6290a3a448
states, and pulls data from the authenticated /api/v1/tenant/packages endpoint.
(resources/js/admin/pages/EventFormPage.tsx, resources/js/admin/api.ts)
- Harden tenant-admin auth flow: prevent PKCE state loss, scope out StrictMode double-processing, add SPA
routes for /event-admin/login and /event-admin/logout, and tighten token/session clearing semantics (resources/js/admin/auth/{context,tokens}.tsx, resources/js/admin/pages/{AuthCallbackPage,LogoutPage}.tsx,
resources/js/admin/router.tsx, routes/web.php)
108 lines
2.0 KiB
Plaintext
108 lines
2.0 KiB
Plaintext
APP_NAME=Laravel
|
|
APP_ENV=local
|
|
APP_KEY=
|
|
APP_DEBUG=true
|
|
APP_URL=http://localhost
|
|
|
|
APP_LOCALE=en
|
|
APP_FALLBACK_LOCALE=en
|
|
APP_FAKER_LOCALE=en_US
|
|
|
|
APP_MAINTENANCE_DRIVER=file
|
|
# APP_MAINTENANCE_STORE=database
|
|
|
|
PHP_CLI_SERVER_WORKERS=4
|
|
|
|
BCRYPT_ROUNDS=12
|
|
|
|
LOG_CHANNEL=stack
|
|
LOG_STACK=single
|
|
LOG_DEPRECATIONS_CHANNEL=null
|
|
LOG_LEVEL=debug
|
|
|
|
DB_CONNECTION=sqlite
|
|
# DB_HOST=127.0.0.1
|
|
# DB_PORT=3306
|
|
# DB_DATABASE=laravel
|
|
# DB_USERNAME=root
|
|
# DB_PASSWORD=
|
|
|
|
SESSION_DRIVER=database
|
|
SESSION_LIFETIME=120
|
|
SESSION_ENCRYPT=false
|
|
SESSION_PATH=/
|
|
SESSION_DOMAIN=null
|
|
|
|
BROADCAST_CONNECTION=log
|
|
FILESYSTEM_DISK=local
|
|
QUEUE_CONNECTION=database
|
|
|
|
CACHE_STORE=database
|
|
# CACHE_PREFIX=
|
|
|
|
MEMCACHED_HOST=127.0.0.1
|
|
|
|
REDIS_CLIENT=phpredis
|
|
REDIS_HOST=127.0.0.1
|
|
REDIS_PASSWORD=null
|
|
REDIS_PORT=6379
|
|
|
|
MAIL_MAILER=log
|
|
MAIL_SCHEME=null
|
|
MAIL_HOST=127.0.0.1
|
|
MAIL_PORT=2525
|
|
MAIL_USERNAME=null
|
|
MAIL_PASSWORD=null
|
|
MAIL_FROM_ADDRESS="hello@example.com"
|
|
MAIL_FROM_NAME="${APP_NAME}"
|
|
|
|
AWS_ACCESS_KEY_ID=
|
|
AWS_SECRET_ACCESS_KEY=
|
|
AWS_DEFAULT_REGION=us-east-1
|
|
AWS_BUCKET=
|
|
AWS_USE_PATH_STYLE_ENDPOINT=false
|
|
|
|
# Stripe
|
|
STRIPE_KEY=
|
|
STRIPE_SECRET=
|
|
STRIPE_WEBHOOK_SECRET=
|
|
STRIPE_CONNECT_CLIENT_ID=
|
|
STRIPE_CONNECT_SECRET=
|
|
|
|
# Google OAuth (Checkout comfort login)
|
|
GOOGLE_CLIENT_ID=
|
|
GOOGLE_CLIENT_SECRET=
|
|
GOOGLE_REDIRECT_URI=${APP_URL}/checkout/auth/google/callback
|
|
|
|
VITE_APP_NAME="${APP_NAME}"
|
|
REVENUECAT_WEBHOOK_SECRET=
|
|
REVENUECAT_PRODUCT_MAPPINGS=
|
|
REVENUECAT_APP_USER_PREFIX=tenant
|
|
REVENUECAT_WEBHOOK_QUEUE=webhooks
|
|
|
|
CHECKOUT_WIZARD_ENABLED=true
|
|
CHECKOUT_WIZARD_FLAG=checkout-wizard-2025
|
|
|
|
OAUTH_JWT_KID=fotospiel-jwt
|
|
OAUTH_KEY_STORE=
|
|
OAUTH_REFRESH_ENFORCE_IP=true
|
|
OAUTH_REFRESH_ALLOW_SUBNET=false
|
|
OAUTH_REFRESH_MAX_ACTIVE=5
|
|
OAUTH_REFRESH_AUDIT_RETENTION_DAYS=90
|
|
JOIN_TOKEN_FAILURE_LIMIT=10
|
|
JOIN_TOKEN_FAILURE_DECAY=5
|
|
JOIN_TOKEN_ACCESS_LIMIT=120
|
|
JOIN_TOKEN_ACCESS_DECAY=1
|
|
JOIN_TOKEN_DOWNLOAD_LIMIT=60
|
|
JOIN_TOKEN_DOWNLOAD_DECAY=1
|
|
|
|
# Security scanning
|
|
SECURITY_AV_ENABLED=false
|
|
SECURITY_AV_BINARY=/usr/bin/clamscan
|
|
SECURITY_AV_ARGUMENTS=--no-summary
|
|
SECURITY_AV_TIMEOUT=60
|
|
SECURITY_STRIP_EXIF=true
|
|
SECURITY_SCAN_QUEUE=media-security
|
|
|
|
|