feat(auth): harden authentication and add configurable two-factor support

2026-07-31 03:12:46 +02:00
parent 235d5f646c
commit e47243f7dc
51 changed files with 2904 additions and 1359 deletions
--- a/config/session.php
+++ b/config/session.php
@@ -47,7 +47,9 @@ return [
    |
    */

-    'encrypt' => env('SESSION_ENCRYPT', false),
+    'encrypt' => env('APP_ENV') === 'production'
+        ? true
+        : env('SESSION_ENCRYPT', false),

    /*
    |--------------------------------------------------------------------------
@@ -169,7 +171,9 @@ return [
    |
    */

-    'secure' => env('SESSION_SECURE_COOKIE'),
+    'secure' => env('APP_ENV') === 'production'
+        ? true
+        : env('SESSION_SECURE_COOKIE', false),

    /*
    |--------------------------------------------------------------------------