# Auth0 Configuration
# Your Auth0 tenant domain (e.g., dev-abc123.us.auth0.com)
AUTH0_DOMAIN=your-tenant.us.auth0.com

# Machine-to-Machine Application Credentials
# Used for Auth0 Management API access
AUTH0_MGMT_CLIENT_ID=your_mgmt_client_id_here
AUTH0_MGMT_CLIENT_SECRET=your_mgmt_client_secret_here

# Regular Web Application Credentials
# Your main application that users will authenticate through
AUTH0_WEB_CLIENT_ID=your_web_client_id_here
# Optional: Only needed for Regular Web Apps (not SPAs)
AUTH0_WEB_CLIENT_SECRET=your_web_client_secret_here

# Database Connection
# The connection ID from Auth0 (usually starts with 'con_')
AUTH0_DB_CONNECTION_ID=con_xxxxxxxxxxxxxxxx

# API Configuration
# Your API identifier in Auth0 (or use placeholder if not using API)
AUTH0_AUDIENCE=https://api.yourapp.com

# Application URLs
# The callback URL registered in your Auth0 application
# For local development:
CALLBACK_URL=http://localhost:8000/callback
# For production with HTTPS (e.g., ngrok for testing):
# CALLBACK_URL=https://your-domain.ngrok-free.app/callback

# Database Configuration
# SQLite for development (default)
DATABASE_URL=sqlite:///./app.db
# PostgreSQL for production:
# DATABASE_URL=postgresql://user:password@localhost/dbname

# Bootstrap Mode Configuration
# Controls how new organizations onboard users
# Options: 'invite' (recommended) or 'jit' (just-in-time)
BOOTSTRAP_MODE=invite

# Optional: Auth0 Organization Member Role
# If you've created custom roles in Auth0 for organization members
# ORG_OWNER_ROLE_ID=rol_xxxxxxxxxxxxxxxx