Authentication

Required environment variables

Set in license-server-detail runtime:

• AUTH_OKTA_ID
• AUTH_OKTA_SECRET
• AUTH_OKTA_ISSUER
• AUTH_SECRET

Recommended:

• NEXTAUTH_URL (public base URL of the dashboard)
• AUTH_TRUST_HOST=true only in controlled proxy environments

Okta application setup

Configure your Okta app redirect URI to the NextAuth callback path:

• https://<dashboard-domain>/api/auth/callback/okta

For local testing:

• http://localhost:3000/api/auth/callback/okta

Session model

• Users sign in through Okta.
• NextAuth session uses JWT strategy.
• Protected API routes return 401 when unauthenticated.