Configuration

builder.AddSqlOS<AppDbContext>(options =>
{
    options.AuthServer.Issuer = "https://app.example.com/sqlos/auth";
    options.AuthServer.PublicOrigin = "https://app.example.com";
 
    options.AuthServer.SeedAuthPage(page =>
    {
        page.PageTitle = "Sign in";
        page.PageSubtitle = "Secure your owned app first.";
    });
 
    options.AuthServer.SeedOwnedWebApp(
        "web",
        "Main Web App",
        "https://app.example.com/auth/callback");
});

options.Fga.Seed(seed =>
{
    seed.ResourceType("workspace", "Workspace");
    seed.Permission("perm_workspace_view", "workspace.view", "View workspace", "workspace");
    seed.Role("role_workspace_admin", "workspace_admin", "Workspace Admin");
    seed.RolePermission("workspace_admin", "workspace.view");
});

options.AuthServer.EnablePortableMcpClients(registration =>
{
    registration.Cimd.TrustedHosts.Add("clients.example.com");
});

options.AuthServer.ConfigureEmailOtp(email =>
{
    email.AzureCommunicationServicesConnectionString =
        builder.Configuration["SqlOS:EmailOtp:AzureCommunicationServicesConnectionString"];
    email.FromAddress = builder.Configuration["SqlOS:EmailOtp:FromAddress"];
    email.ApplicationName = "My App";
});

{
  "SqlOS": {
    "Dashboard": {
      "AuthMode": "Password",
      "Password": "your-strong-password"
    }
  }
}