.env.example

# Copy to v12/.env and fill in your own values. v12/.env is gitignored.
# Each example reads only the keys it needs — set the ones for the example you
# plan to run, leave the others empty.

# ── APIKey ──────────────────────────────────────────────────────────────
# Used by every example. Tenant API key from the LoginRadius admin console.
LR_API_KEY=

# ── APISecret ───────────────────────────────────────────────────────────
# Server-side only. Required by the api-key-secret and x-loginradius-headers examples.
LR_API_SECRET=

# ── AccessToken (user-context) ──────────────────────────────────────────
# Returned by a prior login flow. Required by the access-token example.
LR_ACCESS_TOKEN=
LR_OIDC_APP_NAME=

# ── BearerToken ─────────────────────────────────────────────────────────
# Required by the bearer-token example.
LR_BEARER_TOKEN=

# ── M2MBearerToken (JWT) ────────────────────────────────────────────────
# Obtained via the OAuth M2M token endpoint. Required by the m2m-bearer-token example.
LR_M2M_BEARER_TOKEN=

# ── ClientId + ClientSecret (OAuth app) ─────────────────────────────────
# Required by the client-id-secret example.
LR_CLIENT_ID=
LR_CLIENT_SECRET=
LR_TARGET_UID=

# ── X-LoginRadius-Api{Key,Secret} (header-only overrides) ───────────────
# Required by x-loginradius-headers/ when the header value must differ from
# the query value.
LR_X_API_KEY=
LR_X_API_SECRET=

# ── Misc ────────────────────────────────────────────────────────────────
# Social-provider access token (Facebook/Google/etc.) for token exchange.
# Used by the api-key-secret and x-loginradius-headers examples.
LR_SOCIAL_TOKEN=

# ── login example ──────────────────────────────────────────────────────
LR_EMAIL=

# ── Demo server (com.loginradius.sdk.demo.DemoServer) ────────────────────
# Reuses LR_API_KEY / LR_API_SECRET above. Optional server-selection trio —
# leave unset to use the production API.
LR_DOMAIN=
LR_CUSTOM_DOMAIN=
LR_BASE_URL=

# Where email links point back to.
#
# LR_VERIFICATION_URL must address the demo's own verify ROUTE, not the site
# root — LoginRadius appends ?vtoken=... to it, and the handler reads that,
# verifies the account and redirects to / with a banner.
LR_VERIFICATION_URL=http://localhost:8080/api/auth/verify
LR_RESET_PASSWORD_URL=http://localhost:8080/?reset=1

# Server port.
LR_DEMO_PORT=8080