cesnimda
33d899c243
Root cause of "Google authentication failed": appsettings.Development.json had Auth:GoogleClientId set to the literal placeholder "CHANGE_ME_GOOGLE_CLIENT_ID" while the frontend's .env.development had a real (already-public, already-committed) client ID -- every Google ID token's audience check failed against the backend's placeholder. Fixed by setting the same real client ID on both sides (a client ID is a public identifier, not a secret, safe to commit -- unlike a client secret). Also enabled Auth:AllowRegistration in dev so the existing Google-first self-serve-signup path (auto-create on unmatched verified email, auto-link on matching verified email -- built during Wave 7) is actually exercisable locally. Wired the previously-missing Auth__MicrosoftClientId / NEXT_PUBLIC_MICROSOFT_CLIENT_ID into docker-compose.yml/.env.example (distinct from the existing MICROSOFT_CLIENT_ID used for Outlook mail linking) -- Microsoft sign-in was never deployable, a leftover gap from when it was built. Fixed a stale env-var name in the Microsoft setup hint copy (still said REACT_APP_*, predates the Next.js migration). Removed the per-user accent color picker entirely: it was purely client-side (localStorage + theme.ts), never touched the backend/DB. theme.ts now hardcodes a single ACCENT constant; themePrefs.ts drops get/set/clearAccentColor; App.tsx and SettingsView.tsx drop the accentColor prop threading. Dead accent-related i18n keys removed from both locales. Consolidated Settings' "Account" tab (duplicated GoogleAuthCard, which already lives on the Profile page) into Profile: moved AuthStatusCard and EmailProviderConnections there alongside the existing Google/ Microsoft auth cards, so identity/account-linking lives in one place. Settings drops from 5 tabs to 4 and its General tab uses a consistent SectionCard layout instead of ad-hoc per-card styling. Verified: dotnet build/test (177/177) and npm build/test (57/57) both green; confirmed live against a running dev server that /auth/config now reports googleEnabled with the corrected client ID, Settings has no accent controls, and Profile shows the consolidated auth section.
56 lines
2.2 KiB
Bash
56 lines
2.2 KiB
Bash
# Copy this file to `.env` (same folder as docker-compose.yml) and fill in values.
|
|
#
|
|
# Used by docker-compose.yml
|
|
AUTH_JWT_KEY=CHANGE_ME_LONG_RANDOM_SECRET
|
|
AUTH_ADMIN_EMAIL=admin@example.com
|
|
AUTH_ADMIN_PASSWORD=CHANGE_ME_STRONG_PASSWORD
|
|
AUTH_GOOGLE_CLIENT_ID=CHANGE_ME_GOOGLE_CLIENT_ID
|
|
# Optional: enables the "Continue with Microsoft" sign-in tab (separate from the
|
|
# MICROSOFT_CLIENT_ID below, which is for Outlook mail linking, not sign-in).
|
|
AUTH_MICROSOFT_CLIENT_ID=
|
|
GOOGLE_GMAIL_CLIENT_SECRET=CHANGE_ME_GOOGLE_OAUTH_CLIENT_SECRET
|
|
# Optional. If omitted, the backend uses https://<your-domain>/api/gmail/oauth/callback
|
|
GOOGLE_GMAIL_REDIRECT_URI=
|
|
MICROSOFT_CLIENT_ID=CHANGE_ME_MICROSOFT_CLIENT_ID
|
|
MICROSOFT_CLIENT_SECRET=CHANGE_ME_MICROSOFT_OAUTH_CLIENT_SECRET
|
|
# Optional. Defaults to "common" (personal + work/school accounts).
|
|
MICROSOFT_TENANT_ID=
|
|
# Optional. If omitted, the backend uses https://<your-domain>/api/microsoft-graph/oauth/callback
|
|
MICROSOFT_REDIRECT_URI=
|
|
AI_SERVICE_BASE_URL=http://ai-service:8001
|
|
# Optional: enables hybrid CV block classification in the local AI service.
|
|
OLLAMA_BASE_URL=http://ollama:11434
|
|
OLLAMA_MODEL=qwen2.5:7b
|
|
|
|
# AI provider for the heavy /cv/* calls: ollama (default, local) | gemini | groq.
|
|
# /summarize always stays local (distilbart). To offload a weak production GPU,
|
|
# set AI_PROVIDER=gemini (or groq) and provide the matching key below.
|
|
# Keys are read from the environment only — never commit real keys.
|
|
AI_PROVIDER=ollama
|
|
GEMINI_API_KEY=
|
|
GEMINI_MODEL=gemini-2.0-flash
|
|
GROQ_API_KEY=
|
|
GROQ_MODEL=llama-3.3-70b-versatile
|
|
|
|
# Optional: only needed if you want the UI to call a non-default API base URL.
|
|
# In production the UI defaults to `/api`.
|
|
REACT_APP_API_BASE_URL=
|
|
|
|
# Used by docker-compose.yml (email / password resets / notifications)
|
|
APP_PUBLIC_BASE_URL=https://jobs.cesnimda.uk
|
|
APP_VERSION=
|
|
APP_COMMIT_SHA=
|
|
APP_BUILD_STAMP=
|
|
EMAIL_ENABLED=false
|
|
EMAIL_SMTP_HOST=smtp.gmail.com
|
|
EMAIL_SMTP_PORT=587
|
|
EMAIL_SMTP_USER=CHANGE_ME_GMAIL_ADDRESS
|
|
EMAIL_SMTP_PASSWORD=CHANGE_ME_GOOGLE_APP_PASSWORD
|
|
EMAIL_FROM=CHANGE_ME_GMAIL_ADDRESS
|
|
EMAIL_FROM_NAME=Jobbjakt
|
|
EMAIL_FOLLOWUPREMINDERS_ENABLED=true
|
|
EMAIL_FOLLOWUPREMINDERS_UPCOMINGDAYS=2
|
|
|
|
EMAIL_SMTP_ENABLE_SSL=true
|
|
EMAIL_SMTP_TIMEOUT_MS=15000
|