#3 - S-02 · Keycloak with mock DigiD, eHerkenning, eIDAS, medewerker realms - register-referentie

eho commented

2026-06-03 09:52:56 +00:00

Owner

Outcome: Keycloak runs locally with four realms pre-seeded. Each realm has 1–2 test users with known credentials documented in docs/synthetic-data.md.

Acceptance:

Browser-based OIDC login flow works for each realm against a placeholder client.
Mock DigiD realm returns a BSN claim; eHerkenning returns a KvK; eIDAS returns a foreign identifier; medewerker returns role claims.

Touches: infra/keycloak/, seed scripts.

Out of scope: real federation, MFA.

Definition of Done

A linked Gitea issue exists (this one).
Failing test written and committed first.
Implementation makes the test pass.
Refactor commit follows if structure improved.
Conventional Commit messages referencing this issue (refs #NN).
All Gitea Actions CI jobs green: lint, unit, integration, mutation (ratchet), e2e, container build + push, compose-up smoke test.
docker compose up from a fresh clone reaches green health checks within 3 minutes.
Docs touched if behaviour, contracts, or operations changed.
ADR added in docs/architecture/ if a non-obvious decision was made.
Demo note appended to docs/demo-script.md if the slice is user-visible.
This issue closed by the merging PR (closes #NN).

**Outcome:** Keycloak runs locally with four realms pre-seeded. Each realm has 1–2 test users with known credentials documented in `docs/synthetic-data.md`. **Acceptance:** - Browser-based OIDC login flow works for each realm against a placeholder client. - Mock DigiD realm returns a BSN claim; eHerkenning returns a KvK; eIDAS returns a foreign identifier; medewerker returns role claims. **Touches:** `infra/keycloak/`, seed scripts. **Out of scope:** real federation, MFA. ## Definition of Done - [ ] A linked Gitea issue exists (this one). - [ ] Failing test written and committed first. - [ ] Implementation makes the test pass. - [ ] Refactor commit follows if structure improved. - [ ] Conventional Commit messages referencing this issue (`refs #NN`). - [ ] All Gitea Actions CI jobs green: lint, unit, integration, mutation (ratchet), e2e, container build + push, compose-up smoke test. - [ ] `docker compose up` from a fresh clone reaches green health checks within 3 minutes. - [ ] Docs touched if behaviour, contracts, or operations changed. - [ ] ADR added in `docs/architecture/` if a non-obvious decision was made. - [ ] Demo note appended to `docs/demo-script.md` if the slice is user-visible. - [ ] This issue closed by the merging PR (`closes #NN`).