-
Type:
New Feature
-
Status: Done
-
Priority:
Medium
-
Resolution: Done
-
Affects Version/s: None
-
Fix Version/s: None
-
Labels:None
-
Company:All Clients/Multiple Clients
Replication steps :
1)Open the login page
2) Traverse to forgot password page
3) Enter email address
4) User navigates to security question page
5) Observe that Email is not encrypted.
Expected Result : User's email should be encrypted
This should be done for all urls containing query string parameters.
PFA -
cc - Priya Dhamande
-
- Time Spent:
- 4.5h
-
Discussion with Swapnil
Code changes
request filtering changes
Testing
-
- Time Spent:
- 6h
-
Code changes
Discussion with Swapnil
AES encryption logic change for Angular and API side
Testing
-
- Time Spent:
- 5h
-
Code changes to convert string to hex and back while decypting
Testing
-
- Time Spent:
- 5h
-
- Code changes for string conversion
- Testing
- discussion with Swapnil
- Find urls to encrypt
-
- Time Spent:
- 4h
-
Discussion with Swapnil
Code changes
Unit testing
-
- Time Spent:
- 2.5h
-
Discussion with Swapnil
Take latest and merge code
Changes to encrypt company ID in Header
Unit testing
-
- Time Spent:
- 5.5h
-
- Changes to the encryption key
- Pass encryption key to UI
- Maintain key as per user
-
- Time Spent:
- 6h
-
- Unit testing
- Take latest and Merge changes
- discussion with Swapnil and Rohan
- Raise PR
-
- Time Spent:
- 3h
-
Discussion
Email communication
Code review
-
- Time Spent:
- 0.5h
-
Testing on Develop environment
-
- Time Spent:
- 4h
-
Discussion and Testing on Dev environment