<?php

return [

    /*
    |--------------------------------------------------------------------------
    | Auth token cookie (Sanctum plain-text token)
    |--------------------------------------------------------------------------
    |
    | HttpOnly cookie set on api.* domain for SPA auth from mykopkb.com.
    |
    */

    'name' => env('AUTH_COOKIE_NAME', 'auth_token'),

    'lifetime_minutes' => (int) env('AUTH_COOKIE_LIFETIME', 60 * 12),

    'secure' => env('AUTH_COOKIE_SECURE', env('APP_ENV') !== 'local'),

    'same_site' => env('AUTH_COOKIE_SAME_SITE', 'lax'),

    'original_user_cookie' => env('AUTH_COOKIE_ORIGINAL_USER', 'original_user_id'),

    /*
    | Include token in JSON login/SSO responses (disable in production SPA flow).
    */
    'expose_token_in_response' => env('AUTH_COOKIE_EXPOSE_TOKEN', false),

];