isProduction() ? Password::min(8) ->numbers() ->mixedCase() ->uncompromised() : Password::min(6); }); RateLimiter::for('api.login', function (Request $request) { return Limit::perMinutes(5, 5)->by($request->ip()); }); RateLimiter::for('api', function (Request $request) { return Limit::perMinute(120)->by($request->user()?->id ?: $request->ip()); }); } }