.env.example

# Copy to .env.local for `npm run dev`, or set these as real environment variables at build
# time in CI/CD. All PUBLIC_* vars are bundled into the client-side JS (Vite's convention) --
# never put a secret in one. There is none to put here: the Cognito app client has no secret by
# design (ADR-0022), which is exactly what makes running all of this in the browser safe.
#
# Values come from the CDK stacks' own outputs once deployed:
#   PUBLIC_COGNITO_DOMAIN   <- OpenJobRadar-ControlPlane-<env>'s HostedUiDomain output
#   PUBLIC_COGNITO_CLIENT_ID <- OpenJobRadar-ControlPlane-<env>'s UserPoolClientId output
#   PUBLIC_API_BASE_URL     <- OpenJobRadar-Api-<env>'s HttpApiUrl output
# PUBLIC_REDIRECT_URI/PUBLIC_LOGOUT_URI must exactly match a URL in that same environment's
# OPENJOBRADAR_CALLBACK_URLS/OPENJOBRADAR_LOGOUT_URLS (infra/bin/app.ts) -- Cognito rejects a
# redirect it wasn't configured with.

PUBLIC_COGNITO_DOMAIN=openjobradar-dev.auth.us-east-1.amazoncognito.com
PUBLIC_COGNITO_CLIENT_ID=replace-with-real-client-id
PUBLIC_REDIRECT_URI=http://localhost:4321/callback
PUBLIC_LOGOUT_URI=http://localhost:4321/
PUBLIC_API_BASE_URL=https://replace-with-real-api-id.execute-api.us-east-1.amazonaws.com