# 1. Generate an RS256 keypair
openssl genrsa -out private.pem 2048
PEM=$(awk 'BEGIN{ORS="\\n"} {print}' private.pem)

# 2. Copy env template
cp .env.example .env
# edit .env, set APP_OAUTH_PRIVATE_KEY to "$PEM" (with quotes)

# 3. Run
docker compose up --build

curl http://localhost:5001/.well-known/openid-configuration
curl http://localhost:5001/.well-known/jwks
curl -X POST http://localhost:5001/connect/token \
  -H 'content-type: application/x-www-form-urlencoded' \
  -H 'x-tenant-id: lansongxanh' \
  -d 'grant_type=password' \
  -d 'client_id=default-client' \
  -d 'client_secret=default-client-secret' \
  -d 'username=admin@example.com' \
  -d 'password=ChangeMe!123' \
  -d 'scope=protected-api offline_access'