<?php

use Laravel\Sanctum\Sanctum;

return [
    /*
    |--------------------------------------------------------------------------
    | Stateful Domains
    |--------------------------------------------------------------------------
    |
    | Requests from the following domains / hosts will receive stateful API
    | authentication cookies. Typically, these should include your local
    | and production domains which access your API via a frontend SPA.
    |
    */

    'stateful' => explode(
        ',',
        env(
            'SANCTUM_STATEFUL_DOMAINS',
            sprintf(
                '%s%s',
                'localhost,localhost:3000,localhost:4200,localhost:5173,127.0.0.1,127.0.0.1:8000,::1',
                Sanctum::currentApplicationUrlWithPort(),
            ),
        ),
    ),
    /*
  |--------------------------------------------------------------------------
  | Expiration Minutes
  |--------------------------------------------------------------------------
  |
  | This value controls the number of minutes until an issued token will be
  | considered expired. If this value is null, personal access tokens do
  | not expire. This won't tweak the lifetime of first-party sessions.
  |
  */

    'expiration' => null,

    /*
    |--------------------------------------------------------------------------
    | Sanctum Middleware
    |--------------------------------------------------------------------------
    |
    | When authenticating your first-party SPA with Sanctum you may need to
    | customize some of the middleware Sanctum uses while processing the
    | request. You may change the middleware listed below as required.
    |
    */

    'middleware' => [
        'verify_csrf_token' => App\Http\Middleware\VerifyCsrfToken::class,
        'encrypt_cookies' => App\Http\Middleware\EncryptCookies::class,
    ],
];