| 1 | <?php | = | 1 | <?php |
| 2 | 2 | |||
| 3 | use Illuminate\Support\Str; | 3 | use Illuminate\Support\Str; | |
| 4 | 4 | |||
| 5 | return [ | 5 | return [ | |
| 6 | 6 | |||
| 7 | /* | 7 | /* | |
| 8 | |-------------------------------------------------------------------------- | 8 | |-------------------------------------------------------------------------- | |
| 9 | | Default Session Driver | 9 | | Default Session Driver | |
| 10 | |-------------------------------------------------------------------------- | 10 | |-------------------------------------------------------------------------- | |
| 11 | | | 11 | | | |
| 12 | | This option controls the default session "driver" that will be used on | 12 | | This option controls the default session "driver" that will be used on | |
| 13 | | requests. By default, we will use the lightweight native driver but | 13 | | requests. By default, we will use the lightweight native driver but | |
| 14 | | you may specify any of the other wonderful drivers provided here. | 14 | | you may specify any of the other wonderful drivers provided here. | |
| 15 | | | 15 | | | |
| 16 | | Supported: "file", "cookie", "database", "apc", | 16 | | Supported: "file", "cookie", "database", "apc", | |
| 17 | | "memcached", "redis", "dynamodb", "array" | 17 | | "memcached", "redis", "dynamodb", "array" | |
| 18 | | | 18 | | | |
| 19 | */ | 19 | */ | |
| 20 | 20 | |||
| 21 | 'driver' => env('SESSION_DRIVER', 'file'), | 21 | 'driver' => env('SESSION_DRIVER', 'file'), | |
| 22 | 22 | |||
| 23 | /* | 23 | /* | |
| 24 | |-------------------------------------------------------------------------- | 24 | |-------------------------------------------------------------------------- | |
| 25 | | Session Lifetime | 25 | | Session Lifetime | |
| 26 | |-------------------------------------------------------------------------- | 26 | |-------------------------------------------------------------------------- | |
| 27 | | | 27 | | | |
| 28 | | Here you may specify the number of minutes that you wish the session | 28 | | Here you may specify the number of minutes that you wish the session | |
| 29 | | to be allowed to remain idle before it expires. If you want them | 29 | | to be allowed to remain idle before it expires. If you want them | |
| 30 | | to immediately expire on the browser closing, set that option. | 30 | | to immediately expire on the browser closing, set that option. | |
| 31 | | | 31 | | | |
| 32 | */ | 32 | */ | |
| 33 | 33 | |||
| 34 | 'lifetime' => env('SESSION_LIFETIME', 120), | 34 | 'lifetime' => env('SESSION_LIFETIME', 120), | |
| 35 | 35 | |||
| 36 | 'expire_on_close' => false, | 36 | 'expire_on_close' => false, | |
| 37 | 37 | |||
| 38 | /* | 38 | /* | |
| 39 | |-------------------------------------------------------------------------- | 39 | |-------------------------------------------------------------------------- | |
| 40 | | Session Encryption | 40 | | Session Encryption | |
| 41 | |-------------------------------------------------------------------------- | 41 | |-------------------------------------------------------------------------- | |
| 42 | | | 42 | | | |
| 43 | | This option allows you to easily specify that all of your session data | 43 | | This option allows you to easily specify that all of your session data | |
| 44 | | should be encrypted before it is stored. All encryption will be run | 44 | | should be encrypted before it is stored. All encryption will be run | |
| 45 | | automatically by Laravel and you can use the Session like normal. | 45 | | automatically by Laravel and you can use the Session like normal. | |
| 46 | | | 46 | | | |
| 47 | */ | 47 | */ | |
| 48 | 48 | |||
| 49 | 'encrypt' => false, | 49 | 'encrypt' => false, | |
| 50 | 50 | |||
| 51 | /* | 51 | /* | |
| 52 | |-------------------------------------------------------------------------- | 52 | |-------------------------------------------------------------------------- | |
| 53 | | Session File Location | 53 | | Session File Location | |
| 54 | |-------------------------------------------------------------------------- | 54 | |-------------------------------------------------------------------------- | |
| 55 | | | 55 | | | |
| 56 | | When using the native session driver, we need a location where session | 56 | | When using the native session driver, we need a location where session | |
| 57 | | files may be stored. A default has been set for you but a different | 57 | | files may be stored. A default has been set for you but a different | |
| 58 | | location may be specified. This is only needed for file sessions. | 58 | | location may be specified. This is only needed for file sessions. | |
| 59 | | | 59 | | | |
| 60 | */ | 60 | */ | |
| 61 | 61 | |||
| 62 | 'files' => storage_path('framework/sessions'), | 62 | 'files' => storage_path('framework/sessions'), | |
| 63 | 63 | |||
| 64 | /* | 64 | /* | |
| 65 | |-------------------------------------------------------------------------- | 65 | |-------------------------------------------------------------------------- | |
| 66 | | Session Database Connection | 66 | | Session Database Connection | |
| 67 | |-------------------------------------------------------------------------- | 67 | |-------------------------------------------------------------------------- | |
| 68 | | | 68 | | | |
| 69 | | When using the "database" or "redis" session drivers, you may specify a | 69 | | When using the "database" or "redis" session drivers, you may specify a | |
| 70 | | connection that should be used to manage these sessions. This should | 70 | | connection that should be used to manage these sessions. This should | |
| 71 | | correspond to a connection in your database configuration options. | 71 | | correspond to a connection in your database configuration options. | |
| 72 | | | 72 | | | |
| 73 | */ | 73 | */ | |
| 74 | 74 | |||
| 75 | 'connection' => env('SESSION_CONNECTION', null), | 75 | 'connection' => env('SESSION_CONNECTION', null), | |
| 76 | 76 | |||
| 77 | /* | 77 | /* | |
| 78 | |-------------------------------------------------------------------------- | 78 | |-------------------------------------------------------------------------- | |
| 79 | | Session Database Table | 79 | | Session Database Table | |
| 80 | |-------------------------------------------------------------------------- | 80 | |-------------------------------------------------------------------------- | |
| 81 | | | 81 | | | |
| 82 | | When using the "database" session driver, you may specify the table we | 82 | | When using the "database" session driver, you may specify the table we | |
| 83 | | should use to manage the sessions. Of course, a sensible default is | 83 | | should use to manage the sessions. Of course, a sensible default is | |
| 84 | | provided for you; however, you are free to change this as needed. | 84 | | provided for you; however, you are free to change this as needed. | |
| 85 | | | 85 | | | |
| 86 | */ | 86 | */ | |
| 87 | 87 | |||
| 88 | 'table' => 'sessions', | 88 | 'table' => 'sessions', | |
| 89 | 89 | |||
| 90 | /* | 90 | /* | |
| 91 | |-------------------------------------------------------------------------- | 91 | |-------------------------------------------------------------------------- | |
| 92 | | Session Cache Store | 92 | | Session Cache Store | |
| 93 | |-------------------------------------------------------------------------- | 93 | |-------------------------------------------------------------------------- | |
| 94 | | | 94 | | | |
| 95 | | When using the "apc", "memcached", or "dynamodb" session drivers you may | <> | 95 | | While using one of the framework's cache driven session backends you may |
| 96 | | list a cache store that should be used for these sessions. This value | = | 96 | | list a cache store that should be used for these sessions. This value |
| 97 | | must match with one of the application's configured cache "stores". | 97 | | must match with one of the application's configured cache "stores". | |
| -+ | 98 | | | ||
| 99 | | Affects: "apc", "dynamodb", "memcached", "redis" | |||
| 98 | | | = | 100 | | |
| 99 | */ | 101 | */ | |
| 100 | 102 | |||
| 101 | 'store' => env('SESSION_STORE', null), | 103 | 'store' => env('SESSION_STORE', null), | |
| 102 | 104 | |||
| 103 | /* | 105 | /* | |
| 104 | |-------------------------------------------------------------------------- | 106 | |-------------------------------------------------------------------------- | |
| 105 | | Session Sweeping Lottery | 107 | | Session Sweeping Lottery | |
| 106 | |-------------------------------------------------------------------------- | 108 | |-------------------------------------------------------------------------- | |
| 107 | | | 109 | | | |
| 108 | | Some session drivers must manually sweep their storage location to get | 110 | | Some session drivers must manually sweep their storage location to get | |
| 109 | | rid of old sessions from storage. Here are the chances that it will | 111 | | rid of old sessions from storage. Here are the chances that it will | |
| 110 | | happen on a given request. By default, the odds are 2 out of 100. | 112 | | happen on a given request. By default, the odds are 2 out of 100. | |
| 111 | | | 113 | | | |
| 112 | */ | 114 | */ | |
| 113 | 115 | |||
| 114 | 'lottery' => [2, 100], | 116 | 'lottery' => [2, 100], | |
| 115 | 117 | |||
| 116 | /* | 118 | /* | |
| 117 | |-------------------------------------------------------------------------- | 119 | |-------------------------------------------------------------------------- | |
| 118 | | Session Cookie Name | 120 | | Session Cookie Name | |
| 119 | |-------------------------------------------------------------------------- | 121 | |-------------------------------------------------------------------------- | |
| 120 | | | 122 | | | |
| 121 | | Here you may change the name of the cookie used to identify a session | 123 | | Here you may change the name of the cookie used to identify a session | |
| 122 | | instance by ID. The name specified here will get used every time a | 124 | | instance by ID. The name specified here will get used every time a | |
| 123 | | new session cookie is created by the framework for every driver. | 125 | | new session cookie is created by the framework for every driver. | |
| 124 | | | 126 | | | |
| 125 | */ | 127 | */ | |
| 126 | 128 | |||
| 127 | 'cookie' => env( | 129 | 'cookie' => env( | |
| 128 | 'SESSION_COOKIE', | 130 | 'SESSION_COOKIE', | |
| 129 | Str::slug(env('APP_NAME', 'laravel'), '_').'_session' | 131 | Str::slug(env('APP_NAME', 'laravel'), '_').'_session' | |
| 130 | ), | 132 | ), | |
| 131 | 133 | |||
| 132 | /* | 134 | /* | |
| 133 | |-------------------------------------------------------------------------- | 135 | |-------------------------------------------------------------------------- | |
| 134 | | Session Cookie Path | 136 | | Session Cookie Path | |
| 135 | |-------------------------------------------------------------------------- | 137 | |-------------------------------------------------------------------------- | |
| 136 | | | 138 | | | |
| 137 | | The session cookie path determines the path for which the cookie will | 139 | | The session cookie path determines the path for which the cookie will | |
| 138 | | be regarded as available. Typically, this will be the root path of | 140 | | be regarded as available. Typically, this will be the root path of | |
| 139 | | your application but you are free to change this when necessary. | 141 | | your application but you are free to change this when necessary. | |
| 140 | | | 142 | | | |
| 141 | */ | 143 | */ | |
| 142 | 144 | |||
| 143 | 'path' => '/', | 145 | 'path' => '/', | |
| 144 | 146 | |||
| 145 | /* | 147 | /* | |
| 146 | |-------------------------------------------------------------------------- | 148 | |-------------------------------------------------------------------------- | |
| 147 | | Session Cookie Domain | 149 | | Session Cookie Domain | |
| 148 | |-------------------------------------------------------------------------- | 150 | |-------------------------------------------------------------------------- | |
| 149 | | | 151 | | | |
| 150 | | Here you may change the domain of the cookie used to identify a session | 152 | | Here you may change the domain of the cookie used to identify a session | |
| 151 | | in your application. This will determine which domains the cookie is | 153 | | in your application. This will determine which domains the cookie is | |
| 152 | | available to in your application. A sensible default has been set. | 154 | | available to in your application. A sensible default has been set. | |
| 153 | | | 155 | | | |
| 154 | */ | 156 | */ | |
| 155 | 157 | |||
| 156 | 'domain' => env('SESSION_DOMAIN', null), | 158 | 'domain' => env('SESSION_DOMAIN', null), | |
| 157 | 159 | |||
| 158 | /* | 160 | /* | |
| 159 | |-------------------------------------------------------------------------- | 161 | |-------------------------------------------------------------------------- | |
| 160 | | HTTPS Only Cookies | 162 | | HTTPS Only Cookies | |
| 161 | |-------------------------------------------------------------------------- | 163 | |-------------------------------------------------------------------------- | |
| 162 | | | 164 | | | |
| 163 | | By setting this option to true, session cookies will only be sent back | 165 | | By setting this option to true, session cookies will only be sent back | |
| 164 | | to the server if the browser has a HTTPS connection. This will keep | 166 | | to the server if the browser has a HTTPS connection. This will keep | |
| 165 | | the cookie from being sent to you if it can not be done securely. | 167 | | the cookie from being sent to you if it can not be done securely. | |
| 166 | | | 168 | | | |
| 167 | */ | 169 | */ | |
| 168 | 170 | |||
| 169 | 'secure' => env('SESSION_SECURE_COOKIE', null), | <> | 171 | 'secure' => env('SESSION_SECURE_COOKIE'), |
| 170 | = | 172 | ||
| 171 | /* | 173 | /* | |
| 172 | |-------------------------------------------------------------------------- | 174 | |-------------------------------------------------------------------------- | |
| 173 | | HTTP Access Only | 175 | | HTTP Access Only | |
| 174 | |-------------------------------------------------------------------------- | 176 | |-------------------------------------------------------------------------- | |
| 175 | | | 177 | | | |
| 176 | | Setting this value to true will prevent JavaScript from accessing the | 178 | | Setting this value to true will prevent JavaScript from accessing the | |
| 177 | | value of the cookie and the cookie will only be accessible through | 179 | | value of the cookie and the cookie will only be accessible through | |
| 178 | | the HTTP protocol. You are free to modify this option if needed. | 180 | | the HTTP protocol. You are free to modify this option if needed. | |
| 179 | | | 181 | | | |
| 180 | */ | 182 | */ | |
| 181 | 183 | |||
| 182 | 'http_only' => true, | 184 | 'http_only' => true, | |
| 183 | 185 | |||
| 184 | /* | 186 | /* | |
| 185 | |-------------------------------------------------------------------------- | 187 | |-------------------------------------------------------------------------- | |
| 186 | | Same-Site Cookies | 188 | | Same-Site Cookies | |
| 187 | |-------------------------------------------------------------------------- | 189 | |-------------------------------------------------------------------------- | |
| 188 | | | 190 | | | |
| 189 | | This option determines how your cookies behave when cross-site requests | 191 | | This option determines how your cookies behave when cross-site requests | |
| 190 | | take place, and can be used to mitigate CSRF attacks. By default, we | 192 | | take place, and can be used to mitigate CSRF attacks. By default, we | |
| 191 | | do not enable this as other CSRF protection services are in place. | <> | 193 | | will set this value to "lax" since this is a secure default value. |
| 192 | | | = | 194 | | |
| 193 | | Supported: "lax", "strict", "none" | <> | 195 | | Supported: "lax", "strict", "none", null |
| 194 | | | = | 196 | | |
| 195 | */ | 197 | */ | |
| 196 | 198 | |||
| 197 | 'same_site' => 'lax', | 199 | 'same_site' => 'lax', | |
| 198 | 200 | |||
| 199 | ]; | 201 | ]; |