SAF Documentation

Appearance

@saflib/ory-kratos-http

Interface: OryKratosHttpEnvSchema ​

Environment variables for the @saflib/ory-kratos-http package, including inherited variables via extends. Generated by @saflib/env. To update, make changes to the adjacent env.schema.json, navigate to the package root, and run npm exec saf-env generate.

Extends ​

  • EnvEnvSchema.ExpressEnvSchema.NodeEnvSchema

Properties ​

ADMIN_EMAILS ​

ADMIN_EMAILS: string

Comma-separated list of emails who will get the 'admin' scope. Emails must be validated to receive this scope.

Inherited from ​

ExpressEnvSchema.ADMIN_EMAILS

CLIENT_SUBDOMAINS ​

CLIENT_SUBDOMAINS: string

Comma-separated list of client subdomains, e.g. 'www,app,auth,'. Include an empty string (such as in the example) to indicate there's a client for the root domain.

Inherited from ​

EnvEnvSchema.CLIENT_SUBDOMAINS

DEPLOYMENT_NAME ​

DEPLOYMENT_NAME: string

The name of the deployment, e.g. 'production', 'staging', 'development'. This may be used in strings such as database file names and logging metadata; each deployment should have a unique name.

Inherited from ​

EnvEnvSchema.DEPLOYMENT_NAME

DISABLE_MFA_ENFORCEMENT? ​

optional DISABLE_MFA_ENFORCEMENT: "true" | "false"

When 'true', skip MFA gates on admin routes and operations tagged mfa-required. Useful for local development.

Inherited from ​

ExpressEnvSchema.DISABLE_MFA_ENFORCEMENT

DOMAIN ​

DOMAIN: string

The root domain of the deployment, e.g. 'saf.com'.

Inherited from ​

EnvEnvSchema.DOMAIN

KRATOS_ADMIN_API_URL? ​

optional KRATOS_ADMIN_API_URL: string

Base URL for the Ory Kratos admin API (e.g. http://kratos:4434). Used for server-side identity lookups.

KRATOS_HANDLER_HTTP_HOST ​

KRATOS_HANDLER_HTTP_HOST: string

Host URL for the Ory Kratos courier callback server (e.g. recipes-monolith:3000).

LOG_LEVEL? ​

optional LOG_LEVEL: "error" | "warn" | "info" | "verbose" | "debug" | "silly"

Minimum Winston log level for console output (error, warn, info, verbose, debug, silly). HTTP access lines via Morgan are unaffected.

Inherited from ​

ExpressEnvSchema.LOG_LEVEL

NODE_ENV ​

NODE_ENV: "development" | "production" | "test"

The environment of the deployment. Generally should avoid using this, consider its use deprecated, prefer instead more specific environment variables.

Inherited from ​

EnvEnvSchema.NODE_ENV

PROTOCOL ​

PROTOCOL: "https" | "http"

The protocol of the deployment, e.g. 'https'

Inherited from ​

EnvEnvSchema.PROTOCOL

SAF_INTERNAL_ASSERTION_KEYS? ​

optional SAF_INTERNAL_ASSERTION_KEYS: string

HMAC keys for signing/verifying internal identity assertions. Format: keyId:base64secret[,keyId:base64secret]. Sign with the first entry; verify against all (rotation = prepend a new key). Sentinel mock (e.g. Infisical mock placeholder) expands to a fixed local key. Optional — only required in environments that use the internal request channel.

Inherited from ​

ExpressEnvSchema.SAF_INTERNAL_ASSERTION_KEYS

TZ ​

TZ: "UTC"

The timezone of the deployment, e.g. 'America/New_York'. Must be UTC.

Inherited from ​

EnvEnvSchema.TZ