// Example configuration file for atlogin.
// Copy this file to ~/.atlogin/config.json and edit as needed.
{
	// Address to listen on. Default: ":9411"
	"addr": "127.0.0.1:9411",

	// Issuer URL for OIDC discovery. Must match what clients expect.
	// Required: fixed HTTPS origin.
	"issuer": "https://login.example.com",

	// Optional local stylesheet, loaded at startup.
	// "custom_css_file": "/var/lib/atlogin/theme.css",

	// Friendly name shown on Bluesky authorization page.
	// Optional: defaults to "ATLogin"
	//"client_name": "ATLogin",

	// OIDC client credentials. Map of client ID to client secret.
	// Add new clients with: atlogin -new-client <client-id>
	"secrets": {},

	// Allowed redirect URIs per client. Required for every client.
	// Only exactly listed URIs are accepted; missing lists deny authorization.
	// "redirect_uris": {
	//   "my-client-id": ["https://myapp.example.com/callback"]
	// },
}