Update AuthenticatedSessionController.php (#487)

Added check in logout to invalidate and regenerate session only if request has session. This will allow logout to work when 'api' middleware is used with fortify

Co-authored-by: Karmendra Suthar <[email protected]>

Author: karmendra

src/Http/Controllers/AuthenticatedSessionController.php

@@ -99,9 +99,10 @@ public function destroy(Request $request): LogoutResponse
     {
         $this->guard->logout();
 
-        $request->session()->invalidate();
-
-        $request->session()->regenerateToken();
+        if ($request->hasSession()) {
+            $request->session()->invalidate();
+            $request->session()->regenerateToken();
+        }
 
         return app(LogoutResponse::class);
     }