/** * Validate a user against the given credentials. * * @param \Illuminate\Auth\UserInterface $user * @param array $credentials * * @return bool */ public function validateCredentials(Authenticatable $user, array $credentials) { if (isset($credentials['email']) && $credentials['email'] != $user->email) { return false; } if (isset($credentials['username']) && $credentials['username'] != $user->username) { return false; } return $user->checkPassword($credentials['password']); }