feat(bff): owner-scoped self-service withdraw endpoint (S-11c-1, refs #12) #90

Merged

not merged 3 commits from feat/12-withdrawal-bff into main

2026-07-16 12:20:44 +00:00

Author	SHA1	Message	Date
Niek Otten	3afa5a552a	test(verify): the domain withdrawal check sends the owner bsn (refs #12 ) All checks were successful CI / lint (pull_request) Successful in 1m16s Details CI / build (pull_request) Successful in 1m13s Details CI / unit (pull_request) Successful in 1m17s Details CI / frontend (pull_request) Successful in 2m33s Details CI / mutation (pull_request) Successful in 5m29s Details CI / verify-stack (pull_request) Successful in 11m48s Details Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-16 13:54:45 +02:00
Niek Otten	8591b89e0c	feat(bff): POST /self-service/registrations/{id}/withdraw, owner-scoped (refs #12 ) The domain withdraw command carries the caller's bsn and owner-scopes the aggregate; unknown or not-owned is 404 (indistinguishable). The BFF forwards the DigiD token's bsn and relays 204/404. Regenerate the OpenAPI spec + Angular client for the new endpoint. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-16 13:54:45 +02:00
Niek Otten	248f57024e	test(bff): self-service withdraw is owner-scoped and relays not-found (refs #12 ) The withdraw handler returns an outcome and refuses a bsn that doesn't own the registration; the BFF endpoint requires a digid token, forwards id+bsn, and relays the domain's 404. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-16 13:54:45 +02:00