Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions src/content/docs/reference/environment-variables.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,7 @@ These values seed the `system_config` table when missing.
| `RPID` | WebAuthn relying party ID |
| `ORIGINS` | Comma-separated WebAuthn browser origins |
| `APP_NAME` | Application name shown in auth experiences |
| `FRONTEND_URL` | Frontend base URL for sign-in and magic-link links (optional) |

`OAUTH_PROVIDERS` stores provider metadata, not provider client secrets. Each provider references a
secret env var through `clientSecretEnv`.
Expand Down
2 changes: 2 additions & 0 deletions src/content/docs/reference/system-config.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -78,6 +78,7 @@ The auth API logs system config reads, updates, and validation errors as auth ev
| `delay_after` | `DELAY_AFTER` | number | Slowdown threshold |
| `rpid` | `RPID` | string | WebAuthn relying party ID |
| `origins` | `ORIGINS` | URL array | WebAuthn allowed browser origins |
| `frontend_url` | `FRONTEND_URL` | URL | Sign-in and magic-link base URL; else `origins[0]` |

Built-in defaults exist for:

Expand Down Expand Up @@ -109,6 +110,7 @@ Other keys must come from env or an existing database row.
| `REFRESH_TOKEN_TTL` | Duration string |
| `RPID` | String |
| `APP_NAME` | String |
| `FRONTEND_URL` | String |

Duration strings in system config use:

Expand Down
2 changes: 2 additions & 0 deletions src/content/docs/understand/data-model.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -230,6 +230,8 @@ System config controls auth behavior such as:
- `delay_after`
- `rpid`
- `origins`
- `app_name`
- `frontend_url`

Raw secrets should stay in environment variables or a secret manager, not in `system_config`.

Expand Down
Loading