Skip to content

Deploy RC 269 to Production#8146

Merged
mitchellhenke merged 25 commits intostages/prodfrom
stages/rc-2023-04-06
Apr 6, 2023
Merged

Deploy RC 269 to Production#8146
mitchellhenke merged 25 commits intostages/prodfrom
stages/rc-2023-04-06

Conversation

@mitchellhenke
Copy link
Contributor

@mitchellhenke mitchellhenke commented Apr 6, 2023

User-Facing Improvements

  • Identity verification: Provide a more helpful and detailed error message when identity verification is unavailable. (#8106)
  • Identity verification: Improve error messaging around phone verification failure and highlight alternate paths. (#8101)
  • In-person proofing: Make IPP buttons and links into what they look like (#8104)

Bug Fixes

  • Authentication: Do not prompt for re-authentication on backup code refresh prompt (#8134)

Internal

  • Attempts API: Batch Job improvements (#8133)
  • CI: Update knapsack report for spec timing (#8144)
  • Caching: Use ActiveSupport cache version 7.0 (#8126)
  • Code Quality: Remove unused code (#8140)
  • Error: Update list of ignored errors (#8139)
  • Flow State Machine replacement: Combine similar before actions (#8123)
  • IdV Fraud: Place fraud_review_eligible in user (#8141)
  • In-Person Proofing: Record in-person enrollment status check completion time (#8136)
  • Reporting: Add total count acros all SP to user reports (#8135)
  • Reporting: Remove unused data logging (#8143)
  • SAML: Re-add saml2021 references (identity-devops#5739) (#8129)
  • SAML: Remove saml2021 references (identity-devops#5739) (#8122)
  • Session Management: Use Rack::Session methods when calling redis-session-store (#8132)
  • refactor: In-person VerifyInfoController outside Flow State Machine (#8113)
  • ThreatMetrix: Adding review and reject timestamps (#8142)

Upcoming Features

  • In-person proofing: Collect issuing state on state id page (#8121)

matthinz and others added 25 commits April 3, 2023 11:04
* Add current_step option to idv/shared/error

Allow rendering an error screen with a step indicator

* Update idv phone warning screen

- EN only for now
- Not wired in to controller, just view spec passing

* Wire up PhoneErrorsController::warning

Mit tësts!

* Update feature specs

* Split explanation + how long it takes

* Add incomplete ES/FR translations

Coupla keys missing, will follow up

* Store international_code in session when trying phone #

Want this for rendering purposes on the warning page.

* Update attempts remaining copy

Untranslated for now

* Add missing translations

* First draft of phone rate limited screen

English only, tests not updated yet

* Remove unneeded shared example

There was only 1 use, so it's not really shared anymore?

* Update "max attempts" shared examples

* Remove unused i18n key

* Add es/fr translations for rate limited screen

* Update spec for phone_errors/failure.html.erb

- More tests around GPO content
- Fix ref to i18n key

* Add more feature specs for phone rate limited screen

* Fix Spanish translation left in French YAML

* changelog: User-Facing Improvements, Identity verification, Improve error messaging around phone verification failure and highlight alternate paths.

* Use ButtonComponent rather than button_or_link_to

* button_or_link_to -> ButtonComponent

* Simplify margin css classes
changelog: Internal, Caching, Use ActiveSupport cache version 7.0
… is created (#8113)

* add usps doc check to proofing component earlier

changelog: Internal, refactor, in-person VerifyInfoController outside Flow State Machine

* include Steps::ThreadMetricStepHelper (see #7924)

* replace IdvSession with IdvStepConcern (see #7840)

and remove redundant confirm_two_factor_authenticate (see #8082)

* give in-person verify info controller its own view

and fix links to update pages

* move process_async_state into the concern
* saml_2022 -> saml_2023; remove saml_2021 stuff

* changelog: Internal, SAML, remove saml2021 references (identity-devops#5739)

* update example cert files in config/artifacts.example/local/

- remove the old saml2021 .crt and .key.enc files as they're no longer used/valid
- change saml2023 .crt and .key.enc to actual files (vs. symlinks),
  newly created with openssl req -newkey (etc.)

changelog: Internal, SAML, remove saml2021 references (identity-devops#5739)

* Update specs to 2023

* Replace auth2022

Command:

git grep -l auth2022 -- spec | xargs perl -p -i -e 's/auth2022/auth2023/g' --

* Replace logout2022

git grep -l logout2022 -- spec | xargs perl -p -i -e 's/logout2022/logout2023/g' --

* Update authpost2022

git grep -l authpost2022 -- spec | xargs perl -p -i -e 's/authpost2022/authpost2023/g'

* Update one last spec

---------

Co-authored-by: Zach Margolis <zachary.margolis@gsa.gov>
* Fix link to help center

Link "Learn more about what phone number to use" to https://login.gov/help/verify-your-identity/phone-number/

[skip changelog]

* Fix size of "Verify by mail " button
…tion (#8123)

Combine the versions of confirm_document_capture_complete in IdvStepConcern (used by SsnController) and in AddressController. This will make it easier to continue updating that method as we continue adding functionality to DocumentCaptureController.

Added method pii_from_doc to IdvStepConcern
pii is no longer an instance variable and no longer memoized in SsnController and AddressController
The long term plan is to move all the step-related before actions and methods to IdvStepConcern
Move flow_session and flow_path to IdvStepConcern

changelog: Internal, Flow State Machine replacement, combine similar before actions

---------

Co-authored-by: Douglas Price <douglas.price@gsa.gov>
changelog: Internal, Attempts API, Batch Job improvements
* re-add saml2021* files to AppArtifacts.setup, for now

* changelog: Internal, SAML, re-add saml2021 references (identity-devops#5739)

* re-add saml2021 files to config/artifacts.example/local/

changelog: Internal, SAML, remove saml2021 references (identity-devops#5739)
)

* Do not prompt for re-authentication on backup code refresh prompt

changelog: Bug Fixes, Authentication, Do not prompt for re-authentication on backup code refresh prompt

* fix spec
* Use Rack::Session methods when calling redis-session-store

changelog: Internal, Session Management, Use Rack::Session methods when calling redis-session-store

* Update app/services/out_of_band_session_accessor.rb

Co-authored-by: Zach Margolis <zachmargolis@users.noreply.github.com>

* Update app/services/out_of_band_session_accessor.rb

---------

Co-authored-by: Zach Margolis <zachmargolis@users.noreply.github.com>
* Change a few links that look like buttons into buttons add link role to a button that is effectively a link

* changelog: User-Facing Improvements, In-person proofing, Make IPP buttons and links into what they look like

* Remove left over comment

* Fix JS errors, replace click_link with click_button
changelog: Internal, Error, Update list of ignored errors
* add fraud_review_eligible? to user model

review_eligible? was moved from the proofing component to the user
model. Instead of checking the proofing_component's verified_at field we
will check the user's profile to determine if they are within the 30 day
time frame

* change user factory to use new verified_at

* remove old review eligible from proofing component

* add changelog

changelog: Internal, IdV Fraud, Place fraud_review_eligible in user
model

* add guard for fraud_review_eligible
Prepare for turning on DocumentCaptureController feature flag.

[skip changelog]
* Add idv_available config && feature

Tie feature to vendor availability as well as config.

* Add "IDV Unavailable" view

* Add Idv::UnavailableController

* Redirect to IDV unavailable page from reg

When incoming request requires identity verification, but identity verification is not available, error out early rather than forcing user to create an account first.

* Remove unneeded redirect from DocAuthController

If IDV is unavailable, this controller will not get called (see routes.rb)

* Refactor OutageStatus

- We don't actually pass any args in the constructor anymore, so remove them
- Remove code paths that rely on values set by those constructor args
- Remove unused translations

* Update outage feature spec

When unavailable, routes inside IDV will not have their path change, but _will_ display an error message.

* changelog: User-Facing Improvements, Identity verification, Provide a more helpful and detailed error message when identity verification is unavailable.

* Update spec/controllers/idv/unavailable_controller_spec.rb

Co-authored-by: Sonia Connolly <sonia.connolly@gsa.gov>

* Update spec/controllers/idv/unavailable_controller_spec.rb

Co-authored-by: Sonia Connolly <sonia.connolly@gsa.gov>

* Update spec/controllers/idv/unavailable_controller_spec.rb

Co-authored-by: Sonia Connolly <sonia.connolly@gsa.gov>

* Adjust order of args to AnalyticsEvents::vendor_outage

* Don't call OutageStatus.new twice

* Remove tests for partial_outage support

We don't do this anymore.

* Move status page link into new paragraph

work around weird braking associated with external link's `display: inline-block` in USWDS 2

---------

Co-authored-by: Sonia Connolly <sonia.connolly@gsa.gov>
)

* LG-9272: Record in-person enrollment status check completion time

changelog: Internal, In-Person Proofing, Record in-person enrollment status check completion time

* LG-9272: Update enrollment status check completed field

* LG-9272: Test status completed timestamp field setting
* Stop writing data to reports.log (LG-9415)

changelog: Internal, Reporting, Remove unused data logging
changelog: Internal, Code Quality, Remove unused code
- Uses artifact from 69071c2

changelog: Internal, CI, Update knapsack report for spec timing
* Adding initial db migrations for fraud timestamp fields
* Updating Profile model methods to use fraud timestamp columns
* Add Profile#fraud_rejection? and #fraud_review_at?
* Add references to fraud_rejection_at in specs
* Use new timestamp columns in profile_spec
  
Co-authored-by: Alex Bradley <alexander.bradley@gsa.gov>
Co-authored-by: John Maxwell <john.maxwell@gsa.gov>
Co-authored-by: John Skinner <john.skinner@gsa.gov>
Co-authored-by: Amir Reavis-Bey <amir.reavis-bey@gsa.gov>
Co-authored-by: Sonia Connolly <sonia.connolly@gsa.gov>
* Fixed phone number throttling test

This test failed because it sometimes said '9 minutes' instead of
'10 minutes'

We removed `freeze_time`, and changed the test to just check for one of
the two possibilities. We don't understand why `freeze_time` wasn't
working, but it was simple enough to fix the problem without it.
* add issuing state dropdown and feature test

* display issuing state on verify info page

* changelog: Upcoming Features, In-person proofing, Collect issuing state on state id page

* correct spec expectation

* fix issuing state dropdown to link to state_id_jurisdiction

* display correct issuing state on verify page

* fix pii attributes comments

* add state_id_state to encryptor

* respond to feedback
* Update sp-user-counts-report to count users as either IAL1 or IAL2
* Update sp-active-user-counts to count users as either IAL1 and IAL2, not both

* Switch to nil issuer instead of LOGIN_ALL
- Minimize chances of a colliding with actual issuer in the future

changelog: Internal, Reporting, Add total count acros all SP to user reports
Copy link
Contributor

@zachmargolis zachmargolis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mitchellhenke mitchellhenke merged commit 99050f1 into stages/prod Apr 6, 2023
@mitchellhenke mitchellhenke deleted the stages/rc-2023-04-06 branch April 6, 2023 19:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.