-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path.env.example
More file actions
56 lines (48 loc) · 2.15 KB
/
Copy path.env.example
File metadata and controls
56 lines (48 loc) · 2.15 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
# ==================================
# Passkey Authentication Configuration
# ==================================
# Supabase Configuration
# Get these from your Supabase project dashboard
NEXT_PUBLIC_SUPABASE_URL=https://your-project-id.supabase.co
NEXT_PUBLIC_SUPABASE_ANON_KEY=your_supabase_anon_key_here
# JWT Secret (should be a strong, random string)
# Generate with: openssl rand -base64 32
JWT_SECRET=your_jwt_secret_key_here
# WebAuthn/Passkey Configuration
# RP_ID should match your domain (without protocol/port)
NEXT_PUBLIC_RP_ID=your-domain.com
# Human-readable name for your application
NEXT_PUBLIC_RP_NAME=Your App Name
# Full origin URL of your application
NEXT_PUBLIC_RP_ORIGIN=https://your-domain.com
# Application Branding
NEXT_PUBLIC_APP_TITLE=Your App Name
# Main description text
NEXT_PUBLIC_APP_DESCRIPTION=Secure, passwordless authentication with passkeys
# Subtitle/hint text
NEXT_PUBLIC_APP_SUBTITLE=No passwords required - just your biometrics
# Browser tab title
NEXT_PUBLIC_SITE_TITLE=Your App | Authentication
# Meta description for SEO
NEXT_PUBLIC_SITE_DESCRIPTION=Secure passwordless authentication using WebAuthn passkeys
# Cap.js Standalone Server Configuration
# You can use the provided Cap.js server or set up your own
CAP_ENDPOINT=https://your-captcha-service.com
CAP_SECRET_KEY=your_cap_secret_key_here
NEXT_PUBLIC_CAP_ENDPOINT=https://your-captcha-service.com/your_site_key/
NEXT_PUBLIC_CAP_SITE_KEY=your_cap_site_key_here
# CAPTCHA Configuration
# Set to 'false' or 'disabled' to disable CAPTCHA validation for testing or specific deployments
ENABLE_CAPTCHA=true
NEXT_PUBLIC_ENABLE_CAPTCHA=true
# WebAuthn Settings (optional - defaults provided)
# Authenticator preference: "platform" (built-in) or "cross-platform" (external)
NEXT_PUBLIC_AUTHENTICATOR_ATTACHMENT=platform
# User verification: "discouraged" | "preferred" | "required"
NEXT_PUBLIC_USER_VERIFICATION=preferred
# Resident key: "discouraged" | "preferred" | "required"
NEXT_PUBLIC_RESIDENT_KEY=preferred
# Attestation type: "none" | "direct" | "enterprise"
NEXT_PUBLIC_ATTESTATION_TYPE=none
# Cron Secret (optional security for keepalive endpoint)
CRON_SECRET=your_random_cron_secret_here