Skip to content

LG-8150 disable async proofing#7384

Merged
solipet merged 13 commits intomainfrom
jskinne3-LG-8150-disable-async-proofing
Dec 9, 2022
Merged

LG-8150 disable async proofing#7384
solipet merged 13 commits intomainfrom
jskinne3-LG-8150-disable-async-proofing

Conversation

@jskinne3
Copy link
Contributor

@jskinne3 jskinne3 commented Nov 22, 2022

🎫 Ticket

https://cm-jira.usa.gov/browse/LG-8150

🛠 Summary of changes

Because DocumentCaptureStep.call is insecure when async proofing is on:

  • do not allow the Rails project to initialize with async proofing
  • remove doc_auth_enable_presigned_s3_urls config
  • adjust tests accordingly

📜 Testing Plan

  • Ensure async proofing is not enabled in any environment
  • Deploy to a lower environment

Copy link
Contributor

@solipet solipet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks good to me. I wonder if we need the check in the document_capture_step if we are raising an error in the initializer, but it doesn't bother me to have both.

@solipet solipet force-pushed the jskinne3-LG-8150-disable-async-proofing branch from eec8d1c to 17b7197 Compare November 29, 2022 18:58
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this breaks a test assumption that the specs have, the analytics spec is looking for async doc upload:

  Expected that FakeAnalytics would have received event "Frontend: IdV: document capture async upload encryption"

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What is the motivation for this change? I assume that subsequent changes to spec/features/idv/analytics_spec.rb are attempts to compensate for the breaking assumption that Zach mentions.

@solipet solipet force-pushed the jskinne3-LG-8150-disable-async-proofing branch 3 times, most recently from c073bb4 to 9221367 Compare November 30, 2022 16:31
@solipet solipet force-pushed the jskinne3-LG-8150-disable-async-proofing branch from caf35b1 to b3b3031 Compare December 7, 2022 23:03
@solipet solipet requested a review from a team December 9, 2022 15:02
@solipet
Copy link
Contributor

solipet commented Dec 9, 2022

Opened LG-8350 to look at differences in attribute logging between prod and specs

@solipet solipet merged commit 72cb88a into main Dec 9, 2022
@solipet solipet deleted the jskinne3-LG-8150-disable-async-proofing branch December 9, 2022 15:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants