Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Aut-3046: add reauth max codes sent scenario into resent email code c… #1842

Merged
merged 3 commits into from
Aug 13, 2024

Conversation

di-fabs
Copy link
Contributor

@di-fabs di-fabs commented Jul 18, 2024

What

Redirect the User back to the RP in a logged out state after they exceed the maximum number of re-requests of SMS security codes when trying to reset their password after starting a re-authentication journey.

Updated controller to redirect to orchestration with path parameters that indicate the User should be logged out. The User is not logged out.

The integration tests were changed to make await async calls to allow them to be run reliably locally.

How to review

Checklist

  • Performance analyst has been notified of the change.
  • A UCD review has been performed.
  • Documentation has been updated to reflect these changes.

Related PRs

@di-fabs di-fabs marked this pull request as ready for review July 19, 2024 08:00
@di-fabs di-fabs requested review from a team as code owners July 19, 2024 08:00
VladGavrilet
VladGavrilet previously approved these changes Jul 24, 2024
Copy link
Contributor

@VladGavrilet VladGavrilet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

@andrew-moores andrew-moores force-pushed the aut-3046-reauth-sms-code branch 2 times, most recently from 10cb087 to 1d9f235 Compare August 1, 2024 12:15
@andrew-moores andrew-moores force-pushed the aut-3046-reauth-sms-code branch 8 times, most recently from ea01ed4 to 5bcdeec Compare August 9, 2024 09:33
di-fabs and others added 3 commits August 9, 2024 13:15
…t when re-authentication is supported.

Add reauth max codes sent scenario into resent email code controller.

Improving the tests.  Introduced new test values in common-test-variables.  Improved the names of some of the variables to better describe their purpose.
…lly.

Made all the integration tests fully async with all the requests being awaited.  Started to tidy up the process.env environment variables as some tests were setting them and not resetting them back to a default which was causing subsequent tests to fail.
…rrors

Removed the return statement from the error handler in send-mfa-controller as the handler should only set the redirect path and allow the error to be passed back to express when the BadRequestException is thrown.

Moved the pageNotFoundHandler above the error handlers to make it clear that this is not an error handler.  Added a comment to reinforce the fact that there are only two error handlers.

Updated tests to reflect these changes.
Copy link

sonarcloud bot commented Aug 9, 2024

@andrew-moores andrew-moores merged commit f342c28 into main Aug 13, 2024
7 checks passed
@andrew-moores andrew-moores deleted the aut-3046-reauth-sms-code branch August 13, 2024 10:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants