From b703b4365eb15826b75ec89c9363ffa98831626c Mon Sep 17 00:00:00 2001
From: Jim Martens <github@2martens.de>
Date: Sat, 26 Jul 2025 11:00:34 +0200
Subject: [PATCH] fix: Change argocd-test-oauth client to CONFIDENTIAL

---
 terraform/keycloak.tf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/terraform/keycloak.tf b/terraform/keycloak.tf
index bd33faf..879571a 100644
--- a/terraform/keycloak.tf
+++ b/terraform/keycloak.tf
@@ -155,13 +155,13 @@ resource "keycloak_openid_client" "twomartens_argocd_test" {
   realm_id              = keycloak_realm.twomartens_realm.id
   name                  = "ArgoCD Test Cluster"
   enabled               = true
-  access_type           = "PUBLIC"
+  access_type           = "CONFIDENTIAL"
   client_id             = "argocd-test-oauth"
   standard_flow_enabled = true
   use_refresh_tokens    = false
 
   valid_redirect_uris = [
-    "https://argocd.k8s.test.2martens.de/*"
+    "https://argocd.k8s.test.2martens.de/auth/callback"
   ]
   web_origins = [
     "+"