email)->first(); if ($user && \Illuminate\Support\Facades\Hash::check($request->password, $user->password)) { return $user; } return null; }); RateLimiter::for('login', function (Request $request) { $email = (string) $request->email; return Limit::perMinute(5)->by($email.'|'.$request->ip()); }); RateLimiter::for('two-factor', function (Request $request) { return Limit::perMinute(5)->by($request->session()->get('login.id')); }); } }