Promotion of current master to stages/qa#1182

Merged

amoose merged 204 commits intostages/qafrom

promotion-qa

Mar 8, 2017

Commits on Mar 7, 2017

Stacks recovery key (#974)

el-mapache
authored and
amoose
committed
Adds text to about why recovery code is important (#967)

el-mapache
authored and
amoose
committed
Support LOA/IAL levels in OpenID Connect Flow

zachmargolis
authored and
amoose
committed
Fix IdV attempt counter edge case (#976)

pkarman
authored and
amoose
committed
Add docs describing how to use proofing vendor gem

Peter Karman
authored and
amoose
committed
Add equifax gem to production group for deploy

Peter Karman
authored and
amoose
committed
Update contact form (#988)

hursey013
authored and
amoose
committed
Remove the browser "are you sure you want to leave this page?" popup

zachmargolis
authored and
amoose
committed
Updates language (#989)

el-mapache
authored and
amoose
committed
Remove page-unload-warning

zachmargolis
authored and
amoose
committed
Add screen reader text to profile page (#993)

hursey013
authored and
amoose
committed
Add context to 2fa radio buttons (#994)

hursey013
authored and
amoose
committed
Use rackup in Procfile and explicit port 3000

patcon
authored and
amoose
committed
Allow resending OTP in reauthentication context (#998)

monfresh
authored and
amoose
committed
Don't load user_flows rake task in production (#975)
amoose
committed
Add vendor reasons to proofing step analytics (#996)

pkarman
authored and
amoose
committed
Update flash message styles (#995)

hursey013
authored and
amoose
committed
Bypass acknowledge recovery code step for LOA3 (#997)

jessieay
authored and
amoose
committed
Make sure active profiles are verified

zachmargolis
authored and
amoose
committed
Uses same recovery code visuals on loa3 (#992)

el-mapache
authored and
amoose
committed
Set verified_at for loa3 test user in dev:prime

zachmargolis
authored and
amoose
committed
Adds int Dashboard to SPs (#1005)
amoose
committed
Adds int environment to deploy stages
amoose
committed
Catch error when recovery code cannot decrypt PII (#1000)

pkarman
authored and
amoose
committed
Set id_token JWTs to expire along with session

zachmargolis
authored and
amoose
committed
Increase reauthn_window to 2 minutes (#1001)

monfresh
authored and
amoose
committed
Adds presenter for otp choice screen

el-mapache
authored and
amoose
committed
Adds fix for permissions with latest base image (#981)
amoose
committed
Adds authenticator app tooltip (#904)

el-mapache
authored and
amoose
committed
Fixes typo in recovery code instructions (#1011)

el-mapache
authored and
amoose
committed
Update token endpoint to return an access_token

zachmargolis
authored and
amoose
committed
Specify cert for example client in development

zachmargolis
authored and
amoose
committed
Refactor code around IdV Profile Step (#1010)

monfresh
authored and
amoose
committed
Update email sent confirmation page (#1014)

hursey013
authored and
amoose
committed
Remove progress bar (#1013)

jessieay
authored and
amoose
committed
Fix documentation in dev rake task (#1020)

pkarman
authored and
amoose
committed
Update Show Password toggle (#1017)

hursey013
authored and
amoose
committed
Track Financial and Phone IdV steps separately (#1025)

pkarman
authored and
amoose
committed
Add agency handoff page at end up service provider signup (#1009)

hursey013
authored and
amoose
committed
OpenID Connect scopes specify userinfo attributes

zachmargolis
authored and
amoose
committed
Move OpenID Connect configuration into a presenter

zachmargolis
authored and
amoose
committed
Ab confirm pkey (#987)

el-mapache
authored and
amoose
committed
Remember last used OTP delivery method (#1021)

monfresh
authored and
amoose
committed
Updates int IdP URL
amoose
committed
Adds npm cache clean task to capistrano
amoose
committed
Use client_secret_jwt for OpenID Connect (#1030)

zachmargolis
authored and
amoose
committed
Revert "Use client_secret_jwt for OpenID Connect (#1030)"

zachmargolis
authored and
amoose
committed
Remove inactive Service Providers via dashboard

Peter Karman
authored and
amoose
committed
Don't try to fetch agency logo if not present

monfresh
authored and
amoose
committed
Add Previous Address to IdV profile form (#1016)

pkarman
authored and
amoose
committed
Convert StepController to IdvStepConcern (#1028)

pkarman
authored and
amoose
committed
Ab verified info reskin (#1019)

el-mapache
authored and
amoose
committed
Update LOA1 handoff illustration (#1036)

hursey013
authored and
amoose
committed
Remember OTP delivery pref when changing factors

monfresh
authored and
amoose
committed
Add warning modals to verification (#1026)

hursey013
authored and
amoose
committed
Support PKCE in OpenID Connect

zachmargolis
authored and
amoose
committed
Uses flash.now properly

el-mapache
authored and
amoose
committed
Load queues from Sidekiq config, not Redis

monfresh
authored and
amoose
committed
Move logic from view to session decorator

monfresh
authored and
amoose
committed
Bugfix recovery code used as 2fa after pw reset (#1038)

pkarman
authored and
amoose
committed
Update Ruby version in Docker to 2.3.3 (#1044)

monfresh
authored and
amoose
committed
Pass User.uuid to Proofer::Applicant (#1045)

pkarman
authored and
amoose
committed
Add missing specs for EncryptedKeyMaker (#1043)

pkarman
authored and
amoose
committed
One-line raise_error specs should stay on one line (#1046)

pkarman
authored and
amoose
committed
Remove JS from loa1_sso_spec (#1052)

monfresh
authored and
amoose
committed
Add API endpoint to render public key as JWK set

zachmargolis
authored and
amoose
committed
Update ahoy_matey from 1.5.3 to 1.5.4

monfresh
authored and
amoose
committed
Update aws-sdk-core from 2.6.49 to 2.7.3

monfresh
authored and
amoose
committed
Update brakeman from 3.4.1 to 3.5.0

monfresh
authored and
amoose
committed
Update faker from 1.7.2 to 1.7.3

monfresh
authored and
amoose
committed
Update hashie from 3.4.6 to 3.5.1

monfresh
authored and
amoose
committed
Update i18n-tasks from 0.9.9 to 0.9.11

monfresh
authored and
amoose
committed
Update newrelic_rpm from 3.17.2.327 to 3.18.0.329

monfresh
authored and
amoose
committed
Update overcommit from 0.37.0 to 0.38.0

monfresh
authored and
amoose
committed
Update poltergeist from 1.12.0 to 1.13.0

monfresh
authored and
amoose
committed
Update sinatra from 1.4.7 to 1.4.8

monfresh
authored and
amoose
committed
Update xmlenc from 0.6.5 to 0.6.6

monfresh
authored and
amoose
committed
Fix Docker config (#1047)

monfresh
authored and
amoose
committed
Prevent TOTP-enabled users from viewing TOTP setup (#1049)

monfresh
authored and
amoose
committed
Add CSRF spec to /api/service_providers (#1055)

pkarman
authored and
amoose
committed
Move conditionals from views into view models (#1041)

jessieay
authored and
amoose
committed
Add specs for ServiceProviderSessionDecorator (#1051)

jessieay
authored and
amoose
committed
Remove unused Omniauth code (#1050)

jessieay
authored and
amoose
committed
Enforce trailing comma for multi-line arrays / hashes (#1056)

jessieay
authored and
amoose
committed
Explicitly have Capistrano use git

zachmargolis
authored and
amoose
committed
Configure capistrano to deploy via a bastion

zachmargolis
authored and
amoose
committed
Update es.yml (#1060)

qmanderson1
authored and
amoose
committed
Update es.yml (#1061)

qmanderson1
authored and
amoose
committed
Update es.yml (#1062)

qmanderson1
authored and
amoose
committed
Add attempts remaining to verification modals (#1048)

hursey013
authored and
amoose
committed
Redirect to reactivate_profile_path after sign in (#1063)

pkarman
authored and
amoose
committed
Add js validation to phone field during IDV (#1069)

jessieay
authored and
amoose
committed
Set the jti value in the id_token

zachmargolis
authored and
amoose
committed
Store OpenID Connect auth request in the session

zachmargolis
authored and
amoose
committed
Update flash message style (#1072)

hursey013
authored and
amoose
committed
Backfill test for session decorators (#1068)

jessieay
authored and
amoose
committed
Update us-constitution.lexicon (#1074)

andrewhughey
authored and
amoose
committed
Add requested claims from scope into id_token

zachmargolis
authored and
amoose
committed
Disable DuplicateMethodCall in spec helper method (#1076)

monfresh
authored and
amoose
committed
Encrypt otp_secret_key (#1064)

monfresh
authored and
amoose
committed
Allows bastion user to be set via ENV (#1071)
amoose
committed
Fix typo in ivar name in spec (#1078)

zachmargolis
authored and
amoose
committed
Fix CSP to work with OpenID Connect

zachmargolis
authored and
amoose
committed
Restyles idv finance form, adds flash message (#1079)

el-mapache
authored and
amoose
committed
Use `UpdateUser` class when updating users (#1067)

jessieay
authored and
amoose
committed
Remove remote script

zachmargolis
authored and
amoose
committed
Remove unused route and related specs (#1081)

jessieay
authored and
amoose
committed
Use `Time.zone.now` consistently (#1082)

jessieay
authored and
amoose
committed
Fix recovery code link (#1087)

hursey013
authored and
amoose
committed
Add specs for use of `update_columns` (#1086)

jessieay
authored and
amoose
committed
Recovery code controller preserves stored location

zachmargolis
authored and
amoose
committed
Override ActiveModel::Dirty instead of Devise (#1089)

monfresh
authored and
amoose
committed
Centers the recovery code modal (#1083)

el-mapache
authored and
amoose
committed
Add help text to initial change factor flow page (#1066)

monfresh
authored and
amoose
committed
Pii::Attributes values now Pii::Attribute (#1090)

pkarman
authored and
amoose
committed
Set X-Frame-Options Response Headers to DENY (#1091)

jgrevich
authored and
amoose
committed
Refactor verification modals (#1085)

hursey013
authored and
amoose
committed
User can visit IDP after logging in with SP (#1075)

jessieay
authored and
amoose
committed
Preserve schemes in CSP form-action (#1093)

zachmargolis
authored and
amoose
committed
Update to latest saml_idp (#1094)

pkarman
authored and
amoose
committed
Add CORS headers

zachmargolis
authored and
amoose
committed
Optimize find_first_by_auth_conditions (#1092)

monfresh
authored and
amoose
committed
Remove references to `session[:saml_request_url]` (#1097)

jessieay
authored and
amoose
committed
Add failure modals to verification (#1096)

hursey013
authored and
amoose
committed
Fix Spanish translation for devise signed_up (#1059)

lsgitter
authored and
amoose
committed
OpenID Connect: auto-redirect after already authorized

zachmargolis
authored and
amoose
committed
Add vendor-normalized values to Pii::Attributes (#1099)

pkarman
authored and
amoose
committed
Add accordion to previous address input (#1100)

hursey013
authored and
amoose
committed
Revert to serving TwiML from Twimlets

zachmargolis
authored and
amoose
committed
Use shared partial for all modals (#1106)

hursey013
authored and
amoose
committed
Store identity.rails_session_id explicitly

zachmargolis
authored and
amoose
committed
Refactor view model / presenters for IDV steps (#1101)

jessieay
authored and
amoose
committed
Ab cancel modal (#1057)

el-mapache
authored and
amoose
committed
Remove leftover progress bar test (#1111)

hursey013
authored and
amoose
committed
Make sure that PII attributes are simple strings in JSON

zachmargolis
authored and
amoose
committed
Show mock vendor partial on all verify pages (#1110)

jessieay
authored and
amoose
committed
Only run simplecov in CI env (#1109)

jessieay
authored and
amoose
committed
Remove middle_name from OpenID Connect API

zachmargolis
authored and
amoose
committed
Fix width of verification warning modals (#1115)

hursey013
authored and
amoose
committed
Fix rubocop warning

zachmargolis
authored and
amoose
committed
Replace contact form with phone number to call (#1112)

monfresh
authored and
amoose
committed
Update OpenID Connect authorization page

zachmargolis
authored and
amoose
committed
Disable autocomplete on 2FA code inputs

zachmargolis
authored and
amoose
committed
Add confirm link to sign up flow when load testing (#1118)

jessieay
authored and
amoose
committed
Switch ServiceProvider to ActiveModel (#1107)

pkarman
authored and
amoose
committed
translate saml_idp into spanish (#1102)

jamiealbrecht
authored and
amoose
committed
translate shared into spanish (#1103)

jamiealbrecht
authored and
amoose
committed
No more SecureHeadersWhitelister#run (#1120)

zachmargolis
authored and
amoose
committed
Add scope to return SSN in OpenID Connect

zachmargolis
authored and
amoose
committed
Update all references to personal key (#1126)

hursey013
authored and
amoose
committed
Refactor ResetPasswordsController (#1124)

monfresh
authored and
amoose
committed
Remove unused code (#1125)

monfresh
authored and
amoose
committed
Fix recovery code bug on IdV confirmation (#1121)

pkarman
authored and
amoose
committed
Remove VALID_SERVICE_PROVIDERS config (#1133)

pkarman
authored and
amoose
committed
Add native flag to ServiceProviders (#1131)

pkarman
authored and
amoose
committed
Add new start page for SP initiated sign ups (#1128)

hursey013
authored and
amoose
committed
Update es.yml (#1065)

qmanderson1
authored and
amoose
committed
Update CSP to allow NewRelic JS to execute

zachmargolis
authored and
amoose
committed
Refactor OpenidConnect::AuthorizationController (#1134)

monfresh
authored and
amoose
committed
Update user flows tool (#1129)

zachmargolis
authored and
amoose
committed
Fixes IE 8 js bugs, malformed syntax (#1132)

el-mapache
authored and
amoose
committed
Allow production env to disable sending emails (#1136)

monfresh
authored and
amoose
committed
Rename OpenID Connect API urls to be under /api (#1139)

zachmargolis
authored and
amoose
committed
Default configs so that _url helpers default to https

zachmargolis
authored and
amoose
committed
Allow OTP codes to be prefilled on PT server (#1138)

monfresh
authored and
amoose
committed
Ab standard sign up cancel links (#1116)

el-mapache
authored and
amoose
committed
Send ASCII applicant attributes to vendor (#1137)

pkarman
authored and
amoose
committed
Use Devise's `stored_location_for` (#1142)

monfresh
authored and
amoose
committed
Recovery code entry screen mirrors confirmation (#1146)

el-mapache
authored and
amoose
committed
Restrict Dashboard+API interaction w shared secret (#1108)

jessieay
authored and
amoose
committed
Updates cancel idv link text for loa3 sessions (#1144)

el-mapache
authored and
amoose
committed
Make sure OpenID Connect flows go through "get started" flow (#1149)

zachmargolis
authored and
amoose
committed
Allow assets to load on static pages (#1150)

monfresh
authored and
amoose
committed
Notify user via email of phone number change (#1148)

monfresh
authored and
amoose
committed
Remove unnecessary DB calls (#1151)

monfresh
authored and
amoose
committed
Add input formatting to previous address zip code field (#1145)

hursey013
authored and
amoose
committed
Add Equifax SSH keys for mail SFTP (#1153)

pkarman
authored and
amoose
committed
Remove unused method (#1154)

zachmargolis
authored and
amoose
committed
Ignore local equifax RSA keys (#1155)

pkarman
authored and
amoose
committed
Refactor session timeout modal presenters (#1156)

monfresh
authored and
amoose
committed
Add missing specs for ServiceProviderUpdater (#1157)

monfresh
authored and
amoose
committed
Add context to cancel link when reauthing or changing phone number (#1147)

hursey013
authored and
amoose
committed
Improve WorkersController test coverage (#1158)

monfresh
authored and
amoose
committed
Remove unused code (#1159)

monfresh
authored and
amoose
committed
Ignore UncommunicativeParameterName in specs (#1162)

monfresh
authored and
amoose
committed
Add specs for ServiceProvider#live? (#1161)

monfresh
authored and
amoose
committed
Add missing PhoneStep specs (#1163)

monfresh
authored and
amoose
committed
Ab addtl pkey formatting (#1152)

el-mapache
authored and
amoose
committed
Improve flash message when page is refreshed (#1160)

hursey013
authored and
amoose
committed
Add additional OpenID Connect scopes (#1164)

zachmargolis
authored and
amoose
committed
Stop event from firing when printing (#1165)

el-mapache
authored and
amoose
committed
Remove recovery code flash message from profile (#1166)

hursey013
authored and
amoose
committed
Divorce Redis session and cookie expiration (#1130)

pkarman
authored and
amoose
committed
Remove legacy OpenID Connect URLs (#1141)

zachmargolis
authored and
amoose
committed
Refactor fetching of SP attributes (#1167)

monfresh
authored and
amoose
committed
Add more accessible headings and titles (#1172)

hursey013
authored and
amoose
committed
Rename My Account (#1173)

hursey013
authored and
amoose
committed
Task to encrypt existing OTP secret keys (#1170)

pkarman
authored and
amoose
committed
Allow dashboard to set approved status (#1174)

monfresh
authored and
amoose
committed
Remove unused code (#1175)

monfresh
authored and
amoose
committed
Add in real SORN link (#1177)

zachmargolis
authored and
amoose
committed
Enable analytics logs during load testing (#1180)

monfresh
authored and
amoose
committed
Make sure external links open in new windows (#1179)

zachmargolis
authored and
amoose
committed
SAML Authn defaults to LOA1 if not specified (#1181)

pkarman
authored and
amoose
committed