// Auth constants shared across route handlers, middleware, and server helpers.

/** httpOnly cookie holding the short-lived (15 min) Identity access JWT. */
export const ACCESS_TOKEN_COOKIE = "fr_access";

/** httpOnly cookie holding the long-lived (30 day) rotating refresh token. */
export const REFRESH_TOKEN_COOKIE = "fr_refresh";

/**
 * Tenant the public site authenticates against. FlatRender's own users live in the
 * default tenant (slug `flatrender`). Overridable for white-label deployments.
 */
export const DEFAULT_TENANT_SLUG =
  process.env.NEXT_PUBLIC_TENANT_SLUG ?? "flatrender";
