'web', // Limitador propio ADEMÁS del "throttle" (60/min por IP) que Passport ya // trae hardcodeado en /oauth/token — este es más estricto y va por // (ip, client_id), así que un ataque de fuerza bruta contra un client no // le come el cupo a los demás. Ver AppServiceProvider::configureRateLimiting(). 'middleware' => ['throttle:oauth-token'], /* |-------------------------------------------------------------------------- | Encryption Keys |-------------------------------------------------------------------------- | | Passport uses encryption keys while generating secure access tokens for | your application. By default, the keys are stored as local files but | can be set via environment variables when that is more convenient. | */ 'private_key' => env('PASSPORT_PRIVATE_KEY'), 'public_key' => env('PASSPORT_PUBLIC_KEY'), /* |-------------------------------------------------------------------------- | Passport Database Connection |-------------------------------------------------------------------------- | | By default, Passport's models will utilize your application's default | database connection. If you wish to use a different connection you | may specify the configured name of the database connection here. | */ 'connection' => env('PASSPORT_CONNECTION'), ];