"""JWTAuth related constants."""

# Environment constants
QA_ENVIRONMENT = "qa"
PROD_ENVIRONMENT = "prod"

QA_ISSUERS = ["https://qalogin.theorchard.com/", "https://qa-orchard.auth0.com/"]
PROD_ISSUERS = ["https://login.distroauth.com/", "https://workstation.auth0.com/"]

QA_AUDIENCE = "https://qa-ows.theorchard.io"
PROD_AUDIENCE = "https://prod-ows.theorchard.io"

QA_API_AUDIENCE = "https://workstation.qaorch.com/api"
PROD_API_AUDIENCE = "https://workstation.theorchard.com/api"

TOKEN_TYPE = "Bearer"

DEFAULT_JWKS_LIFESPAN = 60 * 60  # 1 hour
DEFAULT_ALGORITHMS = ["HS256", "RS256"]
DEFAULT_LEEWAY = 0
DEFAULT_OPTIONS = {
    "verify_exp": True,
    "verify_nbf": True,
    "verify_iat": True,
    "verify_aud": True,
    "verify_iss": True,
    "require": [
        "iss",
        "sub",
        "exp",
        "iat",
        "azp",
    ],
}