From 7052c933fedd07388e374a537321791241b6305f Mon Sep 17 00:00:00 2001
From: Jim Martens <github@2martens.de>
Date: Sun, 10 Aug 2025 08:08:13 +0200
Subject: [PATCH] fix: Don't change values of full scope allowed and use
 refresh tokens

---
 terraform/keycloak.tf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/terraform/keycloak.tf b/terraform/keycloak.tf
index 4a557dd..20434b0 100644
--- a/terraform/keycloak.tf
+++ b/terraform/keycloak.tf
@@ -63,6 +63,8 @@ resource "keycloak_openid_client" "account" {
   ]
   standard_flow_enabled               = true
   backchannel_logout_session_required = true
+  full_scope_allowed                  = false
+  use_refresh_tokens                  = false
 }
 
 resource "keycloak_role" "account_view_profile" {