auth ist im kasten

.env.example

@@ -22,11 +22,43 @@ FLASK_DEBUG=true
 # Development Mode - enables fake auth and mocking
 DEV_MODE=true
 
-APP_NAME=formeleon_dev
+# Mock Authentication Mode
+# When MOCK_AUTH=true AND DEV_MODE=true, uses local mock users instead of Zitadel OIDC
+# Useful for local development without external dependencies
+MOCK_AUTH=false
+
+# Application name
+APP_NAME=formeleon
 
 # Application port (default: 5000)
-# PORT=5000
+PORT=5000
 
+# =============================================================================
+# MOCK USER SETTINGS (used when MOCK_AUTH=true and DEV_MODE=true)
+# =============================================================================
+
+# Mock user credentials (only used in mock auth mode)
+MOCK_USER_ID=mock_user_001
+MOCK_USER_ROLE=admin
+MOCK_USER_NAME=Mock Admin
+MOCK_USER_EMAIL=mock@formeleon.local
+MOCK_TENANT_ID=mock_tenant_001
+
+# =============================================================================
+# DEVELOPMENT USER SETTINGS (used when DEV_MODE=true but MOCK_AUTH=false)
+# =============================================================================
+
+# Dev Mode User Role (admin, tenant_admin, user, viewer)
+DEV_USER_ROLE=admin
+
+# Dev Mode Tenant ID
+DEV_TENANT_ID=tenant_dev_123
+
+# Dev Mode User Name
+DEV_USER_NAME="Dev Admin"
+
+# Dev Mode User Email
+DEV_USER_EMAIL=dev@formeleon.local
 # =============================================================================
 # DATABASE SETTINGS
 # =============================================================================
@@ -80,22 +112,6 @@ RECAPTCHA_THRESHOLD=0.5
 # Mock score for development mode (default: 0.9)
 MOCK_RECAPTCHA_SCORE=0.9
 
-# =============================================================================
-# DEVELOPMENT USER SETTINGS
-# =============================================================================
-
-# Dev Mode User Role (admin, tenant_admin, user, viewer)
-DEV_USER_ROLE=admin
-
-# Dev Mode Tenant ID
-DEV_TENANT_ID=tenant_dev_123
-
-# Dev Mode User Name
-DEV_USER_NAME=Dev Admin
-
-# Dev Mode User Email
-DEV_USER_EMAIL=dev@formeleon.local
-
 # =============================================================================
 # CORS SETTINGS
 # =============================================================================
@@ -116,6 +132,9 @@ SESSION_COOKIE_SECURE=false
 # Session Cookie SameSite (Lax, Strict, None)
 SESSION_COOKIE_SAMESITE=Lax
 
+# Session lifetime in seconds (default: 3600 = 1 hour)
+PERMANENT_SESSION_LIFETIME=3600
+
 # =============================================================================
 # FILE UPLOAD SETTINGS
 # =============================================================================
@@ -152,10 +171,31 @@ UPLOAD_FOLDER=/tmp/formeleon_uploads
 # PRODUCTION SETTINGS
 # =============================================================================
 
-# In production, set these values:
-# FLASK_ENV=production
-# FLASK_DEBUG=false
-# DEV_MODE=false
-# SESSION_COOKIE_SECURE=true
-# SESSION_COOKIE_SAMESITE=Strict
-# SQLALCHEMY_DATABASE_URI=your-production-database-uri
+# Default page size for paginated responses
+DEFAULT_PAGE_SIZE=20
+
+# Maximum page size for paginated responses
+MAX_PAGE_SIZE=100
+
+# =============================================================================
+# NOTES FOR PRODUCTION
+# =============================================================================
+
+# For production deployment:
+# 1. Set FLASK_ENV=production
+# 2. Set FLASK_DEBUG=false
+# 3. Set DEV_MODE=false
+# 4. Set MOCK_AUTH=false
+# 5. Set SESSION_COOKIE_SECURE=true
+# 6. Set SESSION_COOKIE_SAMESITE=Strict
+# 7. Configure proper ZITADEL_* settings
+# 8. Configure proper RECAPTCHA_* settings
+# 9. Use a production-ready database (PostgreSQL, MySQL)
+# 10. Generate a strong SECRET_KEY
+# 11. Restrict ALLOWED_ORIGINS to your specific domains
+# 12. Set up proper HTTPS/TLS
+
+# For local development without external services:
+# 1. Set DEV_MODE=true
+# 2. Set MOCK_AUTH=true (optional, for pure local mocking)
+# 3. Optionally configure ZITADEL_* settings if you have a local Zitadel instance