refactor auth

config/runtime.exs

@@ -45,11 +45,11 @@ config :policy_service, :zitadel,
   issuer: System.get_env("ZITADEL_ISSUER", "https://id.corredorconnect.com"),
   client_id: System.get_env("ZITADEL_CLIENT_ID"),
   client_secret: System.get_env("ZITADEL_CLIENT_SECRET"),
+  roles_claim: "urn:zitadel:iam:org:project:#{System.get_env("ZITADEL_PROJECT_ID")}:roles",
   required_scopes: [
     "openid",
     "profile",
-    "urn:zitadel:iam:user:resourceowner",
-    "urn:zitadel:iam:org:projects:roles"
+    "urn:zitadel:iam:org:project:#{System.get_env("ZITADEL_PROJECT_ID")}:roles"
   ]
 
 # ## Using releases