.env.example

# MCP Server Configuration
MCP_SERVER_NAME=Solr Search
MCP_SERVER_PORT=8765

# Apache Solr Configuration
SOLR_BASE_URL=http://localhost:8983/solr
SOLR_COLLECTION=documents
SOLR_USERNAME=
SOLR_PASSWORD=

# OAuth 2.1 Configuration (MCP Spec 2025-06-18)
# Set ENABLE_OAUTH=true to enable OAuth authentication
ENABLE_OAUTH=false
OAUTH_PROVIDER=keycloak

# Keycloak Configuration
# Used when ENABLE_OAUTH=true and OAUTH_PROVIDER=keycloak
KEYCLOAK_URL=http://localhost:8080
KEYCLOAK_REALM=solr-mcp
KEYCLOAK_CLIENT_ID=solr-search-server
KEYCLOAK_CLIENT_SECRET=your-client-secret-from-keycloak

# OAuth Scopes
# Comma-separated list of required scopes
OAUTH_SCOPES=solr:search,solr:read

# OAuth Server-Side Token Retrieval (Optional)
# If enabled, the MCP server will automatically retrieve and refresh OAuth tokens
# This allows users to use the server without manually providing access_token
OAUTH_AUTO_REFRESH=true
OAUTH_USERNAME=testuser
OAUTH_PASSWORD=testpassword

# Token Validation
# Endpoints for token validation (auto-configured from KEYCLOAK_URL and KEYCLOAK_REALM)
TOKEN_VALIDATION_ENDPOINT=${KEYCLOAK_URL}/realms/${KEYCLOAK_REALM}/protocol/openid-connect/token/introspect
JWKS_ENDPOINT=${KEYCLOAK_URL}/realms/${KEYCLOAK_REALM}/protocol/openid-connect/certs

# Legacy JWT Configuration (deprecated, use OAuth 2.1 instead)
JWT_SECRET_KEY=your_jwt_secret_key
JWT_ALGORITHM=HS256
JWT_EXPIRATION_MINUTES=1440  # 24 hours

# Logging
LOG_LEVEL=INFO