Documentation: https://hypervel.org/docs/session
Store::passwordConfirmed(?string $guard = null)stamps a guard-scoped key (auth.password_confirmed_at_{guard}) instead of Laravel's single shared key, resolving the current guard when none is given.- Password-hash session artifacts are HMAC-only. Laravel's raw-hash fallbacks for legacy sessions and guards without
hashPasswordForCookie()are intentionally omitted. Custom guards used withauth.sessionmust provide that method; extendingSessionGuardsupplies it. - Hypervel's Redis session driver persists directly through Redis instead of Laravel's shared cache-backed handler. Laravel's APC, Memcached, DynamoDB, and shared cache-wrapper session drivers are not provided.
- Database sessions resolve connections by name in the current coroutine. Laravel's
SessionManager::getDatabaseConnection()hook is not provided. - Hypervel's generated sessions table uses a nullable indexed string for
user_id, supporting integer, UUID, ULID, and application-defined identifiers, together with a nullableauth_providerfor provider-qualified ownership. Itsip_addressuses the semantic IP column type, including PostgreSQL's nativeinettype. DatabaseSessionHandler::getDefaultPayload()receives the session ID before the serialized data. Laravel's scalaraddUserInformation()anduserId()hooks are not provided because Hypervel stores the authentication provider and user ID as one ownership value.
Ported from: https://github.com/laravel/framework/tree/master/src/Illuminate/Session