.env.example

# ForgeRock AM connection (runtime — read by $env/dynamic/private)
FR_AM_URL=<<<(string) URL to your AM instance>>>
FR_AM_COOKIE_NAME=<<<(string) The name of the ForgeRock server cookie>>>
FR_REALM_PATH=<<<(string) Realm path of AM>>>
FR_OAUTH_PUBLIC_CLIENT=<<<(string) Your Public OAuth client name/ID>>>
# FR_OAUTH_SCOPE=openid profile me.read  # optional — AM uses client defaults if omitted
FR_AM_WELLKNOWN_URL=<<<(string) Your OIDC Discovery Wellknown Endpoint>>>

# BFF session signing
COOKIE_SECRET=<<<(string) At least 32 characters for HMAC signing>>>

# Testing (CI only)
FR_AM_ADMIN_USERNAME=<<<(string) your AM admin username>>>
FR_AM_ADMIN_PASSWORD=<<<(string) your AM admin password>>>
FR_AM_CREATE_USER_URL=<<<(string) URL to your AM instance create new user end point>>>
FR_AM_DELETE_USER_URL=<<<(string) URL to your AM instance delete new user end point>>>