refactor(frontend): centralize configurable auth/session values in config.ts

2026-07-05 23:43:50 +02:00
parent 46c7d5dbc7
commit 539fad1d22
6 changed files with 69 additions and 32 deletions
@@ -7,8 +7,14 @@ ZITADEL_CLIENT_SECRET=your-web-app-client-secret
 AUTH_REDIRECT_URI=http://localhost:5173/auth/callback
 AUTH_POST_LOGOUT_URI=http://localhost:5173/

-# Secret used to sign the session cookie (any long random string)
+# Secret used to derive the session cookie encryption key (any long random string)
 SESSION_SECRET=change-me-to-a-long-random-string

+# Optional session tuning (defaults shown)
+# OIDC_SCOPE=openid profile email offline_access
+# SESSION_TTL_SECONDS=604800
+# SESSION_REFRESH_THRESHOLD_SECONDS=30
+# AUTH_FLOW_TTL_SECONDS=600
+
 # Backend API base URL (used from later parts)
 API_BASE_URL=http://localhost:5111