eho/register-referentie
1
0
Fork 0
Code Issues 16 Pull Requests 1 Actions 1 Packages Projects Releases 1 Wiki Activity

feat(auth): medewerker-realm AuthService + provider, roles surface, realm-roles mapper (refs #13)

Browse Source 
The behandel-portal authenticates staff against the Keycloak `medewerker` realm. Add

MedewerkerAuthService (reads nested realm_access.roles), provideMedewerkerAuth, a roles/hasRole

surface on the shared AuthService, and a realm-roles protocol mapper so the frontend can read

the behandelaar/teamlead roles from the token. Per ADR-0013 the BFF remains the security boundary.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Niek Otten
2026-07-16 09:05:45 +02:00
parent 1d12d693ce
commit a88584514c
5 changed files with 123 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
libs/auth/src/index.ts
View File

@@ -1,4 +1,6 @@
export * from './lib/auth.service';
export * from './lib/digid-auth.service';
export * from './lib/digid-auth.providers';
export * from './lib/medewerker-auth.service';
export * from './lib/medewerker-auth.providers';
export * from './lib/authenticated.guard';