knowhy_auth0/.env.example at main · knowhycodata/knowhy_auth0 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
# ============================================
# Knowhy AI Email Assistant - Environment Variables
# ============================================
# Bu dosyayı .env olarak kopyalayın ve değerleri doldurun.
# Copy this file as .env and fill in the values.

# ---- Frontend (Vite) - VITE_ prefix gerekli ----
VITE_AUTH0_DOMAIN=
VITE_AUTH0_CLIENT_ID=
VITE_AUTH0_AUDIENCE=
# Local: http://localhost:3001
# Render: https://<your-backend-service>.onrender.com
VITE_API_URL=http://localhost:3001
VITE_STEPUP_CIBA_FALLBACK=true

# ---- Auth0 Configuration ----
AUTH0_DOMAIN=
AUTH0_CLIENT_ID=
AUTH0_CLIENT_SECRET=
AUTH0_AUDIENCE=
AUTH0_CALLBACK_URL=http://localhost:3001/api/auth/callback
AUTH0_GMAIL_CALLBACK_URL=http://localhost:5173
AUTH0_LOGOUT_URL=http://localhost:5173
AUTH0_SECRET=

# ---- Auth0 Token Vault (Custom API Client) ----
AUTH0_CUSTOM_API_CLIENT_ID=
AUTH0_CUSTOM_API_CLIENT_SECRET=

# ---- OpenRouter API (AI Models) ----
OPENROUTER_API_KEY=
OPENROUTER_BASE_URL=https://openrouter.ai/api/v1

# ---- Dynamic Model Management ----
WORKER_MODEL=anthropic/claude-opus-4.6
GUARDRAIL_MODEL=google/gemini-3.1-pro-preview-customtools
ENABLE_RESPONSE_GUARDRAIL=false

# ---- PostgreSQL Database ----
POSTGRES_HOST=localhost
POSTGRES_PORT=5432
POSTGRES_DB=Knowhy_db
POSTGRES_USER=Knowhy_user
POSTGRES_PASSWORD=Knowhy_secure_password_2024
DATABASE_URL=postgresql://Knowhy_user:Knowhy_secure_password_2024@localhost:5432/Knowhy_db

# ---- Server Configuration ----
NODE_ENV=development
# Render web service PORT değerini otomatik verir.
# Local geliştirme için SERVER_PORT kullanılabilir.
SERVER_PORT=3001
CLIENT_URL=http://localhost:5173
# Birden fazla origin gerekiyorsa virgül ile ayırın.
# Örn: https://app.onrender.com,https://preview-app.onrender.com
CLIENT_URLS=
ENABLE_FILE_LOGS=false
DB_INIT_MAX_RETRIES=30
DB_INIT_RETRY_DELAY_MS=3000

# ---- Session Secret ----
SESSION_SECRET=
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=

# ---- Step-up Verification ----
# Comma-separated audience allowlist for JWT verification
STEP_UP_ALLOWED_AUDIENCES=https://knowhy-api.local
STEP_UP_WINDOW_SECONDS=300
# true ise token'da MFA amr claim'i zorunludur. false ise taze re-auth yeterlidir.
# Google ile giriş yapan kullanıcılarda MFA enrollment olmayabilir; false önerilir.
STEP_UP_REQUIRE_MFA_CLAIM=false

# ---- Auth0 Dashboard MFA Yapılandırma Notu ----
# Auth0 Dashboard > Security > Multi-factor Auth ekranında:
# 1. "Email" faktörünü aktif edin (Email OTP ile doğrulama)
# 2. "Always" veya "Adaptive" MFA policy seçin
# 3. Google Authenticator (TOTP) ve WebAuthn isteğe bağlıdır
# Böylece step-up auth sırasında kullanıcıya e-posta OTP seçeneği sunulur.