Opencode Agent
69dcd84d0b
- docker-compose.yml runs oidc-provider-mock on :9400 with predefined alice/bob users carrying preferred_username claims - .env auto-loaded via dotenvy for zero-config local dev - index route now redirects unauthenticated users to the login flow instead of returning 401
31 lines
977 B
Bash
31 lines
977 B
Bash
# Base URL of the OIDC provider.
|
|
# For local development, `docker-compose up -d` starts oidc-provider-mock
|
|
# at http://localhost:9400 (accepts any client ID/secret).
|
|
# For Keycloak use e.g. https://keycloak.example.com/realms/myrealm
|
|
OIDC_PROVIDER_URL=http://localhost:9400
|
|
|
|
# OAuth2 client credentials (required)
|
|
OIDC_CLIENT_ID=dev-client
|
|
OIDC_CLIENT_SECRET=dev-secret
|
|
|
|
# Full callback URL — must match the redirect URI configured at the provider
|
|
OIDC_REDIRECT_URI=http://localhost:3000/auth/callback
|
|
|
|
# Secret key for encrypting session cookies (at least 32 bytes)
|
|
OIDC_COOKIE_KEY=change-me-to-a-random-64-char-string
|
|
|
|
# Maximum session age in minutes
|
|
OIDC_SESSION_MAX_AGE=3600
|
|
|
|
# Space-separated OAuth2 scopes to request
|
|
OIDC_SCOPES=openid profile
|
|
|
|
# URL to redirect to after logout
|
|
OIDC_POST_LOGOUT_REDIRECT_URI=/
|
|
|
|
# Path to the SQLite database file for session storage
|
|
OIDC_SQLITE_PATH=sessions.db
|
|
|
|
# Base path for auth routes (default: /auth)
|
|
OIDC_AUTH_BASE_PATH=/auth
|