.env.test

# Plane MCP Server - Test Environment Variables
# Copy this file to .env.test.local and fill in your values
# Run tests with: export $(cat .env.test.local | xargs) && pytest tests/ -v

# Required: Plane API configuration
PLANE_TEST_BASE_URL=https://api.plane.so
PLANE_TEST_API_KEY=your_api_key_here
PLANE_TEST_WORKSPACE_SLUG=your_workspace_slug_here

# Optional: MCP server URL (default: http://localhost:8211)
PLANE_TEST_MCP_URL=http://localhost:8211

# Optional: OAuth provider settings (only needed if testing OAuth flow)
# PLANE_OAUTH_PROVIDER_CLIENT_ID=your_oauth_client_id
# PLANE_OAUTH_PROVIDER_CLIENT_SECRET=your_oauth_client_secret
# PLANE_OAUTH_PROVIDER_BASE_URL=http://localhost:8211
# PLANE_OAUTH_PROVIDER_ENABLE_CIMD=false  # Set to true to enable client-id-metadata-document support
# Extra redirect URI patterns appended to the built-in OAuth allowlist
# (comma-separated). Onboard a new MCP client without a code change/release.
# Glob: `*` matches any port/path segment or subdomain. Keep the host pinned;
# wildcard only the port/path.
# PLANE_OAUTH_ALLOWED_REDIRECT_URIS=https://newclient.com/cb,https://other.app/oauth/*

# Optional: Route prefix — prepended to all mounted routes.
# Use when reverse-proxying alongside other apps.
# MCP_PATH_PREFIX=

# Optional: Logging — when true, include user info (PII such as the display
# name) in logs alongside the opaque user id. Defaults to false.
# LOG_USER_INFO=false

# ---------------------------------------------------------------------------
# Redis / Token storage (HTTP / SSE modes)
# ---------------------------------------------------------------------------
# Without Redis, OAuth tokens are kept in memory and lost on restart.

# Option A — plain Redis (no auth)
# REDIS_HOST=localhost
# REDIS_PORT=6379

# Option B — Redis with static password (self-managed, non-rotating)
# REDIS_HOST=localhost
# REDIS_PORT=6379
# REDIS_PASSWORD=your_redis_password

# Option C — ElastiCache with AWS Secrets Manager (rotating AUTH tokens)
# Requires IRSA (AWS_ROLE_ARN) or EKS Pod Identity
# (AWS_CONTAINER_CREDENTIALS_FULL_URI) — both unset = path skipped.
# REDIS_HOST=your-cluster.cache.amazonaws.com
# REDIS_PORT=6379
# ELASTICACHE_SECRET_ARN=arn:aws:secretsmanager:us-east-1:123456789012:secret:redis-auth-XXXXXX
# REDIS_AUTH_TOKEN_KEY=authToken   # JSON key inside the secret; default `authToken`
# AWS_REGION=us-east-1
# AWS_SECRET_CACHE_TTL=300         # seconds; default 300
# REDIS_SSL=true                   # TLS — default true on this path; set `false` only for plaintext Redis