server:
  port: ${AUTH_PORT:9100}
spring:
  profiles:
    active: ${SPRING_PROFILES_ACTIVE:test}
  application:
    name: auth-service
  config:
    import:
      - nacos:baiyue-common.yml?group=${NACOS_GROUP:BAIYUE}&refreshEnabled=true
      - nacos:${spring.application.name}.yml?group=${NACOS_GROUP:BAIYUE}&refreshEnabled=true
  data:
    redis:
      host: ${REDIS_HOST}
      port: ${REDIS_PORT:6379}
      password: ${REDIS_PASSWORD:}
      database: ${REDIS_DATABASE:0}
      timeout: ${REDIS_TIMEOUT:3s}
  cloud:
    nacos:
      server-addr: ${NACOS_SERVER_ADDR}
      username: ${NACOS_USERNAME}
      password: ${NACOS_PASSWORD}
      discovery:
        enabled: ${NACOS_DISCOVERY_ENABLED:true}
        register-enabled: ${NACOS_REGISTER_ENABLED:true}
        group: ${NACOS_GROUP:BAIYUE}
        namespace: ${NACOS_NAMESPACE}
      config:
        namespace: ${NACOS_NAMESPACE}
        encode: UTF-8
baiyue.security:
  internal-service-token: ${INTERNAL_SERVICE_TOKEN}
  token-key-prefix: ${REDIS_TOKEN_KEY_PREFIX:baiyue:auth}
  issuer: ${JWT_ISSUER:auth-service}
  audience: ${JWT_AUDIENCE:lastleg-api}
  access-token-ttl: ${ACCESS_TOKEN_TTL:24m}
  refresh-token-ttl: ${REFRESH_TOKEN_TTL:7d}
  max-login-failures: ${MAX_LOGIN_FAILURES:5}
  lock-duration: ${LOGIN_LOCK_DURATION:15m}
  jwt-mode: jwks
  session-mode: redis
  jwk-set-uri: ${JWT_JWKS_URI:http://auth:9100/api/auth/.well-known/jwks.json}
  jwt:
    rsa-jwk-set: ${JWT_RSA_JWK_SET:}
    current-kid: ${JWT_CURRENT_KID:}

baiyue.clients:
  iam:
    url: ${IAM_SERVICE_URL:}

management.endpoints.web.exposure.include: health,info,prometheus

baiyue.security.session-validation-uri: ${AUTH_SESSION_VALIDATION_URL:http://auth:9100/internal/auth/accounts/sessions/validate}