#服务器端口
server:
  port: 8100
spring:
  application:
    name: blade-auth
  config:
    import:
      - nacos:blade.yaml?group=DEFAULT_GROUP&refreshEnabled=true
      - nacos:blade-${spring.profiles.active}.yaml?group=DEFAULT_GROUP&refreshEnabled=true
      - optional:nacos:${spring.application.name}-${spring.profiles.active}.yaml?group=DEFAULT_GROUP&refreshEnabled=true
  cloud:
    nacos:
      username: ${NACOS_USERNAME:${NACOS_PROD_USERNAME:nacos}}
      password: ${NACOS_PASSWORD:${NACOS_PROD_PASSWORD:nacos}}
      server-addr: ${NACOS_HOST:${NACOS_PROD_HOST:127.0.0.1:8848}}
      discovery:
        namespace: "${NACOS_NAMESPACE:}"
      config:
        # 文件后缀名
        file-extension: yaml
        namespace: "${NACOS_NAMESPACE:}"
  datasource:
    url: ${blade.datasource.${spring.profiles.active}.url}
    username: ${blade.datasource.${spring.profiles.active}.username}
    password: ${blade.datasource.${spring.profiles.active}.password}
    # 在使用Spring默认数据源Hikari的情况下配置以下配置项
    hikari:
      # 自动提交从池中返回的连接
      auto-commit: true
      # 连接池中维护的最小空闲连接数
      minimum-idle: 10
      # 连接池中允许的最大连接数。缺省值：10；推荐的公式：((core_count * 2) + effective_spindle_count)
      maximum-pool-size: 60
      # 空闲连接超时时间，默认值600000（10分钟），大于等于max-lifetime且max-lifetime>0，会被重置为0；不等于0且小于10秒，会被重置为10秒。
      # 只有空闲连接数大于最大连接数且空闲时间超过该值，才会被释放
      idle-timeout: 30000
      # 连接最大存活时间.不等于0且小于30秒，会被重置为默认值30分钟.设置应该比mysql设置的超时时间短
      max-lifetime: 1800000
      # 等待连接池分配连接的最大时长（毫秒），超过这个时长还没可用的连接则发生SQLException， 缺省:30秒
      connection-timeout: 30000
      # 连接测试查询
      connection-test-query: select 1
      #connection-test-query: select 1 from dual
  freemarker:
    # 模板后缀名
    suffix: .ftl
    # 文档类型
    content-type: text/html
    # 页面编码
    charset: UTF-8
    # 页面缓存
    cache: false
    # 模板路径
    template-loader-path: classpath:/templates/
  web:
    # 资源路径
    resources:
      static-locations: classpath:/static/

#swagger文档
swagger:
  base-packages:
    - org.springblade
    - org.springframework.security.oauth2.provider.endpoint

#第三方登陆
social:
  enabled: true
  domain: http://127.0.0.1:2888
  oauth:
    GITHUB:
      client-id: 233************
      client-secret: 233************************************
      redirect-uri: ${social.domain}/oauth/redirect/github
    GITEE:
      client-id: 233************
      client-secret: 233************************************
      redirect-uri: ${social.domain}/oauth/redirect/gitee
    WECHAT_OPEN:
      client-id: 233************
      client-secret: 233************************************
      redirect-uri: ${social.domain}/oauth/redirect/wechat
    QQ:
      client-id: 233************
      client-secret: 233************************************
      redirect-uri: ${social.domain}/oauth/redirect/qq
    DINGTALK:
      client-id: 233************
      client-secret: 233************************************
      redirect-uri: ${social.domain}/oauth/redirect/dingtalk

# IAM统一身份认证
iam:
  sso:
    token-url: ${IAM_SSO_TOKEN_URL:http://172.16.204.83:38000/gwzh/IAM/IAM_SSO_TOKEN}
    profile-url: ${IAM_SSO_PROFILE_URL:http://172.16.204.83:38000/gwzh/IAM/IAM_SSO_PROFILE}
    client-id: ${IAM_SSO_CLIENT_ID:f0b52f23f71b1649c468}
    client-secret: ${IAM_SSO_CLIENT_SECRET:5b3d8575f0899946623ab86523ac3dd8ee98}
    system-client-id: ${IAM_SSO_SYSTEM_CLIENT_ID:saber3}
    system-client-secret: ${IAM_SSO_SYSTEM_CLIENT_SECRET:saber3_secret}
    redirect-uri: ${IAM_SSO_REDIRECT_URI:http://172.16.203.228:8000/callback}
    authorization: ${IAM_SSO_AUTHORIZATION:Z3d6aF90bXMtOVJJU0RVN1U6YW0yYkcwWnBJZ0RQZmtrSjNaZkZjUDBSaGFuSEtxQng=}
    profile-authorization: ${IAM_SSO_PROFILE_AUTHORIZATION:YjNlZmU0ODEwMzJiNGJhZTpkYzQ5NDY1NmQ4MzE0NThjODI5MzlmNzA2ZjliNDY3MQ==}