namespace TarninaHub.Infrastructure.Auth;

public sealed class AuthSettings
{
    public string Issuer { get; set; } = "tarninahub";

    public string Audience { get; set; } = "tarninahub";

    /// <summary>
    /// HMAC signing key (min. 32 bytes). Must come from configuration/secrets
    /// (env `Auth__SigningKey`) — never hardcoded for production environments.
    /// </summary>
    public string SigningKey { get; set; } = string.Empty;

    public int TokenLifetimeMinutes { get; set; } = 60;

    public bool HasUsableSigningKey => SigningKey.Length >= 32;
}