# ─────────────────────────────────────────────
# BASE CONFIGURATION (Production Defaults)
# ─────────────────────────────────────────────
spring:
  application:
    name: tbp-auth-service
  profiles:
    active: prod # Default profile for local startup
  jpa:
    open-in-view: true
  flyway:
    # Force Flyway to be enabled
    enabled: true
    # Create the schema history table if it does not exist
    baseline-on-migrate: true
    # Explicitly state where to look for scripts
    locations: classpath:db/migration
  threads:
    virtual:
      enabled: true
  mvc:
    apiversion:
      use:
        query-parameter: version
      default: "1.0"
      supported: 1.0, 2,0


# Actuator & Micrometer Settings
management:
  endpoints:
    web:
      exposure:
        include: health
  endpoint:
    health:
      show-details: never

# Security stuff
security:
  jwt:
    private-key: ${JWT_PRIVATE_KEY}
    public-key: ${JWT_PUBLIC_KEY}
    kid: ${JWT_KID:tbp-auth-1}

# Custom properties for CORS
app:
  build:
    # Filled from the CI run by the Dockerfile.
    commit: ${APP_BUILD_COMMIT:dev}
    time: ${APP_BUILD_TIME:}
  cors:
    # Production default: strictly allow only the frontend domain
    allowed-origins: "https://tbp.andreas-dahm.eu"
  auth:
    cookie-domain: ${APP_AUTH_COOKIE_DOMAIN:}
    cookie-secure: true
  # Auth's own public address: Steam sends the user back here after "Sign in through Steam".
  public-url: ${APP_PUBLIC_URL:http://localhost:8080}
  # Where the user lands after the Steam link.
  frontend-url: ${APP_FRONTEND_URL:http://localhost:5173}

# Registration settings
auth:
  registration:
    invitation-code: ${AUTH_INVITATION_CODE}