fix(authelia): explicit custom attribute configuration

Signed-off-by: Vegard Hagen <[email protected]>

k8s/infra/auth/authelia/values.yaml

@@ -88,10 +88,10 @@ configMap:
         allowed_origins_from_client_redirect_uris: true
         endpoints: [ userinfo, authorization, token, revocation, introspection ]
       claims_policies:
-        argocd:
-          custom_claims: { argocd: { attribute: argocd } }
+        argocd_policy:
+          custom_claims: { argocd_claim: { attribute: argocd } }
           # Argo CD requires the claims other than `groups` to be in the ID Token https://github.com/argoproj/argo-cd/issues/23768
-          id_token: [ email, name, preferred_username, argocd ]
+          id_token: [ email, email_verified, alt_emails, name, preferred_username, argocd_claim ]
         audiobookshelf:
           custom_claims: { audiobookshelf: { attribute: audiobookshelf } }
         # https://www.authelia.com/integration/openid-connect/openid-connect-1.0-claims/#restore-functionality-prior-to-claims-parameter
@@ -100,8 +100,8 @@ configMap:
         username_email:
           id_token: [ email, email_verified, alt_emails, name, preferred_username ]
       scopes:
-        argocd:
-          claims: [ argocd ]
+        argocd_scope:
+          claims: [ argocd_claim ]
         audiobookshelf:
           claims: [ audiobookshelf ]
       clients:
@@ -110,13 +110,13 @@ configMap:
           client_name: Argo CD
           public: false
           authorization_policy: two_factor
-          claims_policy: argocd
+          claims_policy: argocd_policy
           pre_configured_consent_duration: 1 month
-          require_pkce: true
+          require_pkce: false
           redirect_uris:
             - https://argocd.stonegarden.dev/auth/callback
             - https://argocd.stonegarden.dev/applications
-          scopes: [ openid, email, profile, offline_access, argocd ]
+          scopes: [ openid, email, profile, offline_access, argocd_scope ]
           grant_types: [ authorization_code, refresh_token ]
           userinfo_signed_response_alg: none
           id_token_signed_response_alg: ES256
@@ -126,10 +126,10 @@ configMap:
           client_name: Argo CD (CLI)
           public: true
           authorization_policy: two_factor
-          claims_policy: argocd
+          claims_policy: argocd_policy
           pre_configured_consent_duration: 1 month
           redirect_uris: [ http://localhost:8085/auth/callback ]
-          scopes: [ openid, email, profile, offline_access, argocd ]
+          scopes: [ openid, email, profile, offline_access, argocd_scope ]
           id_token_signed_response_alg: ES256
           access_token_signed_response_alg: ES256
           revocation_endpoint_auth_method: none