From 4fa86717130c5c142e636c49afe3da72762d3889 Mon Sep 17 00:00:00 2001
From: Jim Martens <github@2martens.de>
Date: Mon, 11 Aug 2025 08:33:04 +0200
Subject: [PATCH] change: Add timetable roles to token

---
 terraform/keycloak.tf | 36 ++++++++++++++++++++++++------------
 1 file changed, 24 insertions(+), 12 deletions(-)

diff --git a/terraform/keycloak.tf b/terraform/keycloak.tf
index 75f7d87..05420a4 100644
--- a/terraform/keycloak.tf
+++ b/terraform/keycloak.tf
@@ -179,12 +179,36 @@ resource "keycloak_openid_client" "twomartens_timetable_frontend" {
   ]
 }
 
+resource "keycloak_role" "timetable_frontend_active_plan" {
+  realm_id  = keycloak_realm.twomartens_realm.id
+  name      = "ACTIVE_PLAN"
+  client_id = keycloak_openid_client.twomartens_timetable_frontend.id
+}
+
+resource "keycloak_role" "timetable_frontend_personal_plan" {
+  realm_id  = keycloak_realm.twomartens_realm.id
+  name      = "PERSONAL_PLAN"
+  client_id = keycloak_openid_client.twomartens_timetable_frontend.id
+}
+
 resource "keycloak_generic_role_mapper" "timetable_frontend_view_profile" {
   realm_id  = keycloak_realm.twomartens_realm.id
   client_id = keycloak_openid_client.twomartens_timetable_frontend.id
   role_id   = keycloak_role.account_view_profile.id
 }
 
+resource "keycloak_generic_role_mapper" "timetable_frontend_active_plan" {
+  realm_id  = keycloak_realm.twomartens_realm.id
+  client_id = keycloak_openid_client.twomartens_timetable_frontend.id
+  role_id   = keycloak_role.timetable_frontend_active_plan.id
+}
+
+resource "keycloak_generic_role_mapper" "timetable_frontend_personal_plan" {
+  realm_id  = keycloak_realm.twomartens_realm.id
+  client_id = keycloak_openid_client.twomartens_timetable_frontend.id
+  role_id   = keycloak_role.timetable_frontend_personal_plan.id
+}
+
 resource "keycloak_openid_client" "twomartens_wahlrecht_frontend" {
   realm_id                   = keycloak_realm.twomartens_realm.id
   name                       = "Wahlrecht Frontend"
@@ -205,18 +229,6 @@ resource "keycloak_openid_client" "twomartens_wahlrecht_frontend" {
   ]
 }
 
-resource "keycloak_role" "timetable_frontend_active_plan" {
-  realm_id  = keycloak_realm.twomartens_realm.id
-  name      = "ACTIVE_PLAN"
-  client_id = keycloak_openid_client.twomartens_timetable_frontend.id
-}
-
-resource "keycloak_role" "timetable_frontend_personal_plan" {
-  realm_id  = keycloak_realm.twomartens_realm.id
-  name      = "PERSONAL_PLAN"
-  client_id = keycloak_openid_client.twomartens_timetable_frontend.id
-}
-
 resource "keycloak_openid_client" "twomartens_wahlrecht_backend" {
   realm_id              = keycloak_realm.twomartens_realm.id
   name                  = "Wahlrecht Backend"