# Flask Configuration
SECRET_KEY=your-secret-key-change-this-in-production
FLASK_DEBUG=1

# Entra ID (Azure AD) Configuration
# Get these values from your Azure Portal > App Registrations
AZURE_CLIENT_ID=your-client-id-here
AZURE_CLIENT_SECRET=your-client-secret-here
AZURE_TENANT_ID=your-tenant-id-here

# Redirect URI - Update this to match your deployment URL
# For local development: http://localhost:5555/auth/callback
# For production: https://yourdomain.com/auth/callback
REDIRECT_URI=http://localhost:5555/auth/callback

# Azure AD Authority URL (usually don't need to change this)
AUTHORITY=https://login.microsoftonline.com/

# Scopes for Microsoft Graph API (to get user info)
SCOPE=User.Read

# Application Settings
# Default admin email (this user will have admin role automatically)
DEFAULT_ADMIN_EMAIL=admin@yourdomain.com