One account, two kinds of client
The same player signs in on a phone app and on the web, and the two authenticate in different ways. Bolting a second login system on for mobile is how accounts drift apart.
One Laravel backend serves both. Laravel Sanctum issues API tokens to the mobile app, the web dashboard keeps a single session cookie, and Google sign-in through Laravel Socialite works for either.







