fix: implement backend configuration system and ORCID API client integration

backend/app/core/config.py

@@ -67,6 +67,7 @@ class Settings(BaseSettings):
     ORCID_CLIENT_ID: str = Field(...)
     ORCID_CLIENT_SECRET: str = Field(...)
     ORCID_REDIRECT_URI: str = "http://localhost:8000/api/auth/orcid/callback"
+    ORCID_ENVIRONMENT: Literal["sandbox", "production"] | None = None
     ORCID_OAUTH_STATE_ENABLED: bool = True
     ORCID_OAUTH_STATE_COOKIE: str = "orcid_oauth_state"
     ORCID_OAUTH_STATE_TTL_SECONDS: int = 600
@@ -136,6 +137,17 @@ class Settings(BaseSettings):
     def is_production(self) -> bool:
         return self.ENVIRONMENT == "production"
 
+    @property
+    def orcid_environment(self) -> str:
+        """Which ORCID API tier to use (sandbox | production).
+
+        Defaults to 'production' when ENVIRONMENT=production, 'sandbox'
+        otherwise. Can be overridden explicitly with ORCID_ENVIRONMENT
+        in the .env to e.g. run production security + sandbox ORCID."""
+        if self.ORCID_ENVIRONMENT is not None:
+            return self.ORCID_ENVIRONMENT
+        return "production" if self.is_production else "sandbox"
+
     @property
     def cors_allowed_origins(self) -> List[str]:
         return _split_csv(self.CORS_ALLOWED_ORIGINS)

backend/app/services/orcid_client.py

@@ -20,7 +20,7 @@ ORCID_ENDPOINTS = {
 
 
 def _orcid_endpoints() -> dict[str, str]:
-    key = "production" if settings.is_production else "sandbox"
+    key = settings.orcid_environment          # "sandbox" | "production"
     return ORCID_ENDPOINTS[key]
 
 

docker-compose.yml

@@ -11,7 +11,8 @@ services:
     environment:
       DATABASE_URL: postgresql://postgres:postgres@db:5432/orcid_db
       REDIS_URL: redis://redis:6379/0
-      ORCID_REDIRECT_URI: https://jargon-supreme-palpable.ngrok-free.dev/callback
+      # Uncomment for local dev with ngrok (overrides backend/.env value):
+      # ORCID_REDIRECT_URI: https://jargon-supreme-palpable.ngrok-free.dev/callback
     depends_on:
       db:
         condition: service_healthy