'use strict';

// Example proxy secrets file. theta-env generates a real ./config/proxy-secrets.js
// from this shape at setup (with empty clientId/clientSecret), then bootstrap.js
// writes the SSO-generated OAuth client creds into it AND into OpenBao
// (secret/proxy/conf). The proxy loads it via @simpleworkjs/conf, then overlays
// secret/proxy/conf from OpenBao via @simpleworkjs/bao-conf at boot.
//
// The real file is gitignored (config/*-secrets.js) — never commit live creds.
// This .example is tracked to document the expected shape only.
module.exports = {
	oidc: {
		// The SSO registers the proxy as an OAuth client and writes the real
		// values here (and into OpenBao). "set-me" is the bootstrap placeholder.
		clientId: 'set-me',
		clientSecret: 'set-me',
	},
};