fix: Add authorization support to wahlrecht backend client

2026-10-17 14:36:50 +02:00 · 2025-07-26 14:05:09 +02:00
parent 8a8fd21fb3
commit 811ad23801
1 changed files with 13 additions and 8 deletions
@@ -172,14 +172,19 @@ resource "keycloak_openid_client" "twomartens_wahlrecht_frontend" {
 }

 resource "keycloak_openid_client" "twomartens_wahlrecht_backend" {
-  realm_id              = keycloak_realm.twomartens_realm.id
-  name                  = "Wahlrecht Backend"
-  enabled               = true
-  access_type           = "CONFIDENTIAL"
-  client_id             = "wahlrecht"
-  standard_flow_enabled = true
-  use_refresh_tokens    = false
-  full_scope_allowed    = false
+  realm_id                 = keycloak_realm.twomartens_realm.id
+  name                     = "Wahlrecht Backend"
+  enabled                  = true
+  access_type              = "CONFIDENTIAL"
+  client_id                = "wahlrecht"
+  standard_flow_enabled    = true
+  service_accounts_enabled = true
+  use_refresh_tokens       = false
+  full_scope_allowed       = false
+
+  authorization {
+    policy_enforcement_mode = "ENFORCING"
+  }

  valid_redirect_uris = [
    "http://localhost:12000/*",