3 Commits

Include renames

Author	SHA1	Message	Date
ehoandClaude Sonnet 5	8560746d15	refactor: strip WP-/RB- ticket refs from backend (RD-19) ... The backend half of the sweep RD-18 did for the front end. git blame holds the provenance and stays correct when the code moves; the comment names a closed ticket and tells the reader nothing the sentence around it does not. public/letter.css and LetterHtml.golden.html change together, because the renderer inlines the CSS and the golden file snapshots the result. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-04 21:48:08 +02:00
ehoandClaude Sonnet 5	1e87997ea0	feat(openzaak): least-privilege client scopes (WP-57) ... setup_configuration has no YAML field for granular autorisaties, so bigregister-test now starts at heeft_alle_autorisaties: false (dev + prod template) and bootstrap-catalogus.sh grants exactly the ztc/zrc scopes the harness needs via the Django ORM, sidestepping the zero-scope chicken-and-egg with the JWT-authenticated Autorisaties REST API. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-30 14:05:54 +02:00
ehoandClaude Sonnet 5	3588057a75	feat(openzaak): real secrets + TLS for the production OpenZaak harness (WP-55) ... docker-compose.openzaak.prod.yml layers real SECRET_KEY/DB password/site domain/allowed-hosts (all required, fail-fast via ${VAR:?...}) on top of the WP-54 dev harness, switches Postgres off trust auth, and sets IS_HTTPS for a front-facing reverse-proxy TLS setup. The ZGW client secret lives inside a file setup_configuration reads rather than a compose env var, so it's templated (data.prod.yaml.template, no secret) and rendered host-side via render-prod-secrets.sh into a gitignored data.prod.yaml, mounted over the container's dev data.yaml. ZgwOptions.cs already binds from IConfiguration, so the BFF side needed no code change. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-30 12:27:21 +02:00