Implement session based authentication with Sanctum

app/GraphQL/Mutations/Login.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace App\GraphQL\Mutations;
+
+use App\Models\User;
+use GraphQL\Error\Error;
+use Illuminate\Support\Arr;
+use Illuminate\Support\Facades\Auth;
+
+final class Login
+{
+    /**
+     * @param  null  $_
+     * @param  array{email: string, password: string}  $args
+     */
+    public function __invoke($_, array $args): User
+    {
+        $guardConfig = config('sanctum.guard');
+        assert(is_array($guardConfig));
+
+        $guardName = Arr::first($guardConfig);
+        assert(is_string($guardName));
+
+        $guard = Auth::guard($guardName);
+
+        if( ! $guard->attempt($args)) {
+            throw new Error('Invalid credentials.');
+        }
+
+        $user = $guard->user();
+        assert($user instanceof User, 'must receive User after successful login');
+
+        return $user;
+    }
+}

app/GraphQL/Mutations/Logout.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\GraphQL\Mutations;
+
+use App\Models\User;
+use Illuminate\Support\Arr;
+use Illuminate\Support\Facades\Auth;
+
+final class Logout
+{
+    public function __invoke(): ?User
+    {
+        $guardConfig = config('sanctum.guard');
+        assert(is_array($guardConfig));
+
+        $guardName = Arr::first($guardConfig);
+        assert(is_string($guardName));
+
+        $guard = Auth::guard($guardName);
+
+        $user = $guard->user();
+
+        $guard->logout();
+
+        return $user;
+    }
+}

app/Models/Comment.php

@@ -26,7 +26,7 @@
  */
 final class Comment extends Model
 {
-    /** @return \Illuminate\Database\Eloquent\Relations\BelongsTo<\App\Models\Post, self> */
+    /** @return \Illuminate\Database\Eloquent\Relations\BelongsTo<\App\Models\Post, $this> */
     public function post(): BelongsTo
     {
         return $this->belongsTo(Post::class);

app/Models/Post.php

@@ -41,13 +41,13 @@ protected static function booted(): void
         });
     }
 
-    /** @return \Illuminate\Database\Eloquent\Relations\BelongsTo<\App\Models\User, self> */
+    /** @return \Illuminate\Database\Eloquent\Relations\BelongsTo<\App\Models\User, $this> */
     public function author(): BelongsTo
     {
         return $this->belongsTo(User::class);
     }
 
-    /** @return \Illuminate\Database\Eloquent\Relations\HasMany<\App\Models\Comment> */
+    /** @return \Illuminate\Database\Eloquent\Relations\HasMany<\App\Models\Comment, $this> */
     public function comments(): HasMany
     {
         return $this->hasMany(Comment::class);

app/Models/User.php

@@ -41,7 +41,7 @@ final class User extends Authenticatable
         'email_verified_at' => 'datetime',
     ];
 
-    /** @return \Illuminate\Database\Eloquent\Relations\HasMany<\App\Models\Post> */
+    /** @return \Illuminate\Database\Eloquent\Relations\HasMany<\App\Models\Post, $this> */
     public function posts(): HasMany
     {
         return $this->hasMany(Post::class, 'author_id');

composer.json

@@ -12,6 +12,7 @@
     "require": {
         "php": "^8.2",
         "laravel/framework": "^11",
+        "laravel/sanctum": "^4",
         "laravel/tinker": "^2.9",
         "mll-lab/laravel-graphiql": "^3",
         "nuwave/lighthouse": "^6"