From 5bd74d4ffe4eea6b8b4117136888e5c195306d65 Mon Sep 17 00:00:00 2001
From: Athletic Map Deploy <deploy@athleticmap.com>
Date: Thu, 17 Sep 2026 18:58:26 +0000
Subject: [PATCH] fix(plataforma): papeis atm_admin, atm_cadastro e
 atm_financeiro no realm
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

O realm do molde nao tinha os papeis que o SecurityConfig dos servicos verifica.
Acrescentados ao ConfigMap de import e a copia em realm/. Nao afeta o realm que
ja existe — o Keycloak so importa realm inexistente.
---
 tenants/plataforma/35-realm-import-cm.yaml    |   6 +-
 .../plataforma/realm/athleticmap-realm.json   | 136 ++++++++++--------
 2 files changed, 79 insertions(+), 63 deletions(-)

diff --git a/tenants/plataforma/35-realm-import-cm.yaml b/tenants/plataforma/35-realm-import-cm.yaml
index c219aef..966f21b 100644
--- a/tenants/plataforma/35-realm-import-cm.yaml
+++ b/tenants/plataforma/35-realm-import-cm.yaml
@@ -12,7 +12,11 @@ data:
           { "name": "atm_athlete" },
           { "name": "atm_trainer" },
           { "name": "atm_team_admin" },
-          { "name": "atm_fed_admin" }
+          { "name": "atm_fed_admin" },
+          { "name": "atm_admin" },
+          { "name": "atm_cadastro" },
+          { "name": "atm_financeiro" },
+          { "name": "atm_financeiro-leitura" }
         ]
       },
       "clients": [
diff --git a/tenants/plataforma/realm/athleticmap-realm.json b/tenants/plataforma/realm/athleticmap-realm.json
index b2e1e9b..2d9c887 100644
--- a/tenants/plataforma/realm/athleticmap-realm.json
+++ b/tenants/plataforma/realm/athleticmap-realm.json
@@ -1,62 +1,74 @@
-{
-  "realm": "athleticmap",
-  "enabled": true,
-  "displayName": "Athletic Map",
-  "loginWithEmailAllowed": true,
-  "roles": {
-    "realm": [
-      {
-        "name": "admin"
-      },
-      {
-        "name": "atm_athlete"
-      },
-      {
-        "name": "atm_trainer"
-      },
-      {
-        "name": "atm_team_admin"
-      },
-      {
-        "name": "atm_fed_admin"
-      }
-    ]
-  },
-  "clients": [
-    {
-      "clientId": "spa",
-      "name": "Athletic Map SPA",
-      "publicClient": true,
-      "protocol": "openid-connect",
-      "standardFlowEnabled": true,
-      "implicitFlowEnabled": false,
-      "directAccessGrantsEnabled": false,
-      "redirectUris": [
-        "https://plataforma.athleticmap.influxdigital.com.br/*"
-      ],
-      "webOrigins": [
-        "https://plataforma.athleticmap.influxdigital.com.br"
-      ],
-      "attributes": {
-        "pkce.code.challenge.method": "S256",
-        "post.logout.redirect.uris": "https://plataforma.athleticmap.influxdigital.com.br/*"
-      },
-      "protocolMappers": [
-        {
-          "name": "funcionario_id",
-          "protocol": "openid-connect",
-          "protocolMapper": "oidc-usermodel-attribute-mapper",
-          "consentRequired": false,
-          "config": {
-            "user.attribute": "funcionario_id",
-            "claim.name": "funcionario_id",
-            "jsonType.label": "String",
-            "id.token.claim": "true",
-            "access.token.claim": "true",
-            "userinfo.token.claim": "true"
-          }
-        }
-      ]
-    }
-  ]
-}
\ No newline at end of file
+{
+  "realm": "athleticmap",
+  "enabled": true,
+  "displayName": "Athletic Map",
+  "loginWithEmailAllowed": true,
+  "roles": {
+    "realm": [
+      {
+        "name": "admin"
+      },
+      {
+        "name": "atm_athlete"
+      },
+      {
+        "name": "atm_trainer"
+      },
+      {
+        "name": "atm_team_admin"
+      },
+      {
+        "name": "atm_fed_admin"
+      },
+      {
+        "name": "atm_admin"
+      },
+      {
+        "name": "atm_cadastro"
+      },
+      {
+        "name": "atm_financeiro"
+      },
+      {
+        "name": "atm_financeiro-leitura"
+      }
+    ]
+  },
+  "clients": [
+    {
+      "clientId": "spa",
+      "name": "Athletic Map SPA",
+      "publicClient": true,
+      "protocol": "openid-connect",
+      "standardFlowEnabled": true,
+      "implicitFlowEnabled": false,
+      "directAccessGrantsEnabled": false,
+      "redirectUris": [
+        "https://plataforma.athleticmap.influxdigital.com.br/*"
+      ],
+      "webOrigins": [
+        "https://plataforma.athleticmap.influxdigital.com.br"
+      ],
+      "attributes": {
+        "pkce.code.challenge.method": "S256",
+        "post.logout.redirect.uris": "https://plataforma.athleticmap.influxdigital.com.br/*"
+      },
+      "protocolMappers": [
+        {
+          "name": "funcionario_id",
+          "protocol": "openid-connect",
+          "protocolMapper": "oidc-usermodel-attribute-mapper",
+          "consentRequired": false,
+          "config": {
+            "user.attribute": "funcionario_id",
+            "claim.name": "funcionario_id",
+            "jsonType.label": "String",
+            "id.token.claim": "true",
+            "access.token.claim": "true",
+            "userinfo.token.claim": "true"
+          }
+        }
+      ]
+    }
+  ]
+}