public function validateCredentials(Authenticatable $user, array $credentials) { if (isset($credentials['email']) && $credentials['email'] != $user->email) { return false; } if (isset($credentials['username']) && $credentials['username'] != $user->username) { return false; } return $user->checkPassword($credentials['password']); }