# Script pour ajouter la nouvelle redirect URI
$KeycloakUrl = "http://192.168.1.11:8180"
$Realm = "unionflow"
$ClientId = "unionflow-mobile"

Write-Host "=== AJOUT NOUVELLE REDIRECT URI ===" -ForegroundColor Cyan

try {
    # Obtenir token admin
    $tokenBody = "username=admin&password=admin&grant_type=password&client_id=admin-cli"
    $tokenResponse = Invoke-RestMethod -Uri "$KeycloakUrl/realms/master/protocol/openid-connect/token" -Method Post -ContentType "application/x-www-form-urlencoded" -Body $tokenBody
    $accessToken = $tokenResponse.access_token
    
    # Récupérer le client
    $headers = @{ "Authorization" = "Bearer $accessToken" }
    $clients = Invoke-RestMethod -Uri "$KeycloakUrl/admin/realms/$Realm/clients?clientId=$ClientId" -Method Get -Headers $headers
    $client = $clients[0]
    $clientUuid = $client.id
    
    Write-Host "Client trouvé: $clientUuid" -ForegroundColor Green
    
    # Ajouter les nouvelles redirect URIs
    $newRedirectUris = @(
        "com.unionflow.mobile://login-callback",
        "com.unionflow.mobile://oauth/callback"
    )
    
    $client.redirectUris = $newRedirectUris
    
    # Convertir en JSON et mettre à jour
    $clientJson = $client | ConvertTo-Json -Depth 10
    Invoke-RestMethod -Uri "$KeycloakUrl/admin/realms/$Realm/clients/$clientUuid" -Method Put -Headers $headers -Body $clientJson -ContentType "application/json"
    
    Write-Host "✅ Redirect URIs mises à jour:" -ForegroundColor Green
    foreach ($uri in $newRedirectUris) {
        Write-Host "  - $uri" -ForegroundColor Gray
    }
    
} catch {
    Write-Host "Erreur: $($_.Exception.Message)" -ForegroundColor Red
}