From 51f90fc024ad0d3eec5a3ca875557e3093a0694b Mon Sep 17 00:00:00 2001 From: Peter Date: Thu, 23 Jul 2026 21:50:07 -0400 Subject: [PATCH 1/2] docs: refactor added frontend_url and app_name --- src/content/docs/reference/environment-variables.mdx | 1 + src/content/docs/reference/system-config.mdx | 4 ++-- src/content/docs/start/firstAdmin.mdx | 4 ++++ src/content/docs/understand/data-model.mdx | 2 ++ 4 files changed, 9 insertions(+), 2 deletions(-) diff --git a/src/content/docs/reference/environment-variables.mdx b/src/content/docs/reference/environment-variables.mdx index 8317cd1..be1ca7a 100644 --- a/src/content/docs/reference/environment-variables.mdx +++ b/src/content/docs/reference/environment-variables.mdx @@ -53,6 +53,7 @@ These values seed the `system_config` table when missing. | `RPID` | WebAuthn relying party ID | | `ORIGINS` | Comma-separated WebAuthn browser origins | | `APP_NAME` | Application name shown in auth experiences | +| `FRONTEND_URL` | | `OAUTH_PROVIDERS` stores provider metadata, not provider client secrets. Each provider references a secret env var through `clientSecretEnv`. diff --git a/src/content/docs/reference/system-config.mdx b/src/content/docs/reference/system-config.mdx index 0c89fb6..f22510c 100644 --- a/src/content/docs/reference/system-config.mdx +++ b/src/content/docs/reference/system-config.mdx @@ -80,7 +80,7 @@ The auth API logs system config reads, updates, and validation errors as auth ev | `delay_after` | `DELAY_AFTER` | number | Slowdown threshold | | `rpid` | `RPID` | string | WebAuthn relying party ID | | `origins` | `ORIGINS` | URL array | WebAuthn allowed browser origins | - +| `frontend_url` | `FRONTEND_URL` | URL | | Built-in defaults exist for: | Key | Default | @@ -111,7 +111,7 @@ Other keys must come from env or an existing database row. | `REFRESH_TOKEN_TTL` | Duration string | | `RPID` | String | | `APP_NAME` | String | - +| `frontend_url` | String | Duration strings in system config use: ```txt diff --git a/src/content/docs/start/firstAdmin.mdx b/src/content/docs/start/firstAdmin.mdx index 0ecaf92..6ec5411 100644 --- a/src/content/docs/start/firstAdmin.mdx +++ b/src/content/docs/start/firstAdmin.mdx @@ -8,6 +8,10 @@ sidebar: import { Aside } from '@astrojs/starlight/components'; import Image from '../../../components/Image.astro'; + + ## Create Your First Admin This guide walks through the first-admin bootstrap flow in a local Seamless Auth stack. diff --git a/src/content/docs/understand/data-model.mdx b/src/content/docs/understand/data-model.mdx index b0a17b9..6588e1e 100644 --- a/src/content/docs/understand/data-model.mdx +++ b/src/content/docs/understand/data-model.mdx @@ -232,6 +232,8 @@ System config controls auth behavior such as: - `delay_after` - `rpid` - `origins` +- `app_name` +- `frontend_url` Raw secrets should stay in environment variables or a secret manager, not in `system_config`. From 9d56cfe184367f22e7f6a7786600b6c65e41b0b3 Mon Sep 17 00:00:00 2001 From: Brandon Corbett Date: Tue, 6 Oct 2026 21:11:45 -0400 Subject: [PATCH 2/2] docs: describe frontend_url and fix the system config tables Fill in the empty FRONTEND_URL and frontend_url purpose cells from the auth API source (base for sign-in and magic-link URLs, falling back to the first origin), restore the blank lines that ended each table, use the env name in the env parsing table, and drop the unrelated note added to the first admin page. --- src/content/docs/reference/environment-variables.mdx | 2 +- src/content/docs/reference/system-config.mdx | 6 ++++-- src/content/docs/start/firstAdmin.mdx | 4 ---- 3 files changed, 5 insertions(+), 7 deletions(-) diff --git a/src/content/docs/reference/environment-variables.mdx b/src/content/docs/reference/environment-variables.mdx index df54eed..3f8601a 100644 --- a/src/content/docs/reference/environment-variables.mdx +++ b/src/content/docs/reference/environment-variables.mdx @@ -51,7 +51,7 @@ These values seed the `system_config` table when missing. | `RPID` | WebAuthn relying party ID | | `ORIGINS` | Comma-separated WebAuthn browser origins | | `APP_NAME` | Application name shown in auth experiences | -| `FRONTEND_URL` | | +| `FRONTEND_URL` | Frontend base URL for sign-in and magic-link links (optional) | `OAUTH_PROVIDERS` stores provider metadata, not provider client secrets. Each provider references a secret env var through `clientSecretEnv`. diff --git a/src/content/docs/reference/system-config.mdx b/src/content/docs/reference/system-config.mdx index cc7064a..463bafb 100644 --- a/src/content/docs/reference/system-config.mdx +++ b/src/content/docs/reference/system-config.mdx @@ -78,7 +78,8 @@ The auth API logs system config reads, updates, and validation errors as auth ev | `delay_after` | `DELAY_AFTER` | number | Slowdown threshold | | `rpid` | `RPID` | string | WebAuthn relying party ID | | `origins` | `ORIGINS` | URL array | WebAuthn allowed browser origins | -| `frontend_url` | `FRONTEND_URL` | URL | | +| `frontend_url` | `FRONTEND_URL` | URL | Sign-in and magic-link base URL; else `origins[0]` | + Built-in defaults exist for: | Key | Default | @@ -109,7 +110,8 @@ Other keys must come from env or an existing database row. | `REFRESH_TOKEN_TTL` | Duration string | | `RPID` | String | | `APP_NAME` | String | -| `frontend_url` | String | +| `FRONTEND_URL` | String | + Duration strings in system config use: ```txt diff --git a/src/content/docs/start/firstAdmin.mdx b/src/content/docs/start/firstAdmin.mdx index cb2c17f..e4c83c9 100644 --- a/src/content/docs/start/firstAdmin.mdx +++ b/src/content/docs/start/firstAdmin.mdx @@ -8,10 +8,6 @@ sidebar: import { Aside } from '@astrojs/starlight/components'; import Image from '../../../components/Image.astro'; - - ## Create Your First Admin The first admin of a local stack is whoever registers with the owner email you gave `seamless init`.