Sessions

By default, Qore uses Laravel Sanctum to authenticate users.

info

You can also authenticate via a Bearer token when sessions are not an option (See documentation)

Qore has its own driver: Qore\System\Drivers\DatabaseSessionHandler to handle session management. Sessions are stored in the database.

To make sure expired sessions will be deleted after a period of time (defined in config/session.php), The App\Console\Kernel.php has a scheduled task:

protected function schedule(Schedule $schedule)
{
    $schedule->command('sessions:delete_expired')->everyFifteenMinutes();
    $schedule->command('background_processes:delete_expired')->hourly();
}

You can find more information on Sanctum here: https://laravel.com/docs/8.x/sanctum