4 * Authentication configuration options.
6 * Changes to these config files are not supported by BookStack and may break upon updates.
7 * Configuration should be altered via the `.env` file or environment variables.
8 * Do not edit this file unless you're happy to maintain any changes yourself.
13 // Options: standard, ldap, saml2, oidc
14 'method' => env('AUTH_METHOD', 'standard'),
16 // Authentication Defaults
17 // This option controls the default authentication "guard" and password
18 // reset options for your application.
20 'guard' => env('AUTH_METHOD', 'standard'),
21 'passwords' => 'users',
24 // Authentication Guards
25 // All authentication drivers have a user provider. This defines how the
26 // users are actually retrieved out of your database or other storage
27 // mechanisms used by this application to persist your user's data.
28 // Supported drivers: "session", "api-token", "ldap-session", "async-external-session"
31 'driver' => 'session',
32 'provider' => 'users',
35 'driver' => 'ldap-session',
36 'provider' => 'external',
39 'driver' => 'async-external-session',
40 'provider' => 'external',
43 'driver' => 'async-external-session',
44 'provider' => 'external',
47 'driver' => 'api-token',
52 // All authentication drivers have a user provider. This defines how the
53 // users are actually retrieved out of your database or other storage
54 // mechanisms used by this application to persist your user's data.
57 'driver' => 'eloquent',
58 'model' => \BookStack\Auth\User::class,
62 'driver' => 'external-users',
63 'model' => \BookStack\Auth\User::class,
67 // 'driver' => 'database',
68 // 'table' => 'users',
72 // Resetting Passwords
73 // The expire time is the number of minutes that the reset token should be
74 // considered valid. This security feature keeps tokens short-lived so
75 // they have less time to be guessed. You may change this as needed.
78 'provider' => 'users',
79 'email' => 'emails.password',
80 'table' => 'password_resets',
86 // Password Confirmation Timeout
87 // Here you may define the amount of seconds before a password confirmation
88 // times out and the user is prompted to re-enter their password via the
89 // confirmation screen. By default, the timeout lasts for three hours.
90 'password_timeout' => 10800,