output "realm_id" {
  value = keycloak_realm.hexor.id
}

output "google_idp_alias" {
  value = keycloak_oidc_google_identity_provider.google.alias
}

output "rsauth2_proxy_client_id" {
  value = keycloak_openid_client.rsauth2_proxy.client_id
}

output "rsauth2_proxy_client_secret" {
  value     = keycloak_openid_client.rsauth2_proxy.client_secret
  sensitive = true
}

output "standalone_groups" {
  value = [for g in keycloak_group.standalone : g.name]
}

output "app_groups" {
  value = { for k, g in keycloak_group.app : k => g.name }
}

output "app_allowed_groups" {
  value = local.app_allowed_groups
}

output "oauth2_app_client_ids" {
  value = { for k, c in keycloak_openid_client.oauth2_app : k => c.client_id }
}

output "oauth2_app_client_secrets" {
  value     = { for k, c in keycloak_openid_client.oauth2_app : k => c.client_secret }
  sensitive = true
}