Settings

The Settings section provides a form interface for all runtime settings stored in the settings database table. Changes take effect immediately — no restart required.

Settings categories

Settings are grouped by category:

Category	Examples
Authentication	auth_mode, require_mfa, mfa_method
Token lifetimes	access_token_expiration, refresh_token_expiration
SSO sessions	sso_enabled, sso_session_idle_timeout, sso_session_max_age
Account security	account_lockout_max_attempts, account_lockout_duration
SMTP	smtp_host, smtp_port, smtp_username, smtp_from
Trusted devices	trust_device_enabled, trust_device_expiration
Passkeys	passkey_rp_name
Validation	validation_min_username_length, validation_email_required
Theming	theme_title, theme_logo_url, theme_brand_color, theme_tagline, theme_css_inline, email_footer_text, footer_links
Cleanup	cleanup_interval, cleanup_retention

Saving changes

Click Save to write changes to the settings table. The running server reads the new values immediately — settings are hot-reloaded without a restart.

API

All settings can also be managed via the API:

# Get all settings
curl https://auth.example.com/admin/api/settings \
  -H "Authorization: Bearer $ADMIN_TOKEN"

# Update one or more settings
curl -X PUT https://auth.example.com/admin/api/settings \
  -H "Authorization: Bearer $ADMIN_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"require_mfa": "true", "mfa_method": "totp"}'

See Runtime Settings for the full reference table.