7ff00426f2
- Updated `ARCHITECTURE.md` with thorough explanations of OAuth Consumer and Provider modes, supported flows, security features, and endpoints. - Enhanced `.env.template` with environment variables for OAuth Provider mode setup. - Expanded `README.md` to highlight OAuth Provider mode capabilities and MCP integration features. - Added OAuth configuration section to `AGENTS.md`, including key settings for both social login and provider mode.
55 lines
1.9 KiB
Plaintext
55 lines
1.9 KiB
Plaintext
# Common settings
|
|
PROJECT_NAME=App
|
|
VERSION=1.0.0
|
|
|
|
# Database settings
|
|
POSTGRES_USER=postgres
|
|
POSTGRES_PASSWORD=postgres
|
|
POSTGRES_DB=app
|
|
POSTGRES_HOST=db
|
|
POSTGRES_PORT=5432
|
|
DATABASE_URL=postgresql://postgres:postgres@db:5432/app
|
|
|
|
# Backend settings
|
|
BACKEND_PORT=8000
|
|
# CRITICAL: Generate a secure SECRET_KEY for production!
|
|
# Generate with: python -c 'import secrets; print(secrets.token_urlsafe(32))'
|
|
# Must be at least 32 characters
|
|
SECRET_KEY=demo_secret_key_for_testing_only_do_not_use_in_prod
|
|
ENVIRONMENT=development
|
|
DEMO_MODE=true
|
|
DEBUG=true
|
|
BACKEND_CORS_ORIGINS=["http://localhost:3000"]
|
|
FIRST_SUPERUSER_EMAIL=admin@example.com
|
|
# IMPORTANT: Use a strong password (min 12 chars, mixed case, digits)
|
|
# Default weak passwords like 'Admin123' are rejected
|
|
FIRST_SUPERUSER_PASSWORD=Admin123!
|
|
|
|
# OAuth Configuration (Social Login)
|
|
# Set OAUTH_ENABLED=true and configure at least one provider
|
|
OAUTH_ENABLED=false
|
|
OAUTH_AUTO_LINK_BY_EMAIL=true
|
|
|
|
# Google OAuth (from Google Cloud Console > APIs & Services > Credentials)
|
|
# https://console.cloud.google.com/apis/credentials
|
|
# OAUTH_GOOGLE_CLIENT_ID=your-google-client-id.apps.googleusercontent.com
|
|
# OAUTH_GOOGLE_CLIENT_SECRET=your-google-client-secret
|
|
|
|
# GitHub OAuth (from GitHub > Settings > Developer settings > OAuth Apps)
|
|
# https://github.com/settings/developers
|
|
# OAUTH_GITHUB_CLIENT_ID=your-github-client-id
|
|
# OAUTH_GITHUB_CLIENT_SECRET=your-github-client-secret
|
|
|
|
# OAuth Provider Mode (Authorization Server for MCP/third-party clients)
|
|
# Set OAUTH_PROVIDER_ENABLED=true to act as an OAuth 2.0 Authorization Server
|
|
OAUTH_PROVIDER_ENABLED=true
|
|
# IMPORTANT: Must be HTTPS in production!
|
|
OAUTH_ISSUER=http://localhost:8000
|
|
|
|
# Frontend settings
|
|
FRONTEND_PORT=3000
|
|
FRONTEND_URL=http://localhost:3000
|
|
NEXT_PUBLIC_API_URL=http://localhost:8000
|
|
NEXT_PUBLIC_API_BASE_URL=http://localhost:8000
|
|
NEXT_PUBLIC_APP_URL=http://localhost:3000
|
|
NODE_ENV=development |