Sanctum Api Token

api.php

Route::group(['middleware' => ['auth:sanctum']], function () {
    // Product Group
    Route::apiResource('brands', BrandsController::class);

});

cors.php

<?php

return [
    'paths' => ['api/*'],
    'allowed_methods' => ['*'],
    'allowed_origins' => ['https://frontend.test', 'http://localhost:3000'],
    'allowed_origins_patterns' => [],
    'allowed_headers' => ['*'],
    'exposed_headers' => [],
    'max_age' => 0,
    'supports_credentials' => false,
];

Kernel.php

        'api' => [
        // ini dicomment
            // \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
            'throttle:api',
            \Spatie\ResponseCache\Middlewares\CacheResponse::class,
            \Illuminate\Routing\Middleware\SubstituteBindings::class,
        ],

LoginController.php

    public function store(LoginRequest $request): JsonResponse
    {

        if (! Auth::attempt($request->only('email', 'password'))) {
            return responder()->error('unauthenticated')->respond();
        }

        $user = User::where('email', $request['email'])->firstOrFail();

        $token = $user->createToken('auth_token')->plainTextToken;


        return responder()->success(['token' => $token])->respond();

    }