apiVersion: hydra.ory.sh/v1alpha1
kind: OAuth2Client
metadata:
  name: zammad-oauth-client
  # Has to live in the same namespace as the stackspin-zammad-oauth-variables secret
  namespace: flux-system
spec:
  # TODO copied from wekan: https://github.com/wekan/wekan/wiki/Keycloak
  grantTypes:
    - authorization_code
    - refresh_token
    - client_credentials
    - implicit
  responseTypes:
    - id_token
    - code
  scope: "openid profile email stackspin_roles"
  secretName: stackspin-zammad-oauth-variables
  #redirectUris:
  #  - https://support.${domain}/oauth/openid/
  #tokenEndpointAuthMethod: client_secret_post