env.test.example

# Test Environment Configuration
# Copy this to .env.test and fill in your test Supabase credentials

# Required: Test Database Credentials (from test Supabase project)
# NOTE: SUPABASE_KEY must be the SERVICE ROLE key (sb_secret_...), not the anon key
SUPABASE_URL=https://your-test-project.supabase.co
SUPABASE_KEY=your-test-service-role-key-sb_secret_...
SUPABASE_ANON_KEY=your-test-anon-key-sb_publishable_...

# Required: Environment mode (must be "development" for test-specific behavior)
ENVIRONMENT=development
TEST_MODE=true

#Optional: Allow Test Data Mutation within Supabase Project
# These three values must ALL be set correctly before /api/dev/reset,
# seed routes, or any destructive test endpoints will respond.
ALLOW_TEST_DATA_MUTATION=true
ALLOWED_TEST_PROJECT_REFS=your-test-project-ref-here
ALLOWED_TEST_DB_NAMES=postgres

# CORS Configuration
# Security: Use strict origin allowlist; never use wildcards in production
# Dev: HTTPS Vite server with proxy (https://localhost:5173 -> http://localhost:8000)
CORS_ORIGINS=https://localhost:5173 # Optional: Add extra allowed origins (comma-separated) such as https://preview.example.com

# Required: Secret key for JWT (generate a random key for test environment)
# Generate with: python -c "import secrets; print(secrets.token_hex(32))"
SECRET_KEY=your-random-secret-key-for-testing

# Optional: OAuth credentials (for live scraper tests)
RAVELRY_APP_KEY=
RAVELRY_APP_SECRET=
GITHUB_TOKEN=

# Optional: Test authentication (for live API tests)
# Use a dev-token format: dev-token-<uuid> from your running backend
ADMIN_TOKEN=

# Optional: Live API test switches
# RUN_LIVE_SCRAPERS=1
# RUN_AGAINST_SERVER=1
# BACKEND_BASE_URL=https://localhost:8002