spring.application.name=dx-ui-service
# Active profile must be set via SPRING_PROFILES_ACTIVE env var.
# Local dev: set in docker-compose (SPRING_PROFILES_ACTIVE=local)
# Deployed: not set - uses base application.properties only

# --JPA Properties --
spring.jpa.database=POSTGRESQL
spring.datasource.url=jdbc:postgresql://localhost:6432/dsam000
spring.jpa.open-in-view=false
spring.datasource.driverClassName=org.postgresql.Driver
spring.datasource.connectionTestQuery=select 1
spring.jpa.show-sql=true
spring.jpa.hibernate.naming.physical-strategy=org.hibernate.boot.model.naming.PhysicalNamingStrategyStandardImpl
server.port=8080

#Read Trace Request
spring.mvc.dispatch-trace-request=true

server.servlet.session.tracking-modes=URL

server.servlet.context-path=/dx-ui-service
spring.mvc.servlet.path=/api/v1

#DX Properties
# CORS_ALLOWED_ORIGINS must be explicitly set via environment variable.
# No default - fail-closed for security. Set per environment in Terraform.
# QA:   CORS_ALLOWED_ORIGINS=https://qa-dx.smedx.net,https://test.smedx.net
# Prod: CORS_ALLOWED_ORIGINS=https://prod-dx.smedx.net,https://prod.smedx.net
dx.cors.allowed-origins=${CORS_ALLOWED_ORIGINS}

# Actuator endpoints
management.endpoints.web.exposure.include=health,info
management.endpoint.health.show-details=when-authorized
management.endpoint.health.enabled=true

# USM Client
usm.client.url=https://uat-auth-console.sonymusic.com

usm.api.path=graph/v1/searchUsers
usm.api.client-id=${USM_API_CLIENT_ID}
usm.api.client-secret=${USM_API_CLIENT_SECRET}

usm.session.validation.enabled=${SME_VALIDATION_ENABLED:true}
usm.session.validation.path=util/session/check
usm.auth.path=util/client/token/create

usm.authorization.path=/oauth2/openid/v1/token
usm.authorization.redirect_uri=https://qa-dx.smedx.net/dx-ui-service/api/v1/usm/callback

usm.authorization.post-login.path=usm/callback
usm.authorization.post-login.hosts.local=${POST_LOGIN_REDIRECT_LOCAL_URI:http://localhost:4200}
usm.authorization.post-login.hosts.remote=https://qa-dx.smedx.net/dx-ui-service

app.protected-paths=/api/v1/admin/**