final class AuthFlowSessionKeys (View source)

$_SESSION keys owned by the authentication flows: MFA, the OIDC and SAML logout round trips, and password and username recovery.

The login and user identity keys stay in {\Poweradmin\Domain\Service\Auth\SessionKeys}; the pending identity and OIDC/SAML session keys stay there too because SessionPromotionService reads them.

Constants

MFA_STATE

Authoritative MFA verification state; see {\Poweradmin\Domain\Enum\MfaSessionState}.

MFA_REQUIRED

MFA_STATUS

MFA_TOKEN

MFA_VERIFICATION_TOKEN

MFA_SETUP_ENFORCED

OIDC_STATE

SAML_SLO_PENDING

REMOTE_USER_SIGNED_OUT

PASSWORD_RESET_TOKEN

RESET_PASSWORD_TOKEN

USERNAME_RECOVERY_TOKEN