->json([
          'status_code' => 500,
          'message' => 'Unauthorized'
        ]);
      }

      $user = User::where('email', $request->email)->first();

      if (!Hash::check($request->password, $user->password, [])) {
        throw new \Exception('Error in Login');
      }

      $tokenResult = $user->createToken('authToken')->plainTextToken;

      return response()->json([
        'status_code' => 200,
        'access_token' => $tokenResult,
        'user' => $user,
        'token_type' => 'Bearer',
      ]);
    } catch (Exception $error) {
      return response()->json([
        'status_code' => 500,
        'message' => 'Error in Login',
        'error' => $error,
      ]);
    }
  }