All checks were successful
## What & why Before this change the self-service confirmation and the openbaar register showed **different** identifiers, so a citizen could not look their registration back up (#78). Now both surface the same **reference**: - **domain → ACL (write):** the domain `registrationId` is set as the zaak's `identificatie` on `POST /zaken`. - **event-subscriber → ACL (read):** the subscriber reads the zaak's `identificatie` back through the ACL (§8.1 — only the ACL talks to ZGW) via a new `POST /zaken/reference`, and stores it on the projection row **and** the `processed_notifications` replay log. - **BFF + openbaar:** the public view exposes `id/status/reference` (never bsn/naam) and searches by id or reference; the register's "Referentie" column shows the reference. Storing the reference in the replay log keeps ADR-0008's **rebuild-is-log-only** invariant intact — `/admin/rebuild` reproduces the reference without re-reading the ACL. Decision recorded in **ADR-0012**. ## Definition of Done - [x] Linked issue: #78 - [x] Tests written first; red → green per layer - [x] Unit + acceptance green (`make unit`): domain 49, acl 27, bff 20, event-subscriber 19, acceptance 7 - [x] Frontend lint + test green (`nx run-many -t lint test`) - [x] Mutation ≥ break(90): acl 100%, event-subscriber 100%, bff 100%, domain 98.41% (pre-existing FlowableWorkflowClient baseline, untouched) - [x] e2e extended: confirmation reference == register reference - [x] openapi.json + api-client regenerated (drift guard green) - [x] ADR-0012 added; demo-script note appended - [x] `Acl__BaseUrl` wired for the subscriber in compose closes #78 Reviewed-on: #79
75 lines
3.3 KiB
C#
75 lines
3.3 KiB
C#
using Microsoft.EntityFrameworkCore;
|
|
|
|
namespace Projection.ReadModel;
|
|
|
|
/// <summary>
|
|
/// The read projection's persistence. This single store is the system's rebuildable read model
|
|
/// (PRD §8.4): the Event Subscriber writes to it (projector) and the projection-api reads it
|
|
/// (query). Both processes are the one "Read Projection" bounded context and share this schema —
|
|
/// not a cross-domain DB share (ADR-0008 reconciles this with CLAUDE.md §8.5).
|
|
/// </summary>
|
|
public sealed class ProjectionDbContext(DbContextOptions<ProjectionDbContext> options) : DbContext(options)
|
|
{
|
|
/// <summary>The public-facing register rows (public-safe filtering is tightened in S-09).</summary>
|
|
public DbSet<RegisterEntryRow> RegisterEntries => Set<RegisterEntryRow>();
|
|
|
|
/// <summary>The Event Subscriber's durable log of accepted notifications — idempotency guard and rebuild source.</summary>
|
|
public DbSet<ProcessedNotificationRow> ProcessedNotifications => Set<ProcessedNotificationRow>();
|
|
|
|
protected override void OnModelCreating(ModelBuilder modelBuilder)
|
|
{
|
|
modelBuilder.Entity<RegisterEntryRow>(e =>
|
|
{
|
|
e.ToTable("register_projection");
|
|
e.HasKey(r => r.Id);
|
|
e.Property(r => r.Id).HasColumnName("id");
|
|
e.Property(r => r.Status).HasColumnName("status").IsRequired();
|
|
e.Property(r => r.Reference).HasColumnName("reference");
|
|
e.Property(r => r.Bsn).HasColumnName("bsn");
|
|
e.Property(r => r.NaamPlaceholder).HasColumnName("naam_placeholder");
|
|
});
|
|
|
|
modelBuilder.Entity<ProcessedNotificationRow>(e =>
|
|
{
|
|
e.ToTable("processed_notifications");
|
|
e.HasKey(r => r.Key);
|
|
e.Property(r => r.Key).HasColumnName("key");
|
|
e.Property(r => r.Actie).HasColumnName("actie").IsRequired();
|
|
e.Property(r => r.ZaakId).HasColumnName("zaak_id").IsRequired();
|
|
e.Property(r => r.Resource).HasColumnName("resource").IsRequired();
|
|
e.Property(r => r.Reference).HasColumnName("reference");
|
|
e.Property(r => r.ReceivedAt).HasColumnName("received_at");
|
|
});
|
|
}
|
|
}
|
|
|
|
/// <summary>A register projection row. <c>Bsn</c>/<c>NaamPlaceholder</c> are deferred (ADR-0008).</summary>
|
|
public sealed class RegisterEntryRow
|
|
{
|
|
public required string Id { get; set; }
|
|
public required string Status { get; set; }
|
|
|
|
/// <summary>The citizen-facing reference (the zaak's identificatie) — matches the submit confirmation (#78).</summary>
|
|
public string? Reference { get; set; }
|
|
|
|
public string? Bsn { get; set; }
|
|
public string? NaamPlaceholder { get; set; }
|
|
}
|
|
|
|
/// <summary>An accepted notification, retained so the projection can be rebuilt without OpenZaak (§8.1).</summary>
|
|
public sealed class ProcessedNotificationRow
|
|
{
|
|
public required string Key { get; set; }
|
|
public required string Actie { get; set; }
|
|
public required string ZaakId { get; set; }
|
|
|
|
/// <summary>The ZGW resource (e.g. <c>zaak</c> or <c>status</c>) — retained so a rebuild reprojects
|
|
/// the right status without reading OpenZaak (S-09b).</summary>
|
|
public required string Resource { get; set; }
|
|
|
|
/// <summary>The zaak reference (identificatie), retained so a rebuild reprojects it without the ACL (#78).</summary>
|
|
public string? Reference { get; set; }
|
|
|
|
public DateTimeOffset ReceivedAt { get; set; }
|
|
}
|