Project

General

Profile

Actions

Task #1185

closed

Create endpoint to read metadata about identity password

Added by Radek Tomiška over 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
High
Assignee:
Ondřej Kopr
Category:
Identities
Target version:
Start date:
07/19/2018
Due date:
% Done:

100%

Estimated time:
16.00 h
Owner:

Description

Create endpoint to read metadata about identity password:
- use new endpoint for show information about identity password is blocked
- remove blockLoginDate from IdmIdentityDto


Files

pass_agenda.png (60.6 KB) pass_agenda.png Ondřej Kopr, 04/05/2019 08:02 AM

Related issues

Related to IdStory Identity Manager - Feature #1384: Support "Password never expires"ClosedOndřej Kopr11/19/2018

Actions
Actions #1

Updated by Vít Švanda over 6 years ago

  • Target version deleted (Malachite (9.0.0))
Actions #2

Updated by Ondřej Kopr about 6 years ago

  • Related to Feature #1384: Support "Password never expires" added
Actions #3

Updated by Vít Švanda over 5 years ago

  • Target version set to Quartz (9.6.0)
Actions #4

Updated by Vít Švanda over 5 years ago

  • Estimated time set to 16.00 h
Actions #5

Updated by Ondřej Kopr over 5 years ago

Updated request:

  • remove fill metadata about password in toDto method in identityService
  • add the filling metadata from password to rest endpoint in identity controller (get method),
  • the behavior with infomation message in identitz detail about blocked password must works as before.
Actions #6

Updated by Ondřej Kopr over 5 years ago

  • Status changed from New to In Progress
Actions #7

Updated by Ondřej Kopr over 5 years ago

Implementation status:
  • new endpoint for password was created,
  • new permission for password was created, now exists only READ and UPDATE (delete and create isn't possible),
  • new manager and service in frontend was created,
  • new agenda on user detail was created
  • behavior with password never expired was created. The boolean flag passwordNeverExpires is checked in IdmPasswordService#save method and when is true the validTill will be cleaned.

While I implemented this functionality was founded issue with audit for logins. Because the audit of logins doesn't except that metadata about password edited someone else than owner and now is this possible. So I must implement new audit criterion for self relation with password audit. So IdmRelationAuditExpression and IdmPasswordSelfRelationWithOwnerExpression was created.

Missing:
  • update documentation,
  • create tests,
  • check whole functionality by frontend.
Actions #8

Updated by Ondřej Kopr over 5 years ago

  • % Done changed from 50 to 90

I finished implementation and testing for this feature.

Documentation:
https://wiki.czechidm.com/devel/documentation/identities#password
https://wiki.czechidm.com/devel/documentation/identities/adm/password

Commit: https://github.com/bcvsolutions/CzechIdMng/commit/a06e30ffa2c41a49e16fc490f09ba98d6af41606 (branch: develop)

Commit also contains whole ticket #1384 and transformation password service to toPredicate.

Actions #9

Updated by Ondřej Kopr over 5 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Ondřej Kopr to Radek Tomiška

Please Radek could you check this feature?

The issue can be with showLoading with access password change directly by button form dashboard.

Thank you for feedback.

Actions #10

Updated by Radek Tomiška over 5 years ago

  • Status changed from Needs feedback to Resolved
  • Assignee changed from Radek Tomiška to Ondřej Kopr
  • % Done changed from 90 to 100

I did test and review, it's awesome, thx!

Note: show loading added in #1384 - issue was on the overriden content from acc module only.

Actions #11

Updated by Ondřej Kopr over 5 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF