.env

# Database Configuration
DB_HOST=localhost
DB_PORT=5432
DB_NAME=authkit
DB_USER=authkit_user
DB_PASSWORD=authkit_password

# JWT Configuration
JWT_SECRET=dev_jwt_secret_a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6
JWT_REFRESH_SECRET=dev_refresh_secret_z9y8x7w6v5u4t3s2r1q0p9o8n7m6l5k4j3i2h1g0f9e8d7c6b5a4
JWT_EXPIRES_IN=15m
JWT_REFRESH_EXPIRES_IN=7d

# Server Configuration
NODE_ENV=development
PORT=3000

# ⚠️  WARNING: FOR DEMO ONLY - NEVER USE IN PRODUCTION ⚠️
# These are hardcoded demo credentials for development/testing
# Replace with real Google OAuth credentials in production
GOOGLE_CLIENT_ID=AUTHKIT_DEMO_CLIENT_ID
GOOGLE_CLIENT_SECRET=AUTHKIT_DEMO_SECRET
GOOGLE_REDIRECT_URI=http://localhost:3000/api/auth/google/callback

# CORS Configuration
CORS_ORIGIN=http://localhost:3001

# Rate Limiting Configuration
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX_REQUESTS=100

# Security Configuration
BCRYPT_ROUNDS=12
COOKIE_SECRET=dev_cookie_secret_m1n2o3p4q5r6s7t8u9v0w1x2y3z4a5b6c7d8e9f0g1h2i3j4k5l6

# Logging
LOG_LEVEL=info
JWT_EXPIRATION=900