.env.oauth2.example

# X OAuth2 confidential client settings
X_CLIENT_ID=your_client_id
X_CLIENT_SECRET=your_client_secret
X_REDIRECT_URI=http://127.0.0.1:8080/callback

# IMPORTANT: offline.access is required to receive refresh_token values.
X_OAUTH_SCOPES=tweet.read tweet.write users.read offline.access

# Runtime uses refresh grant with an existing valid refresh token.
# If X_REFRESH_TOKEN becomes invalid/revoked, run scripts/Generate-XOAuthTokens.ps1
# to perform a full OAuth2 PKCE re-authorization and mint a fresh refresh token.
X_ACCESS_TOKEN=replace_after_oauth
X_REFRESH_TOKEN=replace_after_oauth
X_TOKEN_TYPE=bearer
X_EXPIRES_IN=7200
X_TOKEN_CREATED_AT=2026-03-17T22:00:00+01:00
X_REFRESH_BUFFER_SECONDS=300

# Optional override (defaults to https://api.x.com/2/oauth2/token)
X_OAUTH_TOKEN_URL=https://api.x.com/2/oauth2/token

X_BOT_USERNAME=organoid_on_sol
X_BOT_USER_ID=1234567890