Skip to content

LG-11695 DocumentCapture submit requires selfie check#9873

Merged
soniaconnolly merged 8 commits intomainfrom
sonia-lg-11695-document-capture-submit-requires-selfie-check
Jan 12, 2024
Merged

LG-11695 DocumentCapture submit requires selfie check#9873
soniaconnolly merged 8 commits intomainfrom
sonia-lg-11695-document-capture-submit-requires-selfie-check

Conversation

@soniaconnolly
Copy link
Contributor

@soniaconnolly soniaconnolly commented Jan 5, 2024

🎫 Ticket

Link to the relevant ticket:
LG-11695

🛠 Summary of changes

This is for AC 3 of this ticket: DocumentCapture submit does not advance if a selfie check is not present and was requested
Previously, AC 1 was covered by #9846

  • Add method confirm_selfie_check_performed_if_needed to DocumentCaptureConcern, which looks at decorated_sp_session to see if the selfie check is required and looks at the stored result from TrueID to see if it was performed
  • Call the new method in DocumentCaptureController, HybridMobile::DocumentCaptureController, and LinkSentController
  • Change ServiceProviderSession#selfie_required? to use the new FeatureManagement.idv_block_biometrics_requests?
  • Add a spec for DocumentCaptureConcern to test the new method
  • Add specs to the three controller_specs to expect that the method is called and bars forward movement in the flow as expected.

📜 Testing Plan

New behavior is confirmed by controller specs. The plan below confirms that selfie capture is still working as expected with these changes.

  • In application.yml, set doc_auth_selfie_capture_enabled: true
  • In sample oidc SP, request identity verification
  • Start IdV, pause while viewing DocumentCaptureController
  • In new browser tab, go to sample oidc SP, request biometric_comparison check
  • Expect to go to DocumentCaptureController WelcomeController in new tab
  • Go back to the first tab, submit DocumentCapture with front & back of license
  • Expect to get an error because because selfie was not captured (this behavior already exists in main)
  • Go to account page, sign out
  • Go to sample oidc SP, request biometric_comparison check, expect to complete IdV
  • Go to account page, sign out
  • Go to sample oidc SP, request identity verification, expect to complete Idv

soniaconnolly and others added 2 commits January 5, 2024 14:58
…t.idv_block_biometrics_requests?

Co-authored-by: Alex Bradley <alexander.bradley@gsa.gov>
…e or LinkSent

Added document_capture_concern_spec and tested #confirm_selfie_performed_if_needed there

changelog: Upcoming Features, Identity Verification selfie check, confirm selfie check has been performed before continuing from DocumentCapture
@soniaconnolly soniaconnolly requested review from a team, amirbey, eileen-nava, jmhooper and night-jellyfish and removed request for a team January 5, 2024 23:36
soniaconnolly and others added 2 commits January 5, 2024 16:16
Co-authored-by: Alex Bradley <alexander.bradley@gsa.gov>
Co-authored-by: Eileen McFarland <eileen.mcfarland@gsa.gov>
def confirm_selfie_performed_if_needed
!decorated_sp_session.selfie_required? || stored_result.selfie_check_performed
end

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jmhooper Sonia and I tested this change and then also tested in main. We saw the expected behavior in both places (could not continue past the doc auth page without a selfie if the requirements were changed partway through). Do you have any advice on if there's something we're missing that's needed here? Or maybe these changes aren't needed?

(Putting the comment here so that the conversation can be chained / followed)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Slack discussion here. The conclusion is that controller tests are sufficient for this.

Copy link
Contributor

@jmhooper jmhooper left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@soniaconnolly soniaconnolly merged commit ca2a0d0 into main Jan 12, 2024
@soniaconnolly soniaconnolly deleted the sonia-lg-11695-document-capture-submit-requires-selfie-check branch January 12, 2024 17:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants