如何在两个不同的前端和后端域名中使用Laravel Sanctum？

composer require laravel/sanctum

'guards' => [
    'web' => [
        'driver' => 'session',
        'provider' => 'users',
    ],

    'api' => [
        'driver' => 'sanctum',
        'provider' => 'users',
        'hash' => false,
    ],
],

php artisan vendor:publish --provider="Laravel\Sanctum\SanctumServiceProvider"
php artisan migrate

composer require fruitcake/laravel-cors

return [
    'paths' => ['api/*'],
    'allowed_methods' => ['*'],
    'allowed_origins' => ['https://frontend-domain.com', 'https://backend-domain.com'],
    'allowed_origins_patterns' => [],
    'allowed_headers' => ['*'],
    'exposed_headers' => [],
    'max_age' => 0,
    'supports_credentials' => true,
];

use Illuminate\Support\Facades\Http;

Route::get('/api/sanctum/csrf-cookie', function () {
    return Http::get('https://backend-domain.com/sanctum/csrf-cookie');
});

Route::post('/api/login', function () {
    $response = Http::post('https://backend-domain.com/login', [
        'email' => 'email@example.com',
        'password' => 'password',
    ]);

    return $response->json();
});

use App\Http\Controllers\AuthController;
use App\Http\Controllers\UserController;
use Illuminate\Support\Facades\Route;

Route::middleware('auth:sanctum')->group(function () {
    Route::get('/user', [UserController::class, 'index']);
});

Route::post('/login', [AuthController::class, 'login']);

fetch('https://frontend-domain.com/api/sanctum/csrf-cookie', {
    credentials: 'include'
}).then(() => {
    fetch('https://frontend-domain.com/api/login', {
        method: 'POST',
        credentials: 'include',
        headers: {
            'Content-Type': 'application/json',
        },
        body: JSON.stringify({
            email: 'email@example.com',
            password: 'password',
        }),
    }).then(response => {
        if (response.ok) {
            // 登录成功
        } else {
            // 登录失败
        }
    });
});

namespace App\Http\Controllers;

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;

class AuthController extends Controller
{
    public function login(Request $request)
    {
        $credentials = $request->validate([
            'email' => 'required|email',
            'password' => 'required',
        ]);

        if (Auth::attempt($credentials)) {
            $request->session()->regenerate();

            return response()->json(['message' => 'Authenticated']);
        }

        return response()->json(['message' => 'Invalid credentials'], 401);
    }
}