Editorial question131.8K views2,428 votes0 answers4,677 following
AI-generatedThese credentials do not match our records. – Sanctum token persistence after password change
When a user updates their password in a Laravel Jetstream application, the goal is to immediately invalidate any existing Sanctum API tokens and authenticated web sessions so that leaked or stale credentials cannot continue to be used, aligning with a least‑privilege security model. Jetstream’s default Fortify implementation does not automatically revoke tok
laraveljetstream