BB-3317: Deprecate using hashed MBI to lookup FHIR_ID in BB2 authorization flow, use MBI instead - Githubissues

CMSgov / bluebutton-web-server

Blue Button API

https://sandbox.bluebutton.cms.gov

Other

40 stars 24 forks source link

BB-3317: Deprecate using hashed MBI to lookup FHIR_ID in BB2 authorization flow, use MBI instead #1239

Closed stiwarisemanticbits closed 2 months ago

stiwarisemanticbits commented 2 months ago

JIRA Ticket: BB2-3317

What Does This PR Do?

Deprecate using hashed MBI to lookup FHIR_ID in BB2 authorization flow, use MBI instead

What Should Reviewers Watch For?

If you're reviewing this PR, please check for these things in particular:

Validation

What Security Implications Does This PR Have?

Please indicate if this PR does any of the following:

Adds any new software dependencies
Modifies any security controls
Adds new transmission or storage of data
Any other changes that could possibly affect security?
[ ] Yes, one or more of the above security implications apply. This PR must not be merged without the ISSO or team security engineer's approval.

Any Migrations?

[ ] Yes, there are migrations
- [ ] The migrations should be run PRIOR to the code being deployed
- [ ] The migrations should be run AFTER the code is deployed
- [ ] There is a more complicated migration plan (downtime, etc)
[x] No migrations

JFU-NAVA-PBC commented 2 months ago

Looking good: now able to do a round trip auth flow on a local bb2