admins
a7abf454d9
- /api/internal/grant: secret-auth endpoint for payment-router to provision access on a paid order — find-or-create user (emailVerified, temp password, mustChangePassword), enroll by course slug list, AccessLog, delivery email. Idempotent by order_id. - User.mustChangePassword flag (+ migration); (student) layout redirects flagged users to /change-password (forced first-login change). - email.ts: sendCourseGrantEmail (temp password for new buyers). - middleware: /api/internal is public (own secret auth). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
24 lines
639 B
Bash
24 lines
639 B
Bash
DATABASE_URL="postgresql://lms_user:password@localhost:5432/lms_db"
|
|
|
|
BETTER_AUTH_SECRET="generate-with: openssl rand -base64 32"
|
|
BETTER_AUTH_URL="http://localhost:3000"
|
|
|
|
RESEND_API_KEY=""
|
|
EMAIL_FROM="noreply@school.second-brain.ru"
|
|
|
|
S3_ENDPOINT="https://nbg1.your-objectstorage.com"
|
|
S3_BUCKET="second-brain-lms"
|
|
S3_ACCESS_KEY=""
|
|
S3_SECRET_KEY=""
|
|
S3_REGION="eu-central"
|
|
|
|
# Cloudflare Turnstile (anti-bot защита на регистрации)
|
|
NEXT_PUBLIC_TURNSTILE_SITE_KEY=""
|
|
TURNSTILE_SECRET_KEY=""
|
|
|
|
# Kinescope API
|
|
KINESCOPE_API_KEY=""
|
|
|
|
# Internal access-provisioning (payment-router → /api/internal/grant)
|
|
INTERNAL_GRANT_SECRET=""
|