<?php
return [
    'enabled' => false,
    'issuer' => 'https://rh.super.co.ao',
    'authorization_endpoint' => 'CHANGE_ME',
    'token_endpoint' => 'CHANGE_ME',
    'end_session_endpoint' => 'CHANGE_ME',
    'client_id' => 'CHANGE_ME',
    'client_secret' => 'CHANGE_ME',
    'redirect_uri' => 'https://comercial.super.co.ao/sso/callback',
    'post_logout_redirect_uri' => 'https://comercial.super.co.ao/login',
    'scopes' => ['openid', 'profile', 'email'],
    'id_token_alg' => 'RS256',
    'id_token_public_key_path' => __DIR__ . '/../storage/keys/gch-id-token-public.pem',
    'claims' => [
        'sub' => 'sub',
        'name' => 'name',
        'preferred_name' => 'preferred_name',
        'email' => 'email',
        'phone' => 'phone_number',
        'employee_id' => 'employee_id',
        'person_id' => 'person_id',
        'job_title' => 'job_title',
        'org_unit' => 'org_unit',
        'access_status' => 'access_status',
    ],
    'active_access_values' => ['active', 'enabled', '1', 1, true],
    'backchannel_hmac_secret' => 'CHANGE_ME',
    'backchannel_clock_skew_seconds' => 300,
];
