<?php

return [

  /*
  |--------------------------------------------------------------------------
  | Face login (API)
  |--------------------------------------------------------------------------
  | Disabled by default in production. Set FACE_LOGIN_ENABLED=true only when
  | you accept the security trade-offs of perceptual-hash face matching.
  */
    'face_login_enabled' => filter_var(env('FACE_LOGIN_ENABLED', false), FILTER_VALIDATE_BOOL),

    /*
    |--------------------------------------------------------------------------
    | Two-factor verification lockout
    |--------------------------------------------------------------------------
    */
    'two_factor_max_attempts' => (int) env('TWO_FACTOR_MAX_ATTEMPTS', 5),
    'two_factor_lockout_minutes' => (int) env('TWO_FACTOR_LOCKOUT_MINUTES', 15),

    /*
    |--------------------------------------------------------------------------
    | API tokens (Sanctum)
    |--------------------------------------------------------------------------
    */
    'api_revoke_tokens_on_login' => filter_var(env('API_REVOKE_TOKENS_ON_LOGIN', true), FILTER_VALIDATE_BOOL),

];