# Schwab API Configuration
# Get these from your Schwab Developer Portal: https://developer.schwab.com/
VITE_SCHWAB_CLIENT_ID=your_client_id_here

# Secrets Configuration (encrypted with passkey)
# URL to fetch encrypted Schwab refresh token from
VITE_SCHWAB_REFRESH_TOKEN_URL=https://raw.githubusercontent.com/mjsabby/secretstore/main/schwab_refresh_token.json
# URL to fetch encrypted Schwab client secret from
VITE_SCHWAB_CLIENT_SECRET_URL=https://raw.githubusercontent.com/mjsabby/secretstore/refs/heads/main/schwab_client_secret.json

# Dividend Data Configuration
# URL to fetch dividend data from (JSON format)
VITE_DIVIDENDS_URL=/sample-dividends.json

# WebAuthn PRF Configuration
# PRF Info UUID - used for passkey-based encryption (should match encryption side)
VITE_PRF_INFO=48d0e95d-e28f-4cec-8bba-96bb067fd4e7

# WebAuthn RP ID - Relying Party ID (typically your domain)
# For local dev, set to your local hostname; for production, set to your domain
VITE_WEBAUTHN_RP_ID=sabharwals.net

# TLS Configuration for Development (optional)
# Use custom TLS certificate for local development debugging.
# All three variables must be set for TLS to be enabled.
#
# Option 1: Set in .env file (uncomment and modify):
# VITE_TLS_HOSTNAME=local.example.com
# VITE_TLS_CERT_PATH=/path/to/cert.pem
# VITE_TLS_KEY_PATH=/path/to/key.pem
#
# Option 2: Set inline when running dev server:
#   VITE_TLS_HOSTNAME=local.example.com \
#   VITE_TLS_CERT_PATH=./certs/cert.pem \
#   VITE_TLS_KEY_PATH=./certs/key.pem \
#   npm run dev
#
# When TLS is enabled, access the app at https://<hostname>:5173
# Make sure your /etc/hosts or DNS points the hostname to 127.0.0.1