atomic-design-poc/backend/src/BigRegister.Api/Zgw/OpenZaakDocumentSource.cs

using System.Text.Json;
using System.Text.Json.Serialization;
using BigRegister.Api.Contracts;
using BigRegister.Api.Data;
using BigRegister.Domain.Authorization;

namespace BigRegister.Api.Zgw;

/// <summary>
/// The <see cref="IDocumentSource"/> backed by a real OpenZaak / ZGW Documenten API (DRC,
/// WP-51). An upload always lands locally first (<see cref="DocumentStore"/> stays the record
/// of truth for preview/download/audit, same reasoning as <see cref="OpenZaakZaakSource"/>'s
/// dual-write for aanvragen, WP-50) and is then ALSO registered as a DRC
/// enkelvoudiginformatieobject, whose url is persisted (<see cref="DocumentStore.SetDrcUrl"/>)
/// so <see cref="LinkToZaak"/> can find it later without a re-upload. Selected only when
/// <c>Zgw:Enabled=true</c>; the default stays <see cref="LocalDocumentSource"/>.
///
/// Auth: a fresh HS256 JWT per request (<see cref="ZgwTokenProvider"/>), same as
/// <see cref="OpenZaakZaakSource"/> — creating a document needs write scope on Documenten;
/// linking one to a zaak needs write scope on Zaken (the zaakinformatieobject resource).
/// </summary>
public sealed class OpenZaakDocumentSource(HttpClient http, ZgwTokenProvider tokens, ZgwOptions options) : IDocumentSource
{
  private readonly ZgwHttpClient zgw = new(http, tokens);

  // ponytail: sync-over-async — IDocumentSource is sync to match the local store + the
  // existing sync upload/submit endpoints, same reasoning as OpenZaakZaakSource.
  public UploadResponse Upload(
      string localId, string categoryId, string wizardId, string fileName, string contentType,
      byte[] content, CallerIdentity caller) =>
      UploadAsync(localId, categoryId, wizardId, fileName, contentType, content, caller)
          .GetAwaiter().GetResult();

  private async Task<UploadResponse> UploadAsync(
      string localId, string categoryId, string wizardId, string fileName, string contentType,
      byte[] content, CallerIdentity caller)
  {
    var doc = DocumentStore.Add(localId, categoryId, wizardId, fileName, contentType, content, caller.Bsn);

    if (!options.InformatieobjecttypeUrls.TryGetValue(categoryId, out var informatieobjecttypeUrl))
      throw new InvalidOperationException(
          $"Zgw:InformatieobjecttypeUrls has no entry for category '{categoryId}'.");

    var eio = await zgw.PostAsync<Eio>($"{options.DrcBaseUrl}/enkelvoudiginformatieobjecten", new CreateEioRequest(
        Bronorganisatie: options.Bronorganisatie,
        Creatiedatum: DateOnly.FromDateTime(doc.UploadedAt.UtcDateTime),
        Titel: fileName,
        Auteur: options.UserRepresentation,
        Taal: "nld",
        Formaat: contentType,
        Bestandsnaam: fileName,
        Inhoud: Convert.ToBase64String(content),
        Informatieobjecttype: informatieobjecttypeUrl,
        Identificatie: doc.DocumentId,
        // ponytail: hardcoded "openbaar" (public) — real usage would likely vary the
        // confidentiality level per category (e.g. an identity document is more sensitive
        // than a diploma); a fixed value is enough to prove the seam end-to-end.
        Vertrouwelijkheidaanduiding: "openbaar"), caller);

    DocumentStore.SetDrcUrl(doc.DocumentId, eio.Url);
    return new UploadResponse(doc.DocumentId, doc.LocalId);
  }

  /// <summary>Local link always happens (dual-write, same reasoning as upload); additionally,
  /// once a zaak exists, POST a zaakinformatieobject for every document that has a DRC url —
  /// documents uploaded before Zgw:Enabled was ever true (or under a config gap) simply have
  /// no DrcUrl yet and are skipped, matching "nothing extra to link" for the local case.</summary>
  public void LinkToZaak(IReadOnlyList<string> documentIds, string? zaakUrl, CallerIdentity caller)
  {
    DocumentStore.Link(documentIds);
    if (zaakUrl is null) return;
    LinkToZaakAsync(documentIds, zaakUrl, caller).GetAwaiter().GetResult();
  }

  private async Task LinkToZaakAsync(IReadOnlyList<string> documentIds, string zaakUrl, CallerIdentity caller)
  {
    foreach (var documentId in documentIds)
    {
      var drcUrl = DocumentStore.Get(documentId)?.DrcUrl;
      if (drcUrl is null) continue;
      await zgw.PostAsync<JsonElement>($"{options.ZrcBaseUrl}/zaakinformatieobjecten",
          new CreateZaakInformatieobjectRequest(zaakUrl, drcUrl), caller);
    }
  }

  private sealed record Eio([property: JsonPropertyName("url")] string Url);

  private sealed record CreateEioRequest(
      [property: JsonPropertyName("bronorganisatie")] string Bronorganisatie,
      [property: JsonPropertyName("creatiedatum")] DateOnly Creatiedatum,
      [property: JsonPropertyName("titel")] string Titel,
      [property: JsonPropertyName("auteur")] string Auteur,
      [property: JsonPropertyName("taal")] string Taal,
      [property: JsonPropertyName("formaat")] string Formaat,
      [property: JsonPropertyName("bestandsnaam")] string Bestandsnaam,
      [property: JsonPropertyName("inhoud")] string Inhoud,
      [property: JsonPropertyName("informatieobjecttype")] string Informatieobjecttype,
      [property: JsonPropertyName("identificatie")] string Identificatie,
      [property: JsonPropertyName("vertrouwelijkheidaanduiding")] string Vertrouwelijkheidaanduiding);

  private sealed record CreateZaakInformatieobjectRequest(
      [property: JsonPropertyName("zaak")] string Zaak,
      [property: JsonPropertyName("informatieobject")] string Informatieobject);
}