Niek Otten 06d8d13e19 feat(event-subscriber): enforce the callback bearer before reading the body (refs #7) ...

Check the Authorization header before deserializing the notification, and read/parse the
body manually. NRC probes a new abonnement's callback with a request that has neither the
configured auth nor a valid notification body, and refuses to register unless it gets a 401
(not a 400) — ADR-0007. Mirrors the verify harness's sink contract.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-30 15:11:14 +02:00

..

EventSubscriber.Api

feat(event-subscriber): enforce the callback bearer before reading the body (refs #7)

2026-06-30 15:11:14 +02:00

EventSubscriber.Application

feat(event-subscriber): project zaak-created notifications into the read projection (refs #7)

2026-06-30 14:48:08 +02:00

EventSubscriber.Tests

test(event-subscriber): ratchet projector mutation baseline to 100% (refs #7)

2026-06-30 15:11:06 +02:00

EventSubscriber.slnx

test(event-subscriber): ratchet projector mutation baseline to 100% (refs #7)

2026-06-30 15:11:06 +02:00

stryker-config.json

test(event-subscriber): ratchet projector mutation baseline to 100% (refs #7)

2026-06-30 15:11:06 +02:00