|
193 | 193 | // Warning: if you disable this, the password recovery routes (below) will be disabled too! |
194 | 194 | 'setup_auth_routes' => true, |
195 | 195 |
|
196 | | - // Set this to false if you would like to skip adding the password recovery routes |
197 | | - // (you then need to manually define the routes in your web.php) |
198 | | - 'setup_password_recovery_routes' => true, |
199 | | - |
200 | | - // the ThrottleRequests Laravel middleware is used to prevent abuse from your recovery password functionality. |
201 | | - // here you can configure how many attempts a user can make to recover the password in a given time. |
202 | | - |
203 | | - // how much time to wait between password reset request notification ? User should be allow to attempt 1 request every: ? (defaults to 1 request every 60 seconds) |
204 | | - // this is the time to wait for the email to arrive before trying to reset again |
205 | | - 'password_recovery_throttle_notifications' => 60, // time in seconds |
206 | | - |
207 | | - // how many times in any given time period should the user be allowed to attempt a password reset? (defaults to 2,5 - 2 times every 5 minutes.) |
208 | | - // take into account that user migth wrongly type an email at first, is plausible, so atleast allow one more shoot. |
209 | | - 'password_recovery_throttle_access' => '2,5', // 2 - how many times // 5 - interval in minutes |
210 | | - |
211 | 196 | // Set this to false if you would like to skip adding the dashboard routes |
212 | 197 | // (you then need to overwrite the login route on your AuthController) |
213 | 198 | 'setup_dashboard_routes' => true, |
|
216 | 201 | // (you then need to manually define the routes in your web.php) |
217 | 202 | 'setup_my_account_routes' => true, |
218 | 203 |
|
| 204 | + // Set this to false if you would like to skip adding the password recovery routes |
| 205 | + // (you then need to manually define the routes in your web.php) |
| 206 | + 'setup_password_recovery_routes' => true, |
| 207 | + |
| 208 | + /* |
| 209 | + |-------------------------------------------------------------------------- |
| 210 | + | Security |
| 211 | + |-------------------------------------------------------------------------- |
| 212 | + */ |
| 213 | + |
| 214 | + // Backpack will prevent visitors from requesting password recovery too many times |
| 215 | + // for a certain email, to make sure they cannot be spammed that way. |
| 216 | + // How many seconds should a visitor wait, after they've requested a |
| 217 | + // password reset, before they can try again for the same email? |
| 218 | + 'password_recovery_throttle_notifications' => 60, // time in seconds |
| 219 | + |
| 220 | + // Backpack will prevent an IP from trying to reset the password too many times, |
| 221 | + // so that a malicious actor cannot try too many emails, too see if they have |
| 222 | + // accounts or to increase the AWS/SendGrid/etc bill. |
| 223 | + // |
| 224 | + // How many times in any given time period should the user be allowed to |
| 225 | + // attempt a password reset? Take into account that user might wrongly |
| 226 | + // type an email at first, so at least allow one more try. |
| 227 | + 'password_recovery_throttle_access' => '2,5', // (defaults to 2,5 - 2 times every 5 minutes) |
| 228 | + |
219 | 229 | /* |
220 | 230 | |-------------------------------------------------------------------------- |
221 | 231 | | Authentication |
|
0 commit comments