From 3ab584e2abe1cdc5b7a271d8d74aa7732499c10c Mon Sep 17 00:00:00 2001
From: Jan Willem Mannaerts <jw.mannaerts@buckaroo.nl>
Date: Sat, 28 Feb 2026 12:32:59 +0100
Subject: [PATCH] Update env example with full Jira scopes and add source code
 link to privacy page

- Added all required Jira OAuth scopes to .env.example
- Added NATS_TOKEN and JIRA_MOCK_FALLBACK to .env.example
- Added open source section to privacy policy linking to the repo

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 backend/.env.example                  |  6 +++++-
 frontend/src/components/LegalPage.jsx | 14 ++++++++++++++
 2 files changed, 19 insertions(+), 1 deletion(-)

diff --git a/backend/.env.example b/backend/.env.example
index 3f95bff..21835cf 100644
--- a/backend/.env.example
+++ b/backend/.env.example
@@ -1,11 +1,15 @@
 PORT=4010
 FRONTEND_URL=http://localhost:5174
 NATS_URL=nats://localhost:4222
+# NATS_TOKEN=          # optional, if your NATS server requires auth
 
 # Jira OAuth (Atlassian 3LO)
 JIRA_CLIENT_ID=
 JIRA_CLIENT_SECRET=
 JIRA_OAUTH_REDIRECT_URI=http://localhost:4010/api/jira/oauth/callback
-JIRA_SCOPES="offline_access read:jira-work write:jira-work read:me"
+JIRA_SCOPES="offline_access read:jira-work write:jira-work read:me read:project:jira read:issue:jira read:board-scope:jira-software read:board-scope.admin:jira-software read:sprint:jira-software read:issue-details:jira write:issue:jira-software read:jql:jira read:source-code:jira-software"
+
 JWT_SECRET=change-me-to-a-random-secret
+
+# Set to true to use mock Jira data (no real Jira connection needed)
 JIRA_MOCK_FALLBACK=true
diff --git a/frontend/src/components/LegalPage.jsx b/frontend/src/components/LegalPage.jsx
index 02d7f53..9169657 100644
--- a/frontend/src/components/LegalPage.jsx
+++ b/frontend/src/components/LegalPage.jsx
@@ -199,6 +199,20 @@ function PrivacyPolicy({ dark }) {
         Revoking the Pokerface OAuth connection in your Atlassian account settings will
         invalidate all stored tokens.
       </P>
+
+      <SubHeading dark={dark}>8. Open Source</SubHeading>
+      <P dark={dark}>
+        Pokerface is open source. If you want to verify how your data is handled, you can
+        review the full source code at{' '}
+        <a
+          href="https://git.faralmail.com/faral/pokerface"
+          target="_blank"
+          rel="noopener noreferrer"
+          style={{ color: dark ? '#60a5fa' : '#2563eb', textDecoration: 'underline' }}
+        >
+          git.faralmail.com/faral/pokerface
+        </a>.
+      </P>
     </>
   );
 }