"""SSO 共享配置 —— 与 blog 后端保持一致"""

# JWT 配置（必须与 blog 后端 routers/auth.py 完全一致）
SECRET_KEY = "your-secret-key-change-in-production"
ALGORITHM = "HS256"
ACCESS_TOKEN_EXPIRE_MINUTES = 10080  # 7天 = 7 * 24 * 60

# 默认账号（与 blog 本地 admin 表对应）
DEFAULT_USERS = {
    "admin": {
        "username": "admin",
        "password": "zf9wx4xm7",  # 明文密码，仅演示用
    }
}

# Cookie 配置
COOKIE_DOMAIN = "129.211.173.87"
COOKIE_SAMESITE = "Lax"