<?php

use Laravel\Sanctum\Sanctum;

return [
	
	/*
	|--------------------------------------------------------------------------
	| Stateful Domains
	|--------------------------------------------------------------------------
	|
	| Requests from the following domains / hosts will receive stateful API
	| authentication cookies. Typically, these should include your local
	| and production domains which access your API via a frontend SPA.
	|
	*/
	
    'stateful' => explode(',', env(
        'SANCTUM_STATEFUL_DOMAINS',
		sprintf('%s%s', 'localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1', Sanctum::currentApplicationUrlWithPort())
    )),
	
	/*
    |--------------------------------------------------------------------------
    | Sanctum Guards
    |--------------------------------------------------------------------------
    |
    | This array contains the authentication guards that will be checked when
    | Sanctum is trying to authenticate a request. If none of these guards
    | are able to authenticate the request, Sanctum will use the bearer
    | token that's present on an incoming request for authentication.
    |
    */
	
	'guard' => ['web'],
	
	/*
	|--------------------------------------------------------------------------
	| Expiration Minutes
	|--------------------------------------------------------------------------
	|
	| This value controls the number of minutes until an issued token will be
	| considered expired. If this value is null, personal access tokens do
	| not expire. This won't tweak the lifetime of first-party sessions.
	|
	*/
	
    'expiration' => null,
	
	/*
	|--------------------------------------------------------------------------
	| Sanctum Middleware
	|--------------------------------------------------------------------------
	|
	| When authenticating your first-party SPA with Sanctum you may need to
	| customize some of the middleware Sanctum uses while processing the
	| request. You may change the middleware listed below as required.
	|
	*/
	
    'middleware' => [
        'verify_csrf_token' => App\Http\Middleware\VerifyCsrfToken::class,
        'encrypt_cookies' => App\Http\Middleware\EncryptCookies::class,
    ],
	
];
