Spaces:
Sleeping
Sleeping
chih.yikuan
Claude Opus 4.8 (1M context)
feat: add "Sign in with Google" (Google SSO) for teachers/admins
6726707 | # ClassLens Environment Variables | |
| # Copy to .env (project root or chatkit/) for local development. | |
| # For HF Spaces, add these as Secrets in the Space settings. NEVER commit real secrets. | |
| # ============================================================================= | |
| # OpenAI (vision parsing + report generation) | |
| # ============================================================================= | |
| OPENAI_API_KEY=sk-your-openai-api-key | |
| # ============================================================================= | |
| # Database | |
| # ============================================================================= | |
| # Provider: "supabase" (Postgres, durable) or "sqlite" (local dev/tests) | |
| DATABASE_PROVIDER=supabase | |
| # Postgres schema that isolates ClassLens tables from anything else in the DB. | |
| DB_SCHEMA=classlens | |
| # Supabase connection (Project Settings > Database > Connection string). | |
| # Use the session pooler (port 5432). Keep the password URL-safe. | |
| SUPABASE_DB_URL=postgresql://postgres.<ref>:<password>@<region>.pooler.supabase.com:5432/postgres | |
| # Supabase project URL + service-role key (only used for raw-file Storage). | |
| SUPABASE_URL=https://<ref>.supabase.co | |
| SUPABASE_SERVICE_ROLE_KEY=your-service-role-key | |
| SUPABASE_STORAGE_BUCKET=classlens-raw-files | |
| # Local SQLite path (only used when DATABASE_PROVIDER=sqlite; blank = auto). | |
| DATABASE_PATH= | |
| # ============================================================================= | |
| # Auth | |
| # ============================================================================= | |
| JWT_SECRET_KEY=change-me-in-prod | |
| JWT_EXPIRE_MINUTES=1440 | |
| # Comma-separated emails that are promoted to admin on startup. | |
| ADMIN_EMAILS=you@example.com | |
| # ============================================================================= | |
| # Google SSO ("Sign in with Google") — optional; blank disables the button. | |
| # ============================================================================= | |
| # From the OAuth 2.0 Client (Web application) in Google Cloud Console. | |
| # Register this exact Authorized redirect URI on that client: | |
| # <FRONTEND_URL>/api/auth/google/callback | |
| # Anyone with an @taboola.com Google account is admitted (auto-admin on first | |
| # login); everyone else must already have an account. | |
| GOOGLE_CLIENT_ID= | |
| GOOGLE_CLIENT_SECRET= | |
| # ============================================================================= | |
| # Misc | |
| # ============================================================================= | |
| ENCRYPTION_KEY= | |
| FRONTEND_URL=http://localhost:3000 | |