 hamid
|
39a979b1a7
|
@
backend phase 3: identity profiles, patients & nurse bank accounts
Add the role-attached identity layer on top of the b2 auth spine: nurse
seller profiles (guarded is_verified, read-only aggregates), thin customer
payer profiles, first-class patients (tenancy-scoped), and nurse payout bank
accounts hardened with an iban_hash uniqueness guard and an automated استعلام
شبا IBAN-ownership inquiry.
- Four usr tables via one migration (1:1 uniques, UNIQUE(iban_hash), filtered
UNIQUE(nurse_id) WHERE is_primary=1, guarded is_verified, encrypted PII,
soft-delete on nurse_profiles)
- 15 CQRS slices + 4 role-scoped controllers; reads projected + paginated,
IBAN masked (last-4); ownership-inquiry endpoints rate-limited
- New IBankAccountOwnershipVerifier seam (mock deterministic شبا match) +
per-domain repositories on IUnitOfWork + encrypted-PII value converters
- Activate FluentValidation repo-wide (validators were never registered)
- Handler unit tests + WebApplicationFactory integration tests (76 pass);
contract identity-profiles.md + swagger snapshot; docs, handoff & report
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@
|
2026-07-02 12:03:15 +03:30 |
|