# Common attributes.
# May be overidden by per-environment settings; see below
common:
  attributes:
    signed: # integrity-protected attributes
    - user
    insecure: # Insecure (unsigned) attributes
    - account
  ephemeral: true # Ephemeral cookies go away when the browser closes

# Test/spec runs
test:
  timeout: 15 #minutes
  renew: 5 #minutes before expiration
  cookie:
    name: global_session
  authority: test # the name of the local authority (optional)
  trust: #which authorities this app will trust
  - test

# Development mode
development:
  timeout: 60
  renew: 15
  cookie:
    name: global_session
  authority: development
  trust:
  - development
  - production

# Production mode
production:
  timeout: 60
  renew: 15
  cookie:
    name: global_session
    domain: <%= app_domain %>
  authority: production
  trust:
  - production