67 lines
		
	
	
	
		
			2.2 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			67 lines
		
	
	
	
		
			2.2 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
| <?php
 | |
| 
 | |
| use Laravel\Sanctum\Sanctum;
 | |
| 
 | |
| return [
 | |
| 
 | |
|     /*
 | |
|     |--------------------------------------------------------------------------
 | |
|     | Stateful Domains
 | |
|     |--------------------------------------------------------------------------
 | |
|     |
 | |
|     | Requests from the following domains / hosts will receive stateful API
 | |
|     | authentication cookies. Typically, these should include your local
 | |
|     | and production domains which access your API via a frontend SPA.
 | |
|     |
 | |
|     */
 | |
| 
 | |
|     'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', sprintf(
 | |
|         '%s%s',
 | |
|         'localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1',
 | |
|         Sanctum::currentApplicationUrlWithPort()
 | |
|     ))),
 | |
| 
 | |
|     /*
 | |
|     |--------------------------------------------------------------------------
 | |
|     | Sanctum Guards
 | |
|     |--------------------------------------------------------------------------
 | |
|     |
 | |
|     | This array contains the authentication guards that will be checked when
 | |
|     | Sanctum is trying to authenticate a request. If none of these guards
 | |
|     | are able to authenticate the request, Sanctum will use the bearer
 | |
|     | token that's present on an incoming request for authentication.
 | |
|     |
 | |
|     */
 | |
| 
 | |
|     'guard' => ['web'],
 | |
| 
 | |
|     /*
 | |
|     |--------------------------------------------------------------------------
 | |
|     | Expiration Minutes
 | |
|     |--------------------------------------------------------------------------
 | |
|     |
 | |
|     | This value controls the number of minutes until an issued token will be
 | |
|     | considered expired. If this value is null, personal access tokens do
 | |
|     | not expire. This won't tweak the lifetime of first-party sessions.
 | |
|     |
 | |
|     */
 | |
| 
 | |
|     'expiration' => null,
 | |
| 
 | |
|     /*
 | |
|     |--------------------------------------------------------------------------
 | |
|     | Sanctum Middleware
 | |
|     |--------------------------------------------------------------------------
 | |
|     |
 | |
|     | When authenticating your first-party SPA with Sanctum you may need to
 | |
|     | customize some of the middleware Sanctum uses while processing the
 | |
|     | request. You may change the middleware listed below as required.
 | |
|     |
 | |
|     */
 | |
| 
 | |
|     'middleware' => [
 | |
|         'verify_csrf_token' => App\Http\Middleware\VerifyCsrfToken::class,
 | |
|         'encrypt_cookies' => App\Http\Middleware\EncryptCookies::class,
 | |
|     ],
 | |
| 
 | |
| ];
 | 
