* Security policy management * Minimum password-length policy * Mixed-case, number, and symbol requirements * Password expiry and history settings * MFA requirement policy * Failed-login and lockout settings * Session idle-time policy * Single-session policy * Automatic successful-login recording * Automatic failed-login recording * Automatic logout recording * Authentication history * IP allow and deny rules * IPv4 CIDR support * Administration and login rule scopes * Trusted-device storage and revocation * Security middleware registration * Administration navigation * Security permissions * Module registration and tests
11 lines
902 B
PHP
11 lines
902 B
PHP
<?php
|
|
use Illuminate\Support\Facades\Route;
|
|
use Modules\Security\Http\Controllers\SecurityController;
|
|
Route::prefix('administration/security')->name('administration.security.')->middleware(['auth','permission:security.view','security.ip:admin'])->group(function(){
|
|
Route::get('/',[SecurityController::class,'index'])->name('index');
|
|
Route::put('/policy',[SecurityController::class,'savePolicy'])->middleware('permission:security.manage')->name('policy.update');
|
|
Route::post('/ip-rules',[SecurityController::class,'storeRule'])->middleware('permission:security.manage')->name('rules.store');
|
|
Route::delete('/ip-rules/{rule}',[SecurityController::class,'destroyRule'])->middleware('permission:security.manage')->name('rules.destroy');
|
|
Route::delete('/devices/{device}',[SecurityController::class,'revokeDevice'])->middleware('permission:security.manage')->name('devices.revoke');
|
|
});
|