The original post: /r/php by /u/knouki21 on 2025-02-17 07:21:40.

I am a newbie in laravel. In the docs, it says:

You should not use API tokens to authenticate your own first-party SPA. Instead, use Sanctum’s built-in SPA authentication features.

But why is it that when I search for tutorials or forums talking about using sanctum for SPA auth, almost all of them uses api tokens. I am very confused. Which of the two do you guys use for authenticating SPAs?