<?php
-return [
+/**
+ * Authentication configuration options.
+ *
+ * Changes to these config files are not supported by BookStack and may break upon updates.
+ * Configuration should be altered via the `.env` file or environment variables.
+ * Do not edit this file unless you're happy to maintain any changes yourself.
+ */
+return [
+ // Method of authentication to use
+ // Options: standard, ldap
'method' => env('AUTH_METHOD', 'standard'),
- /*
- |--------------------------------------------------------------------------
- | Authentication Defaults
- |--------------------------------------------------------------------------
- |
- | This option controls the default authentication "guard" and password
- | reset options for your application. You may change these defaults
- | as required, but they're a perfect start for most applications.
- |
- */
-
+ // Authentication Defaults
+ // This option controls the default authentication "guard" and password
+ // reset options for your application.
'defaults' => [
'guard' => 'web',
'passwords' => 'users',
],
- /*
- |--------------------------------------------------------------------------
- | Authentication Guards
- |--------------------------------------------------------------------------
- |
- | Next, you may define every authentication guard for your application.
- | Of course, a great default configuration has been defined for you
- | here which uses session storage and the Eloquent user provider.
- |
- | All authentication drivers have a user provider. This defines how the
- | users are actually retrieved out of your database or other storage
- | mechanisms used by this application to persist your user's data.
- |
- | Supported: "session", "token"
- |
- */
-
+ // Authentication Guards
+ // All authentication drivers have a user provider. This defines how the
+ // users are actually retrieved out of your database or other storage
+ // mechanisms used by this application to persist your user's data.
+ // Supported: "session", "token"
'guards' => [
'web' => [
'driver' => 'session',
],
],
- /*
- |--------------------------------------------------------------------------
- | User Providers
- |--------------------------------------------------------------------------
- |
- | All authentication drivers have a user provider. This defines how the
- | users are actually retrieved out of your database or other storage
- | mechanisms used by this application to persist your user's data.
- |
- | If you have multiple user tables or models you may configure multiple
- | sources which represent each model / table. These sources may then
- | be assigned to any extra authentication guards you have defined.
- |
- | Supported: "database", "eloquent"
- |
- */
-
+ // User Providers
+ // All authentication drivers have a user provider. This defines how the
+ // users are actually retrieved out of your database or other storage
+ // mechanisms used by this application to persist your user's data.
+ // Supported: database, eloquent, ldap
'providers' => [
'users' => [
'driver' => env('AUTH_METHOD', 'standard') === 'standard' ? 'eloquent' : env('AUTH_METHOD'),
- 'model' => BookStack\User::class,
+ 'model' => \BookStack\Auth\User::class,
],
// 'users' => [
// ],
],
- /*
- |--------------------------------------------------------------------------
- | Resetting Passwords
- |--------------------------------------------------------------------------
- |
- | Here you may set the options for resetting passwords including the view
- | that is your password reset e-mail. You may also set the name of the
- | table that maintains all of the reset tokens for your application.
- |
- | You may specify multiple password reset configurations if you have more
- | than one user table or model in the application and you want to have
- | separate password reset settings based on the specific user types.
- |
- | The expire time is the number of minutes that the reset token should be
- | considered valid. This security feature keeps tokens short-lived so
- | they have less time to be guessed. You may change this as needed.
- |
- */
-
+ // Resetting Passwords
+ // The expire time is the number of minutes that the reset token should be
+ // considered valid. This security feature keeps tokens short-lived so
+ // they have less time to be guessed. You may change this as needed.
'passwords' => [
'users' => [
'provider' => 'users',