All checks were successful
## What & why Before this change the self-service confirmation and the openbaar register showed **different** identifiers, so a citizen could not look their registration back up (#78). Now both surface the same **reference**: - **domain → ACL (write):** the domain `registrationId` is set as the zaak's `identificatie` on `POST /zaken`. - **event-subscriber → ACL (read):** the subscriber reads the zaak's `identificatie` back through the ACL (§8.1 — only the ACL talks to ZGW) via a new `POST /zaken/reference`, and stores it on the projection row **and** the `processed_notifications` replay log. - **BFF + openbaar:** the public view exposes `id/status/reference` (never bsn/naam) and searches by id or reference; the register's "Referentie" column shows the reference. Storing the reference in the replay log keeps ADR-0008's **rebuild-is-log-only** invariant intact — `/admin/rebuild` reproduces the reference without re-reading the ACL. Decision recorded in **ADR-0012**. ## Definition of Done - [x] Linked issue: #78 - [x] Tests written first; red → green per layer - [x] Unit + acceptance green (`make unit`): domain 49, acl 27, bff 20, event-subscriber 19, acceptance 7 - [x] Frontend lint + test green (`nx run-many -t lint test`) - [x] Mutation ≥ break(90): acl 100%, event-subscriber 100%, bff 100%, domain 98.41% (pre-existing FlowableWorkflowClient baseline, untouched) - [x] e2e extended: confirmation reference == register reference - [x] openapi.json + api-client regenerated (drift guard green) - [x] ADR-0012 added; demo-script note appended - [x] `Acl__BaseUrl` wired for the subscriber in compose closes #78 Reviewed-on: #79
87 lines
3.4 KiB
C#
87 lines
3.4 KiB
C#
using System.Net;
|
|
using System.Text;
|
|
using EventSubscriber.Api;
|
|
|
|
namespace EventSubscriber.Tests;
|
|
|
|
/// <summary>
|
|
/// Unit tests for the subscriber's ACL client, which reads a zaak's reference (identificatie) through
|
|
/// the ACL — the only code allowed to talk to ZGW (§8.1, #78). Uses a scripted message handler so no
|
|
/// real ACL is required.
|
|
/// </summary>
|
|
public class AclHttpClientTests
|
|
{
|
|
private static AclHttpClient Client(StubHandler handler) =>
|
|
new(new HttpClient(handler) { BaseAddress = new Uri("http://acl/") });
|
|
|
|
[Fact]
|
|
public async Task Reads_a_zaak_reference_by_posting_the_zaak_url_and_returns_it()
|
|
{
|
|
var capture = new RequestCapture();
|
|
var client = Client(capture.Responds(HttpStatusCode.OK, """{"reference":"REG-42"}"""));
|
|
|
|
var reference = await client.GetZaakReferenceAsync(new Uri("http://openzaak/zaken/api/v1/zaken/abc"));
|
|
|
|
Assert.Equal("REG-42", reference);
|
|
Assert.Equal(HttpMethod.Post, capture.Seen!.Method);
|
|
Assert.Equal("http://acl/zaken/reference", capture.Seen.RequestUri!.ToString());
|
|
Assert.Contains("\"zaakUrl\":\"http://openzaak/zaken/api/v1/zaken/abc\"", capture.Body);
|
|
}
|
|
|
|
[Fact]
|
|
public async Task Throws_when_the_acl_rejects_the_request()
|
|
{
|
|
var capture = new RequestCapture();
|
|
var client = Client(capture.Responds(HttpStatusCode.BadGateway));
|
|
|
|
await Assert.ThrowsAsync<HttpRequestException>(
|
|
() => client.GetZaakReferenceAsync(new Uri("http://openzaak/zaken/api/v1/zaken/abc")));
|
|
}
|
|
|
|
[Fact]
|
|
public async Task Throws_when_the_acl_returns_an_empty_body()
|
|
{
|
|
var capture = new RequestCapture();
|
|
var client = Client(capture.Responds(HttpStatusCode.OK, "null"));
|
|
|
|
var ex = await Assert.ThrowsAsync<InvalidOperationException>(
|
|
() => client.GetZaakReferenceAsync(new Uri("http://openzaak/zaken/api/v1/zaken/abc")));
|
|
Assert.Contains("empty", ex.Message, StringComparison.OrdinalIgnoreCase);
|
|
}
|
|
|
|
[Fact]
|
|
public async Task Rejects_a_null_zaak_url_without_sending_a_request()
|
|
{
|
|
var capture = new RequestCapture();
|
|
var client = Client(capture.Responds(HttpStatusCode.OK, """{"reference":"REG-1"}"""));
|
|
|
|
await Assert.ThrowsAsync<ArgumentNullException>(() => client.GetZaakReferenceAsync(null!));
|
|
Assert.Null(capture.Seen);
|
|
}
|
|
}
|
|
|
|
/// <summary>A test double for <see cref="HttpMessageHandler"/> that records the last request and
|
|
/// returns a scripted response — mirrors the ACL/domain gateway tests.</summary>
|
|
internal sealed class StubHandler(Func<HttpRequestMessage, Task<HttpResponseMessage>> onSend) : HttpMessageHandler
|
|
{
|
|
protected override Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, CancellationToken ct)
|
|
=> onSend(request);
|
|
}
|
|
|
|
/// <summary>Captures the request a client sent, including the (buffered) body.</summary>
|
|
internal sealed class RequestCapture
|
|
{
|
|
public HttpRequestMessage? Seen { get; private set; }
|
|
public string? Body { get; private set; }
|
|
|
|
public StubHandler Responds(HttpStatusCode status, string? json = null) => new(async req =>
|
|
{
|
|
Seen = req;
|
|
Body = req.Content is null ? null : await req.Content.ReadAsStringAsync();
|
|
var response = new HttpResponseMessage(status);
|
|
if (json is not null)
|
|
response.Content = new StringContent(json, Encoding.UTF8, "application/json");
|
|
return response;
|
|
});
|
|
}
|