/**
 * Holds the Laravel CMS API token. The `__Host-` prefix makes browsers refuse
 * the cookie unless it is Secure, host-only and scoped to "/", so a sibling
 * subdomain can never overwrite it. It requires HTTPS, so development uses a
 * plain name.
 */
export const SESSION_COOKIE =
  process.env.NODE_ENV === "production" ? "__Host-cms_session" : "cms_session";

/** Cookie lifetime. Laravel expires the token itself (7 days unused, 30 days at most). */
export const SESSION_MAX_AGE_MS = 30 * 24 * 60 * 60 * 1000;

export const PASSWORD_MIN_LENGTH = 12;
export const PASSWORD_MAX_LENGTH = 128;