scrum-poker-internal/app/Http/Controllers/EmbeddedLogoutController.php

<?php

namespace App\Http\Controllers;

use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;

class EmbeddedLogoutController extends Controller
{
    /**
     * Handle the incoming request.
     */
    public function __invoke(Request $request): RedirectResponse
    {
        $joinCode = $request->string('join_code')->trim()->upper()->toString();
        $playerName = $request->string('player_name')->trim()->toString();

        Auth::guard('web')->logout();
        $request->session()->invalidate();
        $request->session()->regenerateToken();

        return to_route('embedded.room', [
            'join_code' => $joinCode,
            'player_name' => $playerName,
        ]);
    }
}