{
    "_comment": "OAuth 2.0 설정 예시. 사용할 프로바이더만 남기고 실제 값으로 교체하세요.",
    "enabled": false,
    "state_secret": "${OAUTH_STATE_SECRET}",
    "state_ttl_sec": 600,
    "success_redirect_url": "${OAUTH_SUCCESS_REDIRECT_URL}",
    "failure_redirect_url": "${OAUTH_FAILURE_REDIRECT_URL}",
    "providers": [
        {
            "driver": "google",
            "client_id": "${GOOGLE_CLIENT_ID}",
            "client_secret": "${GOOGLE_CLIENT_SECRET}",
            "redirect_url": "/v1/oauth/google/callback",
            "scopes": ["openid", "email", "profile"]
        },
        {
            "driver": "github",
            "client_id": "${GITHUB_CLIENT_ID}",
            "client_secret": "${GITHUB_CLIENT_SECRET}",
            "redirect_url": "/v1/oauth/github/callback"
        },
        {
            "driver": "naver",
            "client_id": "${NAVER_CLIENT_ID}",
            "client_secret": "${NAVER_CLIENT_SECRET}",
            "redirect_url": "/v1/oauth/naver/callback"
        },
        {
            "_comment": "Kakao - custom endpoint example",
            "driver": "kakao",
            "client_id": "${KAKAO_CLIENT_ID}",
            "client_secret": "${KAKAO_CLIENT_SECRET}",
            "redirect_url": "/v1/oauth/kakao/callback",
            "auth_url": "https://kauth.kakao.com/oauth/authorize",
            "token_url": "https://kauth.kakao.com/oauth/token",
            "user_info_url": "https://kapi.kakao.com/v2/user/me",
            "scopes": ["profile_nickname", "account_email"],
            "email_field": "kakao_account.email",
            "name_field": "properties.nickname"
        },
        {
            "_comment": "Apple Sign-In - client_secret JWT is auto-generated when apple_team_id/apple_key_id/apple_private_key are set",
            "driver": "apple",
            "client_id": "${APPLE_CLIENT_ID}",
            "client_secret": "",
            "redirect_url": "/v1/oauth/apple/callback",
            "scopes": ["name", "email"],
            "pkce": true,
            "apple_team_id": "${APPLE_TEAM_ID}",
            "apple_key_id": "${APPLE_KEY_ID}",
            "apple_private_key": "${APPLE_PRIVATE_KEY}"
        },
        {
            "_comment": "Line Login v2.1 - openid + email recommended",
            "driver": "line",
            "client_id": "${LINE_CLIENT_ID}",
            "client_secret": "${LINE_CLIENT_SECRET}",
            "redirect_url": "/v1/oauth/line/callback",
            "scopes": ["openid", "profile", "email"],
            "pkce": true
        }
    ]
}
