Legal-api / Search UI - auth check changes

[kialj876]

Background:

• legal api business endpoint and filings endpoint should not be public
• business search purchase documents screen uses some extra business data and filing ledger data
• work is to switch to public version of endpoint with slim parameter and then see what we need additionally, then make changes
• value: this makes it trickier for users to obtain information on businesses without paying - enhancing security significantly

Requirements needed:

• what are we allowed to show before the user pays / can we remove some of the data showing in business search purchase documents screen? Maybe we are allowed to show everything currently there and just need to update the legal-api call? NOTE: this is for data we get from the business call and the filings ledger call (below)

Dev work:

• update legal-api with auth over business endpoint and filing ledger endpoint (there will need to be a way for search to still get the data it needs)
• update business search as needed for changes

QA/UXA:

• verify information showing prior to payment is all public, as per comment below

When Picked up Brandon or Kial could assist in engaging Entities.

[mstanton1]

@kialj876 I've compared Business Search (PROD, modernized system) with the legal COLIN search. In my review all data in the modernized search that is shown before payment is also shown before payment in the legacy system so no changes are required. In both systems if a user wishes to obtain a document or view an output they must pay first.

Data available in modernized system prior to payment:

• company name
• company type
• incorporation/registration date (this wasn't explicitly listed in the legacy system but could be inferred by the filing history since the first document is creation of the company/business)
• incorporation/registration number
• business number
• filing history (filing type and date only, fee required for full filing)

Screenshots from review: Search Screenshots PROD.docx