add auth

config/runtime.exs

@@ -26,6 +26,25 @@ cors_origin = System.get_env("CORS_ORIGIN", "*")
 config :cors_plug,
   origin: cors_origin
 
+# Zitadel OIDC configuration
+zitadel_issuer = System.get_env("ZITADEL_ISSUER", "https://id.corredorconect.com")
+zitadel_client_id = System.get_env("ZITADEL_CLIENT_ID")
+zitadel_client_secret = System.get_env("ZITADEL_CLIENT_SECRET")
+zitadel_project_id = System.get_env("ZITADEL_PROJECT_ID")
+
+config :provider_service, :zitadel,
+  issuer: zitadel_issuer,
+  client_id: zitadel_client_id,
+  client_secret: zitadel_client_secret,
+  project_id: zitadel_project_id,
+  roles_claim: "urn:zitadel:iam:org:project:#{zitadel_project_id}:roles",
+  required_scopes: [
+    "openid",
+    "profile",
+    "urn:zitadel:iam:org:project:#{zitadel_project_id}:roles",
+    "urn:zitadel:iam:org:project:#{zitadel_project_id}:aud"
+  ]
+
 # ## Using releases
 #
 # If you use `mix release`, you need to explicitly enable the server
@@ -82,4 +101,4 @@ if config_env() == :prod do
       port: String.to_integer(System.get_env("PORT", "4000"))
     ],
     secret_key_base: secret_key_base
-end
+end