first init

2026-06-08 11:37:14 +08:00
commit 94ecbe5887
1058 changed files with 87732 additions and 0 deletions
@@ -0,0 +1,29 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Auth token cookie (Sanctum plain-text token)
+    |--------------------------------------------------------------------------
+    |
+    | HttpOnly cookie set on api.* domain for SPA auth from mykopkb.com.
+    |
+    */
+
+    'name' => env('AUTH_COOKIE_NAME', 'auth_token'),
+
+    'lifetime_minutes' => (int) env('AUTH_COOKIE_LIFETIME', 60 * 12),
+
+    'secure' => env('AUTH_COOKIE_SECURE', env('APP_ENV') !== 'local'),
+
+    'same_site' => env('AUTH_COOKIE_SAME_SITE', 'lax'),
+
+    'original_user_cookie' => env('AUTH_COOKIE_ORIGINAL_USER', 'original_user_id'),
+
+    /*
+    | Include token in JSON login/SSO responses (disable in production SPA flow).
+    */
+    'expose_token_in_response' => env('AUTH_COOKIE_EXPOSE_TOKEN', false),
+
+];