makefile - main - t3/token-server

.PHONY: build test run gen-token gen-keys tidy

build-linux:
	CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-s -w" -o build/sts cmd/server/*

build-macos:
	CGO_ENABLED=0 go build -ldflags="-s -w" -o build/sts cmd/server/*

run: build-macos
	build/sts -f config.yml

test:
	go test ./...

tidy:
	go mod tidy

# Generate a random STS_SERVICE_TOKEN (shared secret Gateway ↔ STS).
gen-token:
	openssl rand -hex 32

# Generate an RSA 2048 key pair for JWT signing (production / explicit mode).
gen-keys:
	@mkdir -p keys
	openssl genrsa -out keys/private_key.pem 2048
	openssl rsa -in keys/private_key -pubout -out keys/public_key.pem
	@echo "Keys generated in keys/"