Initialize the CSRF cookie (SPA flow)

GET 
/sanctum/csrf-cookie

Sets the XSRF-TOKEN cookie used by the stateful SPA login flow. Call this once before POST /api/login or /api/register.

Responses

204

CSRF cookie set (no body).