30 lines
841 B
PHP
30 lines
841 B
PHP
<?php
|
|
|
|
return [
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Auth token cookie (Sanctum plain-text token)
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| HttpOnly cookie set on api.* domain for SPA auth from mykopkb.com.
|
|
|
|
|
*/
|
|
|
|
'name' => env('AUTH_COOKIE_NAME', 'auth_token'),
|
|
|
|
'lifetime_minutes' => (int) env('AUTH_COOKIE_LIFETIME', 60 * 12),
|
|
|
|
'secure' => env('AUTH_COOKIE_SECURE', env('APP_ENV') !== 'local'),
|
|
|
|
'same_site' => env('AUTH_COOKIE_SAME_SITE', 'lax'),
|
|
|
|
'original_user_cookie' => env('AUTH_COOKIE_ORIGINAL_USER', 'original_user_id'),
|
|
|
|
/*
|
|
| Include token in JSON login/SSO responses (disable in production SPA flow).
|
|
*/
|
|
'expose_token_in_response' => env('AUTH_COOKIE_EXPOSE_TOKEN', false),
|
|
|
|
];
|