data "authentik_flow" "proxy_authorization_flow" {
  depends_on = [data.kubernetes_secret_v1.authentik]
  slug       = "default-provider-authorization-implicit-consent"
}

resource "authentik_provider_proxy" "app_proxy_provider" {
  name                  = "${local.app_slug}-provider"
  external_host         = local.external_url
  authorization_flow    = data.authentik_flow.proxy_authorization_flow.id
  mode                  = "forward_single"
  access_token_validity = var.access_token_validity
}