Environment variables
| Variable | Requirement | Description | Example |
|---|---|---|---|
ISSUER | required | Canonical public URL of this authorization server. It is the `iss` of every token, the base of every endpoint advertised in discovery, and the redirect target of the admin console client. | https://auth.example.com |
MONGODB_URI | required | MongoDB connection string. Not read when NODE_ENV is `test`, where the in-memory adapter is used instead. | mongodb://localhost:27017 |
DATABASE_NAME | required | Name of the MongoDB database holding every collection. Not read when NODE_ENV is `test`. | OAuth |
NODE_ENV | optional | `test` selects the in-memory storage adapter and the capturing mail transport, and disables outbound Sentry delivery. Any other value is reported to Sentry as the environment label; the Docker image sets `production`. | production |
Signing keys, SMTP, the DPoP nonce secret and the pairwise salt are not environment variables: they live in the database and are provisioned by bun run db:setup or generated on first boot.