#8 - S-07 · BFF with one endpoint per portal + OIDC validation - register-referentie

eho commented

2026-06-03 09:52:57 +00:00

Owner

Outcome: A .NET BFF exposing four endpoint groups (one per portal). Validates tokens issued by Keycloak. Implements the minimum needed for the walking skeleton: POST /self-service/registrations, GET /openbaar/register?q=....

Acceptance:

BDD scenarios cover the two endpoints with valid and invalid tokens.
OpenAPI spec generated and committed.

Touches: services/bff/, OpenAPI spec, tests.

Out of scope: behandelaar and beheer endpoints (later slices).

Definition of Done

A linked Gitea issue exists (this one).
Failing test written and committed first.
Implementation makes the test pass.
Refactor commit follows if structure improved.
Conventional Commit messages referencing this issue (refs #NN).
All Gitea Actions CI jobs green: lint, unit, integration, mutation (ratchet), e2e, container build + push, compose-up smoke test.
docker compose up from a fresh clone reaches green health checks within 3 minutes.
Docs touched if behaviour, contracts, or operations changed.
ADR added in docs/architecture/ if a non-obvious decision was made.
Demo note appended to docs/demo-script.md if the slice is user-visible.
This issue closed by the merging PR (closes #NN).

**Outcome:** A .NET BFF exposing four endpoint groups (one per portal). Validates tokens issued by Keycloak. Implements the minimum needed for the walking skeleton: `POST /self-service/registrations`, `GET /openbaar/register?q=...`. **Acceptance:** - BDD scenarios cover the two endpoints with valid and invalid tokens. - OpenAPI spec generated and committed. **Touches:** `services/bff/`, OpenAPI spec, tests. **Out of scope:** behandelaar and beheer endpoints (later slices). ## Definition of Done - [ ] A linked Gitea issue exists (this one). - [ ] Failing test written and committed first. - [ ] Implementation makes the test pass. - [ ] Refactor commit follows if structure improved. - [ ] Conventional Commit messages referencing this issue (`refs #NN`). - [ ] All Gitea Actions CI jobs green: lint, unit, integration, mutation (ratchet), e2e, container build + push, compose-up smoke test. - [ ] `docker compose up` from a fresh clone reaches green health checks within 3 minutes. - [ ] Docs touched if behaviour, contracts, or operations changed. - [ ] ADR added in `docs/architecture/` if a non-obvious decision was made. - [ ] Demo note appended to `docs/demo-script.md` if the slice is user-visible. - [ ] This issue closed by the merging PR (`closes #NN`).