@nathapp/na-cli 1.0.8 → 1.0.10

package/dist/templates/k8s-deployment/services/charts/tests/charts/e2e-test-js/tests/individual-profile.ts

@@ -0,0 +1,277 @@
+'use strict';
+
+import { describe, it } from 'mocha';
+import chai, { expect } from 'chai';
+import chaihttp from 'chai-http';
+
+import HubService, { User, challengeIt, goodRet, badRet, serviceUrl, mxwV1ServiceUrl, uploadOSS } from "./hub";
+import { throwError, errors, describeError } from 'mxw-libs-errors';
+
+chai.use(chaihttp);
+
+let indent = "     ";
+
+export function profile(user: User, challenge: boolean) {
+    describe('Suite: Individual Profile: ' + user.code + " (" + user.email + ")", function () {
+        if (challenge) {
+            it("Get profile - challenge without JWT", function () {
+                let url = serviceUrl("/user/api");
+
+                return chai.request(url).get("/profile")
+                    .type("application/json")
+                    .set("Authorization", "Bearer ")
+                    .then((res) => {
+                        badRet(res, "InvalidHeader");
+                    });
+            });
+        }
+
+        it("Get profile", function () {
+            let url = serviceUrl("/user/api");
+
+            return chai.request(url).get("/profile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.jwt)
+                .then((res) => {
+                    goodRet(res);
+                    expect(res.body).have.property("data").property("userId").is.a("number").eq(user.id);
+                    expect(res.body).have.property("data").property("email").is.a("string").eq(user.email);
+                    expect(res.body).have.property("data").property("walletAddress").is.a("string").eq(user.wallet.address);
+                });
+        });
+
+        challengeIt("Update profile info", function (params) {
+            let url = serviceUrl("/user/api");
+
+            return chai.request(url).post("/set/profile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.jwt)
+                .send(params)
+                .then((res) => {
+                    badRet(res);
+                });
+        }, {
+            nickname: "",
+            dialCode: "",
+            mobileNo: "",
+            profileImg: "",
+            lang: "",
+            country: "",
+            public: "",
+            type: ""
+        }, challenge);
+
+        if (challenge) {
+            it("Update profile info - challenge without JWT", function () {
+                let url = serviceUrl("/user/api");
+
+                return chai.request(url).post("/set/profile")
+                    .type("application/json")
+                    .set("Authorization", "Bearer ")
+                    .send({
+                        nickname: user.code,
+                        dialCode: null,
+                        mobileNo: null,
+                        lang: null,
+                        country: null,
+                        public: null,
+                        type: null
+                    })
+                    .then((res) => {
+                        badRet(res, "InvalidHeader");
+                    });
+            });
+        }
+
+        it("Update profile info", function () {
+            let url = serviceUrl("/user/api");
+
+            return chai.request(url).post("/set/profile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.jwt)
+                .send({
+                    nickname: user.code,
+                    dialCode: null,
+                    mobileNo: null,
+                    lang: null,
+                    country: null,
+                    public: null,
+                    type: null
+                })
+                .then((res) => {
+                    goodRet(res);
+                });
+        });
+
+        it("Verify profile", function () {
+            let url = serviceUrl("/user/api");
+
+            return chai.request(url).get("/profile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.jwt)
+                .then((res) => {
+                    goodRet(res);
+                    expect(res.body).have.property("data").property("userId").is.a("number").eq(user.id);
+                    expect(res.body).have.property("data").property("email").is.a("string").eq(user.email);
+                    expect(res.body).have.property("data").property("walletAddress").is.a("string").eq(user.wallet.address);
+                    expect(res.body).have.property("data").property("nickname").is.a("string").eq(user.code);
+                });
+        });
+    });
+}
+
+export function mainProfile(user: User, challenge: boolean) {
+    describe('Suite: Individual Main Profile: ' + user.code + " (" + user.email + ")", function () {
+        let profileImgUrl: string;
+
+        if (challenge) {
+            it("Get profile - challenge without JWT", function () {
+                let url = mxwV1ServiceUrl("/provider/account/v1");
+
+                return chai.request(url).get("/getProfile")
+                    .type("application/json")
+                    .set("Authorization", "Bearer ")
+                    .then((res) => {
+                        badRet(res, "InvalidHeader");
+                    });
+            });
+        }
+
+        it("Get profile", function () {
+            let url = mxwV1ServiceUrl("/provider/account/v1");
+
+            return chai.request(url).get("/getProfile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.mxwJwt)
+                .then((res) => {
+                    goodRet(res);
+                    expect(res.body).have.property("data").property("userID").is.a("number").is.eq(user.id);
+                    expect(res.body).have.property("data").property("email").is.a("string").is.eq(user.email);
+                    expect(res.body).have.property("data").property("nickName").is.a("string");
+                    expect(res.body).have.property("data").property("walletAddr").is.a("string").is.eq(user.wallet.address);
+                });
+        });
+
+        challengeIt("Update profile", function (params) {
+            let url = mxwV1ServiceUrl("/provider/account/v1");
+
+            return chai.request(url).post("/setProfile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.mxwJwt)
+                .send(params)
+                .then((res) => {
+                    badRet(res);
+                });
+        }, {
+            alias: null,
+            country: "",
+            dialCode: null,
+            email: "",
+            lang: "",
+            mobileNo: null,
+            nickName: "",
+            profileImg: "",
+            public: null,
+            referralCode: null
+        }, challenge);
+
+        it("Update profile", function () {
+            return chai.request(mxwV1ServiceUrl("/provider/account/v1")).post("/setProfile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.mxwJwt)
+                .send({
+                    alias: null,
+                    country: user.profile.country,
+                    dialCode: null,
+                    email: user.email,
+                    lang: user.profile.language,
+                    mobileNo: null,
+                    nickName: user.username,
+                    profileImg: "Believe me this is a real image url",
+                    public: 0,
+                    referralCode: null
+                })
+                .then((res) => {
+                    goodRet(res);
+                });
+        });
+
+        it("Verify profile", function () {
+            let url = mxwV1ServiceUrl("/provider/account/v1");
+
+            return chai.request(url).get("/getProfile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.mxwJwt)
+                .then((res) => {
+                    goodRet(res);
+                    expect(res.body).have.property("data").property("userID").is.a("number").is.eq(user.id);
+                    expect(res.body).have.property("data").property("email").is.a("string").is.eq(user.email);
+                    expect(res.body).have.property("data").property("nickName").is.a("string").is.eq(user.username);
+                    expect(res.body).have.property("data").property("walletAddr").is.a("string").is.eq(user.wallet.address);
+                    expect(res.body).have.property("data").property("country").is.a("string").is.eq(user.profile.country);
+                    expect(res.body).have.property("data").property("lang").is.a("string").is.eq(user.profile.language);
+                    expect(res.body).have.property("data").property("public").is.a("number");
+
+                    if (res.body.data.profileImg) {
+                        console.log("\x1b[33m%s", indent, "WARNING: This overwrite profile image bug is required to patch.", "\x1b[0m");
+                    }
+                    else {
+                        // console.log("\x1b[33m%s", indent, "WARNING: Special error handler is required to remove.", "\x1b[0m");
+                    }
+                });
+        });
+
+        if (challenge) {
+            it("Upload profile image - challenge without actionType", function () {
+                let url = mxwV1ServiceUrl("/provider/account/v1");
+                let params = {
+                    actionType: ""
+                };
+
+                return uploadOSS(user, url, "/profilePreupload", params, __dirname + "/resources/profile.jpg", "image/png").then((readUrl) => {
+                    throwError("SHOULD_NOT_REACH_HERE");
+                }).catch(error => {
+                    let { code, message } = describeError(error);
+
+                    if ("InvalidResponse" == code) {
+                        console.log("\x1b[33m%s", indent, "WARNING: This error is required to patch.", code + ":", message, "\x1b[0m");
+                    }
+                    else {
+                        console.log("\x1b[33m%s", indent, "WARNING: Special error handler is required to remove.", code, ":", message, "\x1b[0m");
+                    }
+                });
+            });
+        }
+
+        it("Upload profile image", function () {
+            let url = mxwV1ServiceUrl("/provider/account/v1");
+            let params = {
+                actionType: "PROFILE"
+            };
+
+            return uploadOSS(user, url, "/profilePreupload", params, __dirname + "/resources/profile.jpg", "image/png").then((readUrl) => {
+                profileImgUrl = readUrl;
+                if (!HubService.Instance.silent) { console.log(indent, "Uploaded main profile image:", profileImgUrl) }
+            });
+        });
+
+        it("Verify profile image", function () {
+            let url = mxwV1ServiceUrl("/provider/account/v1");
+
+            return chai.request(url).get("/getProfile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.mxwJwt)
+                .then((res) => {
+                    goodRet(res);
+                    expect(res.body).have.property("data").property("userID").is.a("number").is.eq(user.id);
+                    expect(res.body).have.property("data").property("email").is.a("string").is.eq(user.email);
+                    expect(res.body).have.property("data").property("nickName").is.a("string").is.eq(user.username);
+                    expect(res.body).have.property("data").property("walletAddr").is.a("string").is.eq(user.wallet.address);
+                    expect(res.body).have.property("data").property("profileImg").is.a("string").is.eq(profileImgUrl);
+                    expect(res.body).have.property("data").property("country").is.a("string").is.eq(user.profile.country);
+                    expect(res.body).have.property("data").property("lang").is.a("string").is.eq(user.profile.language);
+                    expect(res.body).have.property("data").property("public").is.a("number");
+                });
+        });
+    });
+}

package/dist/templates/k8s-deployment/services/charts/tests/charts/e2e-test-js/tests/individual-whitelist.ts

@@ -0,0 +1,133 @@
+'use strict';
+
+import { describe, it } from 'mocha';
+import chai, { expect } from 'chai';
+import chaihttp from 'chai-http';
+
+import HubService, { User, goodRet, mxwServiceUrl, mxwV1ServiceUrl } from "./hub";
+import { toUtf8Bytes, sortObject } from 'mxw-libs-utils';
+import { utils, Wallet, auth } from 'mxw-sdk-js';
+import { JsonRpcProvider } from 'mxw-sdk-js/dist/providers';
+import { KYC_FLOW_ID, KYC_TYPE_ID } from './individual-kyc';
+
+chai.use(chaihttp);
+
+let indent = "     ";
+
+export function whitelist(user: User, idType: KYC_TYPE_ID, wallet: Wallet, challenge: boolean) {
+    describe('Suite: Whitelist Wallet: ' + user.code + " (" + wallet.address + ")", function () {
+        it("Get KYC info", function () {
+            return chai.request(mxwServiceUrl("/provider/kyc/v2"))
+                .get("/getKycInfo")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.mxwJwt)
+                .query({
+                    kycId: user.kyc.kycId
+                })
+                .then((res) => {
+                    goodRet(res);
+                    expect(res.body).have.property("data").property("kycStatus").is.a("number");
+                    user.kyc.status = res.body.data.kycStatus;
+                });
+        });
+
+        // it("Initialize Maxonrow user account", function () {
+        //     let url = mxwServiceUrl("/user/api");
+
+        //     return chai.request(url).post("/initUser")
+        //         .type("application/json")
+        //         .set("Authorization", "Bearer " + user.mxwJwt)
+        //         .send({
+        //             walletAddress: wallet.address
+        //         }).then((res) => {
+        //             console.log(res.body)
+        //             goodRet(res);
+        //             expect(res.body).have.property("data").have.property("walletId").is.a("number").greaterThan(0);
+        //         });
+        // });
+
+        // it("Pre-check", function () {
+        //     let url = mxwV1ServiceUrl("/provider/kyc-proxy/v1");
+
+        //     return chai.request(url).post("/precheckEx")
+        //         .type("application/json")
+        //         .set("Authorization", "Bearer " + user.mxwJwt)
+        //         .set("app-id", String(HubService.Instance.appId))
+        //         .send({
+        //             kycId: user.kyc.kycId,
+        //             idType,
+        //             country: user.profile.country,
+        //             idNo: user.username
+        //         })
+        //         .then((res) => {
+        //             console.log(res.body)
+        //             goodRet(res);
+        //         });
+        // });
+
+        it("Submit whitelist transaction", function () {
+            if (KYC_FLOW_ID.MANUAL == user.kyc.flow) {
+                expect(user.kyc.status).is.a("number").to.be.oneOf([10], "KYC is not submitted");
+                this.skip();
+            }
+
+            expect(user.kyc.status).is.a("number").to.be.oneOf([1, 18], "KYC is not approved");
+
+            return signTransaction(wallet, user.profile.country, String(user.kyc.idType), 0, user.profile.dob, { nonce: "0" }).then((tx) => {
+                return chai.request(mxwServiceUrl("/wallet/api")).post("/whitelistWallet")
+                    .type("application/json")
+                    .set("Authorization", "Bearer " + user.mxwJwt)
+                    .send(tx).then((res) => {
+                        console.log(res.body)
+                        goodRet(res);
+                        expect(res.body).have.property("data").property("transactionHash").is.a("string").lengthOf.greaterThan(0);
+
+                        if (res.body.data.ret) {
+                            console.log("\x1b[33m%s", indent, "WARNING: The response is required to patch.", "\x1b[0m");
+                        }
+                        else {
+                            // console.log("\x1b[33m%s", indent, "WARNING: Special handler is required to remove.", "\x1b[0m");
+                        }
+                        return res.body.data.transactionHash;
+                    }).then((txHash) => {
+                        if (!HubService.Instance.silent) { console.log(indent, "Whitelisted:", wallet.address, "(" + txHash + ")") }
+                    });
+            });
+        });
+    });
+}
+
+function signTransaction(wallet: Wallet, country?: string, idType?: string, idExpiry?: number, dob?: number, overrides?: any) {
+    return auth.Kyc.create(wallet.connect(new JsonRpcProvider("https://"))).then((kyc) => {
+        let seed = utils.sha256(toUtf8Bytes(JSON.stringify(sortObject({
+            juridical: ["", ""].sort(),
+            seed: utils.getHash(utils.randomBytes(32))
+        }))));
+
+        let kycAddress = kyc.getKycAddress({
+            country,
+            idType,
+            id: wallet.address,
+            idExpiry,
+            dob,
+            seed
+        });
+
+        let nonce = (overrides && overrides.nonce) ? overrides.nonce : "0";
+
+        return kyc.sign(kycAddress, { nonce }).then((tx) => {
+            expect(tx).have.property("kyc").property("from").is.a("string").is.eq(wallet.address);
+            expect(tx).have.property("kyc").property("kycAddress").is.a("string").lengthOf.greaterThan(0);
+            expect(tx).have.property("kyc").property("nonce").is.a("string").is.eq(nonce);
+            expect(tx).have.property("pub_key").property("type").is.a("string").lengthOf.greaterThan(0);
+            expect(tx).have.property("pub_key").property("value").is.a("string").lengthOf.greaterThan(0);
+            expect(tx).have.property("signature").is.a("string").lengthOf.greaterThan(0);
+
+            return {
+                transaction: tx,
+                seed,
+                publicKey: wallet.publicKey
+            };
+        });
+    });
+}

package/dist/templates/k8s-deployment/services/charts/tests/charts/e2e-test-js/tests/t-0200-start.ts

@@ -0,0 +1,172 @@
+'use strict';
+
+import { describe, it } from 'mocha';
+import chai, { expect } from 'chai';
+import chaihttp from 'chai-http';
+
+import { hexlify } from 'mxw-libs-utils';
+import { mxw, utils } from 'mxw-sdk-js';
+
+import HubService, { User } from "./hub";
+import { appOnboard, appReauth } from "./individual-onboard-app";
+import { webOnboard, changePassword, webReauth } from "./individual-onboard-web";
+import { profile, mainProfile } from "./individual-profile";
+import { kycByType, KYC_FLOW_ID, KYC_TYPE_ID } from './individual-kyc';
+import { whitelist } from './individual-whitelist';
+import { createContract } from './individual-contract';
+import { createContact } from './individual-contact';
+
+chai.use(chaihttp);
+
+let indent = "     ";
+
+describe('Suite: BDSS', function () {
+    it("Initialize", function () {
+        HubService.Instance.init(true);
+        if (!HubService.Instance.silent) { console.log(indent, "app id:", HubService.Instance.appId) }
+    });
+
+    it("Start", function () {
+        let infoList = [
+            {
+                code: "Ali",
+                username: "ali." + hexlify(utils.randomBytes(4)).substr(2),
+                password: utils.sha256(utils.toUtf8Bytes(hexlify(utils.randomBytes(5)).substr(2))),
+                domain: "hello-world.sh",
+                wallet: mxw.Wallet.createRandom(),
+                challenge: false,
+                firstRegisterOnWeb: false,
+                profile: {
+                    language: "ms_MY",
+                    gender: "M",
+                    country: "MY",
+                    dob: 20200101,
+                    religion: "Islam",
+                    address: {
+                        value: "",
+                        street: "1, Jalan " + hexlify(utils.randomBytes(1)).substr(2) + "/" + hexlify(utils.randomBytes(1)).substr(2) + ", Taman " + hexlify(utils.randomBytes(4)).substr(2),
+                        postcode: "43000",
+                        city: "Petaling Jaya",
+                        state: "Selangor",
+                        province: "",
+                        country: "Malaysia"
+                    }
+                },
+                kyc: {
+                    idType: KYC_TYPE_ID.NATIONAL_ID,
+                    flow: KYC_FLOW_ID.AUTO,
+                    ocrAlter: false
+                }
+            },
+            {
+                code: "AhKao",
+                username: "ahkao." + hexlify(utils.randomBytes(4)).substr(2),
+                password: hexlify(utils.randomBytes(5)).substr(2),
+                domain: "hello-world.sh",
+                wallet: mxw.Wallet.createRandom(),
+                challenge: false,
+                firstRegisterOnWeb: true,
+                profile: {
+                    language: "en_MY",
+                    gender: "M",
+                    country: "MY",
+                    dob: 20200102,
+                    religion: "Non-Islam",
+                    address: {
+                        value: "",
+                        street: "2, Jalan " + hexlify(utils.randomBytes(1)).substr(2) + "/" + hexlify(utils.randomBytes(1)).substr(2) + ", Taman " + hexlify(utils.randomBytes(4)).substr(2),
+                        postcode: "57000",
+                        city: "Kuala Lumpur",
+                        state: "Kuala Lumpur",
+                        province: "",
+                        country: "Malaysia"
+                    }
+                },
+                kyc: {
+                    idType: KYC_TYPE_ID.NATIONAL_ID,
+                    flow: KYC_FLOW_ID.MANUAL,
+                    ocrAlter: false
+                }
+            },
+            {
+                code: "Muthu",
+                username: "muthu." + hexlify(utils.randomBytes(4)).substr(2),
+                password: hexlify(utils.randomBytes(5)).substr(2),
+                domain: "hello-world.sh",
+                wallet: mxw.Wallet.createRandom(),
+                challenge: false,
+                firstRegisterOnWeb: false,
+                profile: {
+                    language: "ms_MY",
+                    gender: "M",
+                    country: "MY",
+                    dob: 20200103,
+                    religion: "Non-Islam",
+                    address: {
+                        value: "",
+                        street: "3, Jalan " + hexlify(utils.randomBytes(1)).substr(2) + "/" + hexlify(utils.randomBytes(1)).substr(2) + ", Taman " + hexlify(utils.randomBytes(4)).substr(2),
+                        postcode: "57000",
+                        city: "Kuala Lumpur",
+                        state: "Kuala Lumpur",
+                        province: "",
+                        country: "Malaysia"
+                    }
+                },
+                kyc: {
+                    idType: KYC_TYPE_ID.NATIONAL_ID,
+                    flow: KYC_FLOW_ID.AUTO,
+                    ocrAlter: true
+                }
+            }
+        ];
+
+        for (let info of infoList) {
+            let user = new User(info.code);
+
+            user.username = info.username;
+            user.password = info.password;
+            user.domain = info.domain;
+            user.wallet = info.wallet;
+            user.loginWallet = mxw.Wallet.fromMnemonic(user.wallet.mnemonic, "m/44'/118'/0'/0/30000");
+            user.profile = info.profile;
+            user.profile.address.value = user.profile.address.street + " " + user.profile.address.city + " " +
+                user.profile.address.postcode + " " + user.profile.address.state + " " + user.profile.address.country
+            user.kyc = info.kyc;
+
+            HubService.Instance.users[user.code] = user;
+
+            if (info.firstRegisterOnWeb) {
+                webOnboard(user, info.challenge);
+                appOnboard(user, info.challenge);
+            }
+            else {
+                appOnboard(user, info.challenge);
+                webOnboard(user, info.challenge);
+            }
+            // changePassword(user, info.challenge);
+            // mainProfile(user, info.challenge);
+            // profile(user, info.challenge);
+            kycByType(user, info.kyc.idType, info.kyc.flow, info.challenge);
+
+            // webReauth(user, info.challenge);
+            // appReauth(user, info.challenge);
+
+            whitelist(user, info.kyc.idType, user.wallet, info.challenge);
+            // whitelist(user, info.kyc.idType, user.loginWallet, info.challenge);
+        }
+
+        for (let i = 0; infoList.length > i; i++) {
+            let info = infoList[i];
+            let user = HubService.Instance.users[info.code];
+            let others: User[] = [];
+
+            for (let a = 0; infoList.length > a; a++) {
+                if (a == i) continue;
+                others.push(HubService.Instance.users[infoList[a].code]);
+            }
+
+            createContact(user, user, false);
+            // createContract(user, user.wallet, others, false);
+        }
+    });
+});

package/dist/templates/nestjs-api/.dockerignore

@@ -0,0 +1,9 @@
+dist
+node_modules
+coverage
+
+.tomg-config
+generated
+.pem
+image-digest.txt
+image-tag.txt

package/dist/templates/nestjs-api/.env

@@ -0,0 +1,35 @@
+## local/dev/development shows Swagger UI at /swagger-ui.html; start:prod sets production
+ENV_NAME=local
+SERVER_PORT=8080
+# SERVER_USE_HELMET=false
+# SERVER_USE_CORS=false
+# SERVER_CORS_ORIGINS=/\.example\.com,http://localhost:5173
+# SERVER_CORS_METHODS=GET,POST,PUT,DELETE,OPTIONS
+# SERVER_CORS_HEADERS=Content-Type,Authorization, Accept, Origin, User-Agent, Cache-Control, Keep-Alive, X-Requested-With, lang
+
+GLOBAL_PREFIX=/
+
+## JWT keys are deliberately empty here: never commit key material.
+## `na gen` writes a fresh key pair for this project into .env.local (gitignored).
+## For other environments, set them from the deployment's secrets (`make gen-keypair` creates a pair).
+JWT_ACCESS_SECRET=
+JWT_ACCESS_PRIVATEKEY=
+JWT_ACCESS_PUBLICKEY=
+JWT_ACCESS_PASSPHRASE=
+## for RSA use RS384, SECRET use HS384
+JWT_ACCESS_ALGORITHM=RS256
+JWT_ACCESS_EXPIRE=1h
+
+## only use on auth-api
+# JWT_REFRESH_SECRET=
+# JWT_REFRESH_PRIVATEKEY=
+# JWT_REFRESH_PUBLICKEY=
+# JWT_REFRESH_PASSPHRASE=
+# ## for RSA use RS384, SECRET use HS384
+# JWT_REFRESH_ALGORITHM=RS256
+# JWT_REFRESH_EXPIRE=1d
+
+#MONGO_URL=mongodb://root:password@127.0.0.1:27017/mongo?authSource=admin
+
+## used by the TypeORM CLI (ormconfig.ts): bun run migration:*
+MYSQL_URL=mysql://root:password@127.0.0.1:3306/<%= projectName.replace(/-/g, '_') %>

package/dist/templates/nestjs-api/.env.local

@@ -1,29 +1,5 @@
-SERVER_PORT=8080
-# SERVER_USE_HELMET=false
-# SERVER_USE_CORS=false
-# SERVER_CORS_ORIGINS=/\.example\.com,http://localhost:5173
-# SERVER_CORS_METHODS=GET,POST,PUT,DELETE,OPTIONS
-# SERVER_CORS_HEADERS=Content-Type,Authorization, Accept, Origin, User-Agent, Cache-Control, Keep-Alive, X-Requested-With, lang
-
-GLOBAL_PREFIX=/
-
-JWT_ACCESS_SECRET=thisisasecret
-JWT_ACCESS_PRIVATEKEY="-----BEGIN RSA PRIVATE KEY-----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\ntfixUdU5UUIHRID3XZiApiukE/5lMYf3FmXtgeHq0J9ArgHbF1gd\n-----END RSA PRIVATE KEY-----\n"
-JWT_ACCESS_PUBLICKEY="-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7LDW5t44Z8GNoaTz1iF\n3YF7byIyE0as7Y/F58aFVWFhRC/GmGovJPgm3s6/gOCzxUWtP4URLjWDmGIs2MJe\nbt9GWbXF4Ou5O47DCta75up+ZrqPCoLVOEL1tNUUx/GW+Q/Dd4quiy1SWz7At/BD\nF1y5DUv34C/S3VMR5mxkli1kwqPKzw/ozrc2+JzmoQ0n355utcUVXsU/4ufZ9eQu\nSF2tUUOBZs2nlauYOixz/qrqg+j+3HoJBvmzMTIahXYFEGCjormc2E0kwdz5/0Zf\nYUbAogYH7GZIzXEOZvQedOD8s9JL90i/yEE4L14F3XJsfLo+Krgxz49LBU6KEaGz\nGwIDAQAB\n-----END PUBLIC KEY-----\n"
-JWT_ACCESS_PASSPHRASE=
-## for RSA use RS384, SECRET use HS384
-JWT_ACCESS_ALGORITHM=RS256
-JWT_ACCESS_EXPIRE=1h
-
-## only use on auth-api
-# JWT_REFRESH_SECRET=thisisarefreshsecret
-# JWT_REFRESH_PRIVATEKEY="-----BEGIN RSA PRIVATE KEY-----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\nGM6qsqVdgonL8KWe7YR2AlR9N3l5SnqLvcL92Linuj9aUdhGvyM=\n-----END RSA PRIVATE KEY-----\n"
-# JWT_REFRESH_PUBLICKEY="-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufuMWcfztXd9V3Jbpwzz\nPstzYgFY6wS+pGq0ZGxMUz8bJAFKPAby44knaHgVdDREyldSpcOJqSsAEsfNT7kc\nAeGhkhdwAvDLRpN3MTHuIKRw9DBQXsL1b10A74ao4n77nSIfglmUe1Daobuf8CQZ\nVU6tkONn4B+ibP/A/cIUEwaJVyff8xOCq91nTNfP7l6yOBzsQE+omh5ZP3l/uQcB\nF42+S0URbzFoxNYnA1DPjJbuk2rUp5o8L4JYMR7eGZriFm7A4xBftyINV4W0ptvT\n/S0vOT0CjXrtdz9Adpj/dpkSSiCucCzKZOdm+DEuNT/WBG/GNCWfNiHZxC/qGPOJ\nKwIDAQAB\n-----END PUBLIC KEY-----\n"
-# JWT_REFRESH_PASSPHRASE=
-# ## for RSA use RS384, SECRET use HS384
-# JWT_REFRESH_ALGORITHM=RS256
-# JWT_REFRESH_EXPIRE=1d
-
-#MONGO_URL=mongodb://root:password@127.0.0.1:27017/mongo?authSource=admin
-
-#MYSQL_URL=mysql://root:password@127.0.0.1:3306/db?useSSL=false&useUnicode=true&characterEncoding=UTF-8&serverTimezone=CTT&pinGlobalTxToPhysicalConnection=true
+## Local overrides, gitignored. The JWT keys below were generated for this project
+## by `na gen`; they are dev-only. Never copy them into a deployed environment.
+JWT_ACCESS_SECRET=<%= jwtAccessSecret %>
+JWT_ACCESS_PRIVATEKEY="<%= jwtAccessPrivateKey %>"
+JWT_ACCESS_PUBLICKEY="<%= jwtAccessPublicKey %>"