<?php
declare(strict_types=1);

/**
 * JWT Configuration
 */
return [
    'secret' => $_SERVER['JWT_SECRET'] ?? getenv('JWT_SECRET') ?: 'default-secret',
    'expiry' => (int) ($_SERVER['JWT_EXPIRY'] ?? getenv('JWT_EXPIRY') ?: 900),
    'refresh_expiry' => (int) ($_SERVER['REFRESH_TOKEN_EXPIRY'] ?? getenv('REFRESH_TOKEN_EXPIRY') ?: 604800),
    'algorithm' => 'HS256'
];
