diff --git a/routes/web.php b/routes/web.php
index 21a03165..75c72962 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -32,6 +32,9 @@ Route::post('login', [LoginController::class, 'login']);
 
 Route::post('auth/logout', function () {
     Auth::guard('web')->logout();
+
+    request()->session()->invalidate();
+    request()->session()->regenerateToken();
 });
 
 // Customer auth