<?php

return [
    'token_prefix' => 'dbl_',
    'ldap_jwt_ttl' => (int) env('API_LDAP_JWT_TTL', 3600),
    'scopes' => [
        'databases:read' => 'List SQL Server databases',
        'databases:write' => 'Take databases offline',
        'ldap:read' => 'Read LDAP users and groups',
        'ldap:write' => 'Modify LDAP users and groups',
        'project-search:read' => 'Search NAS project metadata',
        'admin' => 'Full API access',
    ],
    'scope_groups' => [
        'read_only' => ['databases:read', 'ldap:read', 'project-search:read'],
        'project_search' => ['project-search:read'],
        'full' => ['admin'],
    ],
];