Central Security Centre

* Security policy management
* Minimum password-length policy
* Mixed-case, number, and symbol requirements
* Password expiry and history settings
* MFA requirement policy
* Failed-login and lockout settings
* Session idle-time policy
* Single-session policy
* Automatic successful-login recording
* Automatic failed-login recording
* Automatic logout recording
* Authentication history
* IP allow and deny rules
* IPv4 CIDR support
* Administration and login rule scopes
* Trusted-device storage and revocation
* Security middleware registration
* Administration navigation
* Security permissions
* Module registration and tests
This commit is contained in:
Mark Gregory
2026-07-24 12:30:40 +01:00
parent 86f2bc75aa
commit 7fb71c4d24
21 changed files with 270 additions and 3 deletions
+8
View File
@@ -0,0 +1,8 @@
<?php
return [
'record_authentication_events' => (bool) env('SECURITY_RECORD_AUTH_EVENTS', true),
'trusted_device_days' => (int) env('SECURITY_TRUSTED_DEVICE_DAYS', 30),
'session_idle_minutes' => (int) env('SECURITY_SESSION_IDLE_MINUTES', 120),
'max_failed_logins' => (int) env('SECURITY_MAX_FAILED_LOGINS', 10),
'lockout_minutes' => (int) env('SECURITY_LOCKOUT_MINUTES', 15),
];