Security

Session, password rules and sensitive operations. Two-factor is available via account security when enabled in Fortify.

@csrf @method('PUT')

Session timeout (minutes)

Minimum password length

Login attempt limit

Require strong passwords Optional 2FA prompt for users Allow exports for non-admins Require approval workflows for sensitive financial actions