<?php

return [

    /*
    |--------------------------------------------------------------------------
    | Third Party Services
    |--------------------------------------------------------------------------
    |
    | Credentials for third-party + first-party Ladill platform services that
    | Ladill Care consumes (SSO, identity).
    |
    */

    /*
    | Ladill SSO (OIDC) — Care is a first-party client of the platform identity
    | provider at auth.ladill.com (Authorization Code + PKCE). Redirect points
    | back at this app's /sso/callback.
    */
    'ladill_sso' => [
        'issuer' => 'https://'.config('app.auth_domain'),
        'client_id' => env('LADILL_SSO_CLIENT_ID'),
        'client_secret' => env('LADILL_SSO_CLIENT_SECRET'),
        'redirect' => rtrim((string) env('APP_URL', 'https://care.ladill.com'), '/').'/sso/callback',
    ],

    // Central Ladill identity API (auth.ladill.com /api/identity/auth/*),
    // gated by the shared first-party service key.
    'ladill_identity' => [
        'url' => 'https://'.config('app.auth_domain'),
        'key' => env('IDENTITY_API_KEY_CARE'),
    ],

    // Outbound SMS to contacts uses Arkesel (the platform provider) — see
    // config/arkesel.php and App\Services\Comms\SmsService.

    'slack' => [
        'notifications' => [
            'bot_user_oauth_token' => env('SLACK_BOT_USER_OAUTH_TOKEN'),
            'channel' => env('SLACK_BOT_USER_DEFAULT_CHANNEL'),
        ],
    ],

];