It's included in the documentation the authentication chapter, how to setup everything with no packages.
https://laravel.com/docs/11.x/authentication#authenticating-users
Edit:
You still have to apply authorization.
Authorization determines what a logged in user can or cannot do with their role.