#!/usr/bin/env sh
set -eu

jq -e '
  (.clients[] | select(.clientId == "spa-public")
    | .publicClient == true
      and .attributes["pkce.code.challenge.method"] == "S256")
  and
  ([.users[].username] | index("regular-user") != null)
' keycloak/import/keycloak-patterns-realm.json >/dev/null

npm --prefix frontend test
echo "AP1 local-identity profile verified without a Google dependency"