# Open Notificaties (NRC) setup_configuration (S-01-c, #56).
# Wires NRC so OpenZaak can publish notifications:
#  - the JWT credential OpenZaak authenticates with,
#  - delegation of authorization checks to OpenZaak's Autorisaties API (AC),
#  - the `zaken` kanaal OpenZaak publishes zaak events on.
# Dev-only credentials — not for production. Steps from nrc.setup_configuration.

# 1. JWT credential NRC uses to verify the token OpenZaak presents.
vng_api_common_credentials_config_enable: true
vng_api_common_credentials:
  items:
    - identifier: big-reference-seed
      secret: insecure-dev-secret-change-me

# 2. The Autorisaties API (OpenZaak's AC) NRC consults to authorize publishers.
zgw_consumers_config_enable: true
zgw_consumers:
  services:
    - identifier: openzaak-ac
      label: OpenZaak Autorisaties API
      api_type: ac
      api_root: http://openzaak:8000/autorisaties/api/v1/
      auth_type: zgw
      client_id: big-reference-seed
      secret: insecure-dev-secret-change-me

# 3. Delegate authorization to that AC.
autorisaties_api_config_enable: true
autorisaties_api:
  authorizations_api_service_identifier: openzaak-ac

# 4. The kanalen publishers announce on: `zaken` (OpenZaak) and `objecten` (Objecten, S-19b-1).
# Both authenticate with the big-reference-seed credential above, which OpenZaak's AC grants
# heeft_alle_autorisaties — so no separate publisher authorization is needed for Objecten.
notifications_kanalen_config_enable: true
notifications_kanalen_config:
  items:
    - naam: zaken
      documentatie_link: https://github.com/VNG-Realisatie/gemma-zaken
      filters:
        - bronorganisatie
        - zaaktype
        - vertrouwelijkheidaanduiding
    # 5. The kanaal Objecten publishes register-record events on (S-19b-1, ADR-0029). Its name is
    # fixed by the Objects API itself (NOTIFICATIONS_KANAAL = "objecten"), not chosen here. The
    # filter set matches what the Objects API sends as kenmerken, so an abonnement can narrow by
    # objecttype rather than receiving every object write in the register.
    - naam: objecten
      documentatie_link: https://objects-and-objecttypes-api.readthedocs.io/
      filters:
        - object_type