Files

6 lines
358 B
Plaintext
Raw Permalink Normal View History

# Copy to .dev.vars for `wrangler dev` (gitignored). In production set via `wrangler secret put`.
# Only these two are read by the app — they refresh the access token. The refresh token is
# minted once (scripts/mint-token.mjs) and stored/rotated in D1, never read from here.
X_CLIENT_ID="your-oauth2-client-id"
X_CLIENT_SECRET="your-oauth2-client-secret"