7c3945417a
Caught a redirect_uri_mismatch on the dev server: the env file was the localhost one (BOX_REDIRECT_URI=http://localhost:7183/auth/box/callback) which deploy.sh resets on every deploy, so the dev server kept telling Box "redirect me to localhost". Same thing would have hit prod. Switched to request-based detection so the same code works on laptop, dev, and prod: - box_client.build_authorize_url and exchange_code_for_tokens now take redirect_uri as an explicit parameter (the two URIs MUST match — Box rejects the token exchange otherwise). - New _box_redirect_uri() helper in api_server: prefers BOX_REDIRECT_URI if explicitly set (escape hatch), otherwise reads X-Forwarded-Host (set by Apache when behind the optical-dev / optical-prod reverse proxy, where the app is mounted at /ai_qc/), and falls back to request.host for direct local access. - Dropped the per-env BOX_REDIRECT_URI from the four env files. Templates keep it commented out as documentation, and now also list all three redirect URIs you'll need to register in the Box developer console. - box_client.is_configured() no longer gates on the redirect URI. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
43 lines
No EOL
1.6 KiB
Bash
43 lines
No EOL
1.6 KiB
Bash
# Development Environment Configuration
|
|
# This file is used for local development testing
|
|
|
|
# OpenAI Configuration
|
|
OPENAI_API_KEY=sk-svcacct-HSREzGYDnN-vCVGAh6LhYqlNcJVF2oefMrY9oCsdDsQFmyVJyHpLb1eSb_mp_vP4YPl4T3BlbkFJzKaOrPghIzx76_22K8VjwO6j2JnoDEvrYDrgfrnA4WjD5sTMnhOqGHXximwGXFhUoYgA
|
|
GOOGLE_API_KEY=AIzaSyDMWN_PAnyU7bPmtWcEKq4LJfiu1KuwUsU
|
|
|
|
# Azure AD / MSAL Authentication Configuration (Development App Registration)
|
|
# NOTE: You'll need to create a separate app registration for development
|
|
AZURE_TENANT_ID=e519c2e6-bc6d-4fdf-8d9c-923c2f002385
|
|
AZURE_CLIENT_ID=9079054c-9620-4757-a256-23413042f1ef
|
|
AZURE_REDIRECT_URI=http://localhost:7183
|
|
|
|
# Flask Configuration
|
|
FLASK_ENV=development
|
|
SECRET_KEY=dev-secret-key-change-this-for-security
|
|
DEBUG_MODE=true
|
|
PORT=7183
|
|
|
|
# Application Configuration
|
|
ENVIRONMENT=development
|
|
BASE_URL=http://localhost:7183
|
|
UPLOAD_FOLDER=uploads-dev
|
|
OUTPUT_FOLDER=output-dev
|
|
|
|
# Development-specific settings
|
|
LOG_LEVEL=DEBUG
|
|
ENABLE_DEBUG_ENDPOINTS=true
|
|
|
|
# Mailgun / SMTP (for email notifications)
|
|
SMTP_SERVER=smtp.mailgun.org
|
|
SMTP_PORT=587
|
|
SMTP_USER=twist@mail.dev.oliver.solutions
|
|
SMTP_PASSWORD=102115e9f3b9d7332d0cd1d4329bc0d4-77751bfc-ca066b71
|
|
SENDER_EMAIL=TWIST-UK-SERVER@oliver.agency
|
|
ERROR_EMAIL=nick.viljoen@brandtech.plus
|
|
REPORT_EMAILS=nick.viljoen@brandtech.plus
|
|
|
|
# Box.com OAuth (per-creator user authentication for automation folders)
|
|
# Redirect URI is computed from each request — no need to hardcode it per server.
|
|
# Set BOX_REDIRECT_URI here only as an override if request-based detection fails.
|
|
BOX_CLIENT_ID=o9zxyl6j917q0bkndrwfi2x5zbdeanh5
|
|
BOX_CLIENT_SECRET=yejdbWTeBOcdsDImpNQ7nvLJZad3e0Jm |