legendary way laravel authenticates SPAs expecially with sanctum

lengdary_way_laravel_authenticates_spa.php

<?php
namespace Illuminate\Foundation\Http\Middleware;

//legendary way laravel authenticates SPAs expecially with sanctum
// compare the hash_equals of the server session token (session value generated by hashing the user's password) with the cookie sent to the frontend


class VerifyCsrfToken
{
    /**
     * Determine if the session and input CSRF tokens match.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return bool
     */
    protected function tokensMatch($request)
    {
        $token = $this->getTokenFromRequest($request);
        
        return is_string($request->session()->token()) &&
            is_string($token) &&
            hash_equals($request->session()->token(), $token);
    }
// the rest of the code here 
}