config.example.py

CAS_LOGIN_URL = "https://cas.sustech.edu.cn/cas/login"
CAS_VALIDATE_URL = "https://cas.sustech.edu.cn/cas/p3/serviceValidate"
SERVICE_URL = "https://cas-proxy.example.org/callback"

# Exact scheme/host/port matching is enforced. A host-only entry allows any path
# on that host. Multiple entries can be separated by commas or written as a list.
REDIRECT_URI_ALLOWLIST = ["https://sso.example.org"]

CLIENT_ID = "cra-cas-proxy"
CLIENT_SECRET = "replace-with-a-new-random-secret"
SECRET_KEY = "replace-with-a-long-random-jwt-signing-secret"

ACCESS_TOKEN_EXPIRY = 1800
AUTH_CODE_EXPIRY = 300
SESSION_EXPIRY = 600

DATABASE_PATH = "cas_proxy.sqlite3"
ISSUER = "cas-proxy"
CAS_REQUEST_TIMEOUT = 8.0

# Keep this true behind HTTPS. Set to False only for local HTTP testing.
COOKIE_SECURE = True
COOKIE_SAMESITE = "Lax"

HOST = "127.0.0.1"
PORT = 59084

# Keep False if your client does not send redirect_uri to /token.
REQUIRE_TOKEN_REDIRECT_URI = False