HasApiTokens tokens() method does not return token

[popiciulo]

In my login controller I am using this code to log in the user

$credentials = $request->only('email', 'password');
        if (Auth::attempt($credentials)) {
            return Auth::user()->tokens()->first();
        }

and the result is like this without the token field:

{
    "id": 5,
    "user_id": 6,
    "name": "auth",
    "abilities": [
        "*"
    ],
    "last_used_at": "2020-01-10 18:21:19",
    "created_at": "2020-01-10 18:21:14",
    "updated_at": "2020-01-10 18:21:19"
}

Is there something that I missed or mistakenly used?

[popiciulo]

It seems I missed something and had to return it like this:
return Auth::user()->tokens()->first()->token;
BTW: I guess we could have duplicates like same user_id and name in the personal_access_token table. Would it be better to have unique('user_id', 'name') in order to prevent the creation of tokens with the same name for same user?

[amaelftah]

@popica80 can't we just use the latest created tokens instead of using unique ?

[taylorotwell]

The tokens are stored hashed in the database. You wouldn't return a token from your login route. I'm honestly not even sure what you are attempting to accomplish here. Are you authenticating your SPA, a mobile app? Have you read through the entire readme?