Tokens do not expose uuid or pkid

[spacemule]

First off, thanks so much for this amazing project. I've learned so much from it and had a lot of fun implementing it.

I'm trying to use the new RBAC resources in terraform, but I cannot apply them to tokens as the authentik_token resource does not output a UUID or PKID.

(As a sidenote, it's not too clear why PKID is sometimes used, and other times UUID is used. Additionally, sometimes the resources want an ID, sometimes they want a UUID. It'd be nice if the reasoning for this were clearer.)

Here's my current terraform:

resource "authentik_token" "app_pass" {
  for_each   = local.app_users
  identifier = "${each.key}-gw"
  user       = authentik_user.app["${each.key}"].id
  expiring   = false
  intent     = "app_password"
  provisioner "local-exec" {
    on_failure = fail
    command    = <<-EOT
      PKID=$(curl -XGET \
        -H 'Authorization: Bearer ${var.authentik_token}' \
        "${var.authentik_endpoint}/api/v3/core/tokens/?identifier=${self.identifier}&intent=${self.intent}" | \
        jq --raw-output .results[].pk)
      curl -XPOST \
        -H 'Authorization: Bearer ${var.authentik_token}' \
        --json \
        '{"permissions":["view_token_key"],"model":"authentik_core.token","object_pk":"'$PKID'"}' \
        "${var.authentik_endpoint}/api/v3/rbac/permissions/assigned_by_users/${self.user}/assign/"
      EOT
  }
}

With the new RBAC resources, the provisioner should be unnecessary, and the terraform would look something like this:

resource "authentik_token" "app_pass" {
 for_each   = local.app_users
 identifier = "${each.key}-gw"
 user       = authentik_user.app["${each.key}"].id
 expiring   = false
 intent     = "app_password"
}

resource "authentik_rbac_permission_user" "app_pass" {
 for_each = authentik_token.app_pass
 user = each.value.user
 permission = "view_token_key"
 model = "authentik_core.token"
 object_id = each.value.id
}

The problem is that last line. authentic_token only exposes the ID, which is not the object_id that the resource expects. So when I apply, it fails with a 400 error:

Error: HTTP Error '400 Bad Request' during request 'POST /api/v3/rbac/permissions/assigned_by_users/12/assign/': "{"non_field_errors":["“app_username-gw” is not a valid UUID."]}"