Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Refactor the remaining pieces of the sign-in process #1459

Closed
5 tasks done
ccostino opened this issue Apr 19, 2024 · 2 comments
Closed
5 tasks done

Refactor the remaining pieces of the sign-in process #1459

ccostino opened this issue Apr 19, 2024 · 2 comments
Assignees

Comments

@ccostino
Copy link
Contributor

ccostino commented Apr 19, 2024

There are now pieces of code that are no longer used in our sign-in flow that we should clean up and remove. #1446 attempted to do this but as a quick fix to another production issue we were having and we identified several pieces to it that we need to factor in, among other things:

  • We need to preserve the mechanisms for the E2E test user to get in, which means shifting those checks from the old sign-in form to the new Login.gov sign-in flow.
  • There's logic in the old sign-in form that also accounted for users not being able to accept invites on behalf of others; we need to shift this into the Login.gov sign-in flow as well.
  • The E2E tests start to fail because of the changes to the sign-in page and such; we need to get these tests updated to match the current page structure/content, and we also need to update the authenticated_page context fixture so that it's wired up in the Login.gov sign-in flow.

There may be other pieces in addition to these items already identified, so we need to go through this methodically and make sure we account for everything.

Implementation Sketch and Acceptance Criteria

  • Review the old sign-in code and flow and make sure we haven't missed anything in the notes captured above; if we have, add them to this issue
  • Incorporate the changes listed above into the Login.gov sign-in flow so we preserve the rest of the functionality we had previously.
  • Update the integration and unit tests as needed
  • Update the end-to-end tests as needed to work with the new changes
  • Test locally and again on staging once the work is merged

Security Considerations

  • We want to make sure we preserve all of the verification checks that existed with the old sign-in form (e.g., with the invites and such).
  • We also want to preserve the checks and support for E2E tests so that we can continue to run those.
@ccostino ccostino changed the title Remove code no longer used in the sign-in process Refactor the remaining pieces of the sign-in process Apr 25, 2024
@VRagulina VRagulina assigned VRagulina and terrazoon and unassigned VRagulina Apr 29, 2024
@ccostino
Copy link
Contributor Author

ccostino commented May 9, 2024

We're in the final steps - the changes are now merged and deployed to staging for final review!

@ccostino
Copy link
Contributor Author

Change is merged and deployed to production now! Final testing with customers is covered by #1500.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Done
Development

No branches or pull requests

3 participants