move OF-specific code back into OF

src/openforms/authentication/contrib/digid_eherkenning_oidc/models.py

@@ -1,4 +1,5 @@
 import warnings
+from collections.abc import Collection
 
 from django.conf import settings
 from django.utils.functional import classproperty
@@ -10,6 +11,7 @@
     EHerkenningBewindvoeringConfig,
     EHerkenningConfig,
 )
+from mozilla_django_oidc_db.typing import ClaimPath
 
 
 def get_callback_view(self):
@@ -55,6 +57,18 @@ def oidc_authentication_callback_url(cls) -> str:  # type: ignore
             return "digid_machtigen_oidc:callback"
         return "oidc_authentication_callback"
 
+    @property
+    def mandate_claims(self) -> dict[str, ClaimPath]:
+        return {
+            "representee": self.representee_bsn_claim,
+            "authorizee": self.authorizee_bsn_claim,
+            "service_id": self.mandate_service_id_claim,
+        }
+
+    @property
+    def oidcdb_sensitive_claims(self) -> Collection[ClaimPath]:
+        return list(self.mandate_claims.values())
+
 
 class OFEHerkenningConfig(EHerkenningConfig):
     class Meta:
@@ -92,3 +106,19 @@ def oidc_authentication_callback_url(cls) -> str:  # type: ignore
             )
             return "eherkenning_bewindvoering_oidc:callback"
         return "oidc_authentication_callback"
+
+    @property
+    def mandate_claims(self) -> dict[str, ClaimPath]:
+        return {
+            "representee": self.representee_claim,
+            # "authorizee_legal_subject_type": self.identifier_type_claim,
+            "authorizee_legal_subject": self.legal_subject_claim,
+            "authorizee_acting_subject": self.acting_subject_claim,
+            # "authorizee_branch_number": self.branch_number_claim,
+            # "service_id": self.mandate_service_id_claim,
+            # "service_uuid": self.mandate_service_uuid_claim,
+        }
+
+    @property
+    def oidcdb_sensitive_claims(self) -> Collection[ClaimPath]:
+        return list(self.mandate_claims.values())