Niek Otten 1a6daecc47 feat(bff): medewerker-realm auth + behandelaar policy + GET /behandel/werkbak (refs #13) ...

Adds a second JWT bearer scheme for the medewerker realm; on validation it lifts
Keycloak's realm_access.roles onto the principal so the behandelaar policy can
require the role. /behandel/werkbak proxies the domain werkbak behind that policy
(401 without a token, 403 without the role). openapi.json + api-client regenerated;
Keycloak__MedewerkerAuthority wired into compose.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-15 11:07:11 +02:00

..

flowable

refactor(infra): use upstream images verbatim, seed config via docker cp (refs #30)

2026-06-25 10:22:14 +02:00

keycloak

refactor(infra): use upstream images verbatim, seed config via docker cp (refs #30)

2026-06-25 10:22:14 +02:00

opennotificaties

feat(infra): wire OpenZaak → Open Notificaties notifications (refs #56)

2026-06-29 14:29:12 +02:00

openzaak

ci(domain): containerize, wire into compose, and verify end-to-end (refs #6)

2026-06-30 17:31:45 +02:00

docker-compose.local.yml

ci(infra): run the Event Subscriber + projection-api in compose and verify end-to-end (refs #7)

2026-06-30 15:11:24 +02:00

docker-compose.yml

feat(bff): medewerker-realm auth + behandelaar policy + GET /behandel/werkbak (refs #13)

2026-07-15 11:07:11 +02:00

notification-sink.py

test(infra): verify-notifications smoke + CI job for the OZ→NRC path (refs #56)

2026-06-29 14:29:12 +02:00

run-acl-integration.sh

refactor(ci): one verify-stack stage for all live-stack checks (closes #58) (refs #46 #56)

2026-06-29 16:48:38 +02:00

run-bff-check.sh

ci(bff): compose wiring, verify-bff live check, mutation baseline (refs #8)

2026-07-01 11:15:05 +02:00

run-domain-check.sh

feat(#13): S-12b — Workflow Client user-tasks + Beoordelen userTask (#83)

2026-07-15 08:53:33 +00:00

run-e2e-check.sh

ci(e2e): run Playwright from the prebuilt image instead of downloading browsers (refs #73)

2026-07-13 15:29:11 +02:00

run-integration.sh

refactor(ci): one verify-stack stage for all live-stack checks (closes #58) (refs #46 #56)

2026-06-29 16:48:38 +02:00

run-notification-check.sh

refactor(ci): one verify-stack stage for all live-stack checks (closes #58) (refs #46 #56)

2026-06-29 16:48:38 +02:00

run-projection-check.sh

ci(infra): run the Event Subscriber + projection-api in compose and verify end-to-end (refs #7)

2026-06-30 15:11:24 +02:00

seed-config.sh

feat(infra): wire OpenZaak → Open Notificaties notifications (refs #56)

2026-06-29 14:29:12 +02:00

verify-notification-driver.py

test(infra): verify-notifications smoke + CI job for the OZ→NRC path (refs #56)

2026-06-29 14:29:12 +02:00

verify-notifications.sh

refactor(ci): one verify-stack stage for all live-stack checks (closes #58) (refs #46 #56)

2026-06-29 16:48:38 +02:00

wait-healthy.sh

fix(infra): portable health poll instead of compose --wait (refs #30)

2026-06-25 10:57:52 +02:00