adr-proposal: behandel-portal wiring — multi-realm BFF auth, werkbak source, decision→task correlation (S-12) #84

New Issue

not · 2026-07-15T08:58:46Z

not commented

2026-07-15 08:58:46 +00:00

Decisions needed for S-12c (behandel-portal backend), to be recorded as ADR-0013 (lands in the S-12c-1 PR).

1. BFF multi-realm auth. The BFF validates only the realm today (one JWT authority). needs -realm tokens with the role. Decision: add a second JWT bearer scheme for the medewerker realm; behandel endpoints require that scheme + the realm role. Self-service keeps the digid scheme.

2. Werkbak source. The werkbak = the open Flowable tasks (via the domain / , §8.2), NOT the read projection. Rationale: the list is the authoritative set of claimable/decidable work items; claim/decide act on real task ids; avoids premature IN_BEHANDELING projection + staff-field plumbing (deferred in ADR-0008). The projection stays the anonymous openbaar read model.

3. Decision→task correlation. A behandelaar decision (goedkeuren/afwijzen) both applies the domain transition (aggregate + ACL for approval) AND completes the Flowable task, so the process advances. The domain looks the task up by registrationId.

Delivery: S-12c split into S-12c-1 (auth + werkbak read) and S-12c-2 (decide + task completion). Refs #13.

Decisions needed for S-12c (behandel-portal backend), to be recorded as ADR-0013 (lands in the S-12c-1 PR). **1. BFF multi-realm auth.** The BFF validates only the realm today (one JWT authority). needs -realm tokens with the role. Decision: add a second JWT bearer scheme for the medewerker realm; behandel endpoints require that scheme + the realm role. Self-service keeps the digid scheme. **2. Werkbak source.** The werkbak = the open Flowable tasks (via the domain / , §8.2), NOT the read projection. Rationale: the list is the authoritative set of claimable/decidable work items; claim/decide act on real task ids; avoids premature IN_BEHANDELING projection + staff-field plumbing (deferred in ADR-0008). The projection stays the anonymous openbaar read model. **3. Decision→task correlation.** A behandelaar decision (goedkeuren/afwijzen) both applies the domain transition (aggregate + ACL for approval) AND completes the Flowable task, so the process advances. The domain looks the task up by registrationId. Delivery: S-12c split into S-12c-1 (auth + werkbak read) and S-12c-2 (decide + task completion). Refs #13.

not added the type:adr-proposal area:workflow area:bff labels 2026-07-15 08:58:47 +00:00

not referenced a pull request that will close this issue

2026-07-15 09:10:35 +00:00

feat(#13): S-12c-1 — behandel BFF auth + werkbak (ADR-0013) #85

not closed this issue

2026-07-15 09:54:04 +00:00

not referenced this issue from a commit

2026-07-15 09:54:04 +00:00

feat(#13): S-12c-1 — behandel BFF auth + werkbak (ADR-0013) (#85)

Sign in to join this conversation.