# Sassly Auth settings for one app (example: Onix).
# Keep comments on their own lines: some .env loaders keep "# ..." after a value as part of it.

SASSLY_AUTH_ISSUER=https://auth.sassly.ai
SASSLY_AUTH_CLIENT_ID=onix
# Shown once by: php bin/auth client:create ...  (never commit it)
SASSLY_AUTH_CLIENT_SECRET=
# Must equal the registered redirect URI exactly (scheme, host, path, no trailing slash change)
SASSLY_AUTH_REDIRECT_URI=https://onix.sassly.ai/auth/callback
SASSLY_AUTH_POST_LOGOUT_REDIRECT_URI=https://onix.sassly.ai/
# Writable by the PHP-FPM user (www-data)
SASSLY_AUTH_CACHE_DIR=/var/www/onix/storage/cache/sassly-auth
SASSLY_AUTH_REVALIDATE_INTERVAL=300
# Unique per app, host-only, never used before with Domain=.sassly.ai
APP_SESSION_NAME=onix_sid

# Local development with Valet (https://auth.sassly.test):
# SASSLY_AUTH_ISSUER=https://auth.sassly.test
# SASSLY_AUTH_REDIRECT_URI=https://onix.sassly.test/auth/callback
# SASSLY_AUTH_POST_LOGOUT_REDIRECT_URI=https://onix.sassly.test/
# PHP's curl does not trust Valet's CA by default:
# SASSLY_AUTH_CA_FILE=/Users/<you>/.config/valet/CA/LaravelValetCASelfSigned.pem