security-by-design/.env.test.example at master · laugiov/security-by-design · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
# SkyLink - Test Environment Variables
# Copy this file to .env.test and fill in the values
# Used ONLY for running tests (pytest)

# HOW TO SET UP:
# 1. Copy this file:
#    cp .env.test.example .env.test
#
# 2. Generate dedicated test keys:
#    openssl genrsa -out test_private.pem 2048
#    openssl rsa -in test_private.pem -pubout -out test_public.pem
#
# 3. Copy the ENTIRE content of test keys into .env.test:
#    - test_private.pem → PRIVATE_KEY_PEM
#    - test_public.pem → PUBLIC_KEY_PEM
#
# 4. Clean up:
#    rm test_private.pem test_public.pem

# ============================================
# JWT RS256 Keys (TEST KEYS - REQUIRED)
# ============================================
# Generate DIFFERENT keys from your dev keys (.env)
# This ensures test isolation and prevents mixing test/dev data

PRIVATE_KEY_PEM="-----BEGIN PRIVATE KEY-----
__PASTE_YOUR_TEST_PRIVATE_KEY_HERE__
-----END PRIVATE KEY-----"

PUBLIC_KEY_PEM="-----BEGIN PUBLIC KEY-----
__PASTE_YOUR_TEST_PUBLIC_KEY_HERE__
-----END PUBLIC KEY-----"

# ============================================
# Application Settings (TEST)
# ============================================
ENVIRONMENT="test"
LOG_LEVEL="DEBUG"

# ============================================
# Database (TEST)
# ============================================
# Use in-memory SQLite for fast, isolated tests
DB_URL="sqlite:///:memory:"

# ============================================
# Weather API (TEST - Optional)
# ============================================
# Tests can use a mock API or skip weather tests
# WEATHER_API_KEY="test_api_key_not_real"
# WEATHER_API_URL="https://api.weatherapi.com/v1"