.env.igrp.example

# ============================================
# Authentication Configuration (Keycloak)
# ============================================
# Keycloak Client ID - The client identifier registered in your Keycloak realm
# Example: my-app-client
KEYCLOAK_CLIENT_ID=

# Keycloak Client Secret - The secret key for your Keycloak client
# Get this from Keycloak Admin Console > Clients > Your Client > Credentials
KEYCLOAK_CLIENT_SECRET=

# Keycloak Issuer URL - The base URL of your Keycloak server with realm
# Example: https://keycloak.example.com/realms/my-realm
KEYCLOAK_ISSUER=

# ============================================
# NextAuth Configuration
# ============================================
# NextAuth URL - The public URL where your application is accessible
# Example: https://myapp.example.com or http://localhost:3000
NEXTAUTH_URL=

# NextAuth Secret - A random secret string used to encrypt JWT tokens and cookies
# Generate one with: openssl rand -base64 32
# Or use: https://generate-secret.vercel.app/32
NEXTAUTH_SECRET=

# NextAuth Internal URL - Internal URL for server-to-server communication
# Usually same as NEXTAUTH_URL, but can be different in Docker/K8s environments
# Example: http://localhost:3000 (for local) or http://nextjs-service:3000 (for K8s)
NEXTAUTH_URL_INTERNAL=

# ============================================
# IGRP Framework Configuration
# ============================================
# IGRP Access Manager API - Base URL for the IGRP App Manager API
# Example: https://api.example.com/igrp-manager
IGRP_ACCESS_MANAGEMENT_API=

# IGRP App Code - Unique identifier for your application in the IGRP framework
# Example: demo-app | DEMO_APP | APP-DEMO
IGRP_APP_CODE=

# IGRP Preview Mode - Enable preview mode to skip authentication checks
# Set to true to disable authentication (useful for development/demo)
# Set to false or leave empty to enable authentication
# Values: true or false (case-insensitive, handles quotes)
IGRP_PREVIEW_MODE=

# Enable on code menu synchronization
# When set to true, synchronizes menus defined in code with the IGRP system
# Set to false to disable code-based menu synchronization
# Values: true or false
IGRP_SYNC_ON_CODE_MENUS=

# Enable access management synchronization
# When set to true, synchronizes applications, resources, and menus with the IGRP Access Management API
# Set to false to disable access management synchronization
# Values: true or false
IGRP_SYNC_ACCESS=

## ============================================
# M2M Access Management API authentication
# Service ID and Token used for machine-to-machine authentication with the iGRP Access Management API
# These credentials are required when IGRP_SYNC_ACCESS is set to true
## ============================================

# M2M Service ID - Unique identifier for your service
# Example: demo-igrp or your-service-name
IGRP_M2M_SERVICE_ID=

# M2M Token - Authentication token for machine-to-machine API calls
# Get this from your iGRP Access Management administrator
# Example: igrp-access-m2m-sync-token-1234
IGRP_M2M_TOKEN=

# ============================================
# Next.js Public Configuration
# ============================================
# Next IGRP App Center URL - URL to the IGRP Application Center
# Used for app switching functionality
# Example: https://appcenter.example.com
NEXT_IGRP_APP_CENTER_URL=

# Next Public Base Path - Base path for the application (if deployed in a subdirectory)
# Leave empty if app is at root domain
# Example: /my-app (if app is at https://example.com/my-app)
NEXT_PUBLIC_BASE_PATH=

# Next Public IGRP App Home Slug - Default route to redirect after login
# Leave empty or set to "/" to show home page
# Example: /dashboard or /home
NEXT_PUBLIC_IGRP_APP_HOME_SLUG=

# Next Public Allowed Domains - Comma-separated list of allowed image domains
# Used for Next.js Image component remotePatterns configuration
# Example: example.com,cdn.example.com,images.example.com
NEXT_PUBLIC_ALLOWED_DOMAINS=