resource "auth0_client" "client" {
  name            = "MOP Service-Entitlement-Management (Managed by Terraform)"
  app_type        = "non_interactive"
  is_first_party  = true
  oidc_conformant = false
  grant_types     = ["client_credentials"]
  client_metadata = {
    identity_id = "48ef8928-4f59-4428-b4df-83cd7ec770bf"
  }
}

resource "auth0_client_grant" "client_grant" {
   client_id = "${auth0_client.client.id}"
   audience  = "https://gateway.${local.deploy_env_name}.netfoundry.io/"
   scope     = ["ignored"]
 }


resource "aws_ssm_parameter" "auth_client_secret" {
  name        = "/${local.deploy_env_name}/entitlement-management/client-secret"
  description = "Auth0 Client secret for entitlement-management service"
  type        = "SecureString"
  value       = auth0_client.client.client_secret

  depends_on = [auth0_client.client]
}