Matthieu MALVACHEandMatthieu MALVACHE
ec06b0c494
Add opt-in SSO authentication alongside Basic Auth. OAuth endpoints are auto-discovered via .well-known, with support for external IdPs (Keycloak, Authentik) via configurable OAUTH_ISSUER_URL. Sessions persist through httpOnly refresh token cookies with automatic renewal.
26 lines
914 B
TypeScript
26 lines
914 B
TypeScript
import { NextResponse } from 'next/server';
|
|
import { logger } from '@/lib/logger';
|
|
|
|
/**
|
|
* Runtime configuration endpoint
|
|
*
|
|
* This endpoint serves configuration values that can be set at runtime
|
|
* via environment variables, enabling post-build configuration for
|
|
* Docker deployments.
|
|
*
|
|
* Priority order:
|
|
* 1. Runtime env vars (APP_NAME, JMAP_SERVER_URL)
|
|
* 2. Build-time env vars (NEXT_PUBLIC_APP_NAME, NEXT_PUBLIC_JMAP_SERVER_URL)
|
|
* 3. Default values
|
|
*/
|
|
export async function GET() {
|
|
logger.debug('Config requested');
|
|
return NextResponse.json({
|
|
appName: process.env.APP_NAME || process.env.NEXT_PUBLIC_APP_NAME || 'Webmail',
|
|
jmapServerUrl: process.env.JMAP_SERVER_URL || process.env.NEXT_PUBLIC_JMAP_SERVER_URL || '',
|
|
oauthEnabled: process.env.OAUTH_ENABLED === 'true',
|
|
oauthClientId: process.env.OAUTH_CLIENT_ID || '',
|
|
oauthIssuerUrl: process.env.OAUTH_ISSUER_URL || '',
|
|
});
|
|
}
|