Merged
Conversation
changelog: Internal, Documentation, Ensure all JavaScript workspace packages have documentation
changelog: Internal,Biometrics,406 if asked for biometrics in production Added a before action in `authorization_controller` to do the 406, and added a method to `FeatureManagement` that contains the actual logic. Co-authored by: Matt Hinz <matt.hinz@gsa.gov> Co-authored by: Sonia Connolly <sonia.connolly@gsa.gov>
…ession exists (#9842) * Avoid logging rate limit event for safelist exception * Support custom redirect URL by Devise failure type * LG-11777: Handle logout request as already logged out if concurrent session exists changelog: Bug Fixes, Logout, Consistently handle logout request for logged out user if session terminated by sign-in with another browser * Add controller specs for assigned devise_session_limited_failure_redirect_url * Drop optional curly braces for hash merge Co-authored-by: Zach Margolis <zachmargolis@users.noreply.github.com> * Use UriService#add_params for URL builder Co-authored-by: Zach Margolis <zachmargolis@users.noreply.github.com> --------- Co-authored-by: Zach Margolis <zachmargolis@users.noreply.github.com>
* Add Puma configuration changelog: Internal, Configuration, Add Puma configuration * update puma
* Rename :verify_confirmed before action to confirm_identity_verified * Add User#identity_verified_with_selfie? and Profile.idv_level value :unsupervised_with_selfie * Add check for selfie to completions_controller This will only take effect if doc_auth_selfie_capture_enabled feature flag is on changelog: Upcoming Features, Identity Verification with Liveness Check (behind feature flag), Confirm that liveness check was performed before redirecting to Service Provider * Add check for selfie needed in openid_connect/authorization_controller --------- Co-authored-by: Alex Bradley <alexander.bradley@gsa.gov> Co-authored-by: Doug Price <douglas.price@gsa.gov>
changelog: User-facing Improvement, Doc Auth, Upgrade Acuant SDK to 11.9.2
* changelog: Internal, Analytics, add new device property to Multi-Factor Authentication event * update test coverage to account for new device analytics property * remove unneeded changes * change device tracking sign in to account for 2FA submit * change disavawal second sign in to account for 2FA submit * add test for device cookie service * add new_device event to mfa properties hash * fix lint * remove DeviceCookie service. put as function in User controller. update dependencies * add #new_device to user spec * leverage user session to store new device, fix some style inconsistencies * update tests to include session value for new device * fix lint * revert changes to spec features * fix spec label * rename keyword for new_device function * update spec to account for nil device and also false * fix lint * add new device false tests * remove unneeded user_session override * debug otp spec
* Updated the form_component gem. [skip changelog]
…ock (#9862) * When :doc_auth_selfie_capture_enabled is off, we now render the not_acceptable page. Spec now expects that in oidc_connect/authorization_controller_spec. [skip changelog] --------- Co-authored-by: John Maxwell <john.maxwell@gsa.gov>
* write unsupervised_with_selfie to idv_level changelog: Internal, IdV, save selfie status to user profile Co-authored-by: Sonia Connolly <sonia.connolly@gsa.gov> * add selfie_check_performed to load_result in tests * used FeatureManagement.idv_block_biometrics_requests? --------- Co-authored-by: Sonia Connolly <sonia.connolly@gsa.gov>
changelog: Internal, Performance, Reduce size of application stylesheet
changelog: Internal, Build Tools, Support optional out-dir for build-sass package
* convert status-message from js to ts * Co-authored-by: Brittany Greaner <brittany.greaner@gsa.gov> [skip changelog] * make status required Co-authored-by: Brittany Greaner <brittany.greaner@gsa.gov> * change status message status to an enum * happy linting * use StatusMessageProps for StatusMessage types --------- Co-authored-by: Brittany Greaner <brittany.greaner@gsa.gov>
changelog: Internal, Scripts, Fix bin/oncall/otp-deliveries script
changelog: Internal, Code Quality, Add stricter linting for DOM testing
* Removing extraneous comma * Linting * changelog: Internal, In-Person Proofing, remove double address verfication from jobs * Add default value to dav input arg * Since default val of nil is set for dav in resolution proofing job don't add dav in agent job call.
changelog: Internal, Dependencies, Configure Dependabot to create automatic pull requests for security advisories
* Revert "Try configuring Dependabot for security updates" * Add changelog changelog: Internal, Dependencies, Configure Dependabot to create automatic pull requests for security advisories
changelog: Internal, Dependencies, Update dependencies to resolve security advisories
jmdembe
approved these changes
Jan 9, 2024
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
11 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
User-Facing Improvements
Bug Fixes
Internal
Upcoming Features