Add Google/Microsoft SSO OAuth for register and sign-in (#24)
Introduce OAuthIdentity storage, start/callback endpoints, JWT handoff to the SPA, and mocked IdP tests so Drive OAuth (#11) can reuse the same model.
This commit is contained in:
@@ -49,6 +49,17 @@ CAPTCHA_SECRET_KEY=replace-with-captcha-secret
|
||||
# public registration; set true in chat_backend_prod.env / chat_backend_beta.env.
|
||||
ENABLE_ACCOUNT_REGISTRATION=false
|
||||
|
||||
# OAuth SSO — Google / Microsoft (#24). Never commit real secrets.
|
||||
# Register redirect URIs:
|
||||
# https://chatbackend.aimloperations.com/api/auth/oauth/google/callback/
|
||||
# https://chatbackend.aimloperations.com/api/auth/oauth/microsoft/callback/
|
||||
GOOGLE_OAUTH_CLIENT_ID=
|
||||
GOOGLE_OAUTH_CLIENT_SECRET=
|
||||
MICROSOFT_OAUTH_CLIENT_ID=
|
||||
MICROSOFT_OAUTH_CLIENT_SECRET=
|
||||
MICROSOFT_OAUTH_TENANT=common
|
||||
OAUTH_CALLBACK_BASE_URL=https://chatbackend.aimloperations.com
|
||||
|
||||
# Stripe / finance
|
||||
STRIPE_SECRET_KEY=replace-with-stripe-secret-key
|
||||
STRIPE_PUBLISHABLE_KEY=replace-with-stripe-publishable-key
|
||||
|
||||
Reference in New Issue
Block a user