LG-11520: Add job to expire old GPO pending profiles

[matthinz]

🎫 Ticket

LG-11520

🛠 Summary of changes

Adds a new job, GpoExpirationJob, that looks for GPO profiles that are no longer usable and marks them as "expired". The job is meant to eventually run daily, but is not currently set to run automatically (that will be in a subsequent PR).

An expired GPO profile:

• Does not have any valid GPO codes associated with it
• Was created > 30 days ago (so the user can't request a new code)

To mark a Profile expired, we clear the gpo_pending_verification_at column and set the gpo_verification_expired_at to the current date/time.

(Note: This work was broken off from #9475 and does not include any email notifications.)

Update as of 11/8 The deployment plan here is to migrate the bulk of existing profiles via a rollplan (working on the doc for that now) using the rake task this PR includes

📜 Testing Plan

• Begin IdV, taking the GPO route and requesting a letter.
• Once you have your GPO code, get in your time machine and move forward 15 days
• Use the Rails console to run the job: GpoExpirationJob.new.perform
• Verify your profile is not automatically expired
• Request another GPO code
• Once you have your GPO code, get in your time machine and move forward another 16 days (You should now be 31 days after your first request for a letter)
• Use the Rails console to run the job: GpoExpirationJob.new.perform
• Verify that your profile is not expired (since you still have an active code)
• Use your time machine to move forward another 15 days
• Use the Rails console to run the job: GpoExpirationJob.new.perform
• Verify your profile is now expired (gpo_verification_expired_at is set)
• Use the Rails console to run the job one last time: GpoExpirationJob.new.perform
• Verify no additional changes are made and no more profiles are expired by the second run

To test this without a time machine, you will first want to allow yourself to repeatedly request new GPO letters by updating your application.yml:

  # Allow re-requesting GPO letters same-day
  minimum_wait_before_another_usps_letter_in_hours: 0

Then, in the Rails console:

# Clear out any codes & GPO profiles you have sitting in your local db to reset to a baseline state
GpoConfirmationCode.delete_all
Profile.update_all(gpo_verification_pending_at: nil)

# STOP. Go to the IDP and request a letter

# Grab the code you requested and its profile
first_code = GpoConfirmationCode.order(code_sent_at: :desc).first
profile = first_code.profile

# Simulate 15 days passing
profile.update(created_at: 15.days.ago)
first_code.update(code_sent_at: 15.days.ago)

# Run the job (this should not expire any profiles)
GpoExpirationJob.new.perform

# STOP. Go request another letter, then come back here and grab your new code
second_code = GpoConfirmationCode.order(code_sent_at: :desc).first

# Simulate 16 more days passing
# (first_code is now expired, but second_code is still active)
profile.update(created_at: 31.days.ago)
first_code.update(code_sent_at: 31.days.ago)
second_code.update(code_sent_at: 16.days.ago)

# Run the job (should not expire anything, since second_code is still active)
GpoExpirationJob.new.perform

# Simulate 14 more days passing (second_code is now expired)
profile.update(created_at: 45.days.ago)
first_code.update(code_sent_at: 45.days.ago)
second_code.update(code_sent_at: 30.days.ago)

# Run the job (should expire the profile and log an idv_gpo_expired event)
GpoExpirationJob.new.perform

# Verify profile was expired
profile.reload
profile.gpo_verification_pending_at # Should be nil
profile.gpo_verification_expired_at # Should be set to current time

# Run the job AGAIN and verify no additional profiles are expired
GpoExpirationJob.new.perform

[solipet]

A couple minor comments, otherwise looks good to me.

Ran through the manual test procedure and it worked as expected.

[theabrad]

You will want to add this job to config/initializers/job_configurations.rb so that it can run daily.

[matthinz]

You will want to add this job to config/initializers/job_configurations.rb so that it can run daily.

Current plan is to do that in a separate PR so that we can expire the bulk of the existing profiles via rollplan first.