cds-snc / notification-planning-core

Project planning for GC Notify Core Team

0 stars 0 forks source link

Transparent switch of users' passwords #119

Closed sastels closed 1 year ago

sastels commented 1 year ago

Description

As a Notify user, I need Notify product work to have a minimal impact on my use of Notify

WHY are we building?

be able to rotate our DANGEROUS_SALT without expiring user passwords

WHAT are we building?

Code to authenticate with old SALT but rehash with new SALT when a user logs in

VALUE created by our solution

users are not bothered
increase of trust in Notify

Acceptance Criteria

[ ] we can rotate the DANGEROUS_SALT without needing to expire passwords
[ ] when users log in their passwords are automatically rehashed with the new SALT if needed
[ ] we have a dashboard or query showing how many passwords are still using the old SALT
[ ] we have a script to expire any passwords that have not been switched

QA Steps

[ ] rotate salt
[ ] check can still log in without going through the password expired flow
[ ] check the password is now hashed with new salt
[ ] run the new expire script
[ ] check that users who didn't log in after the SALT rotation are now expired
[ ] check that users that did log in after the SALT rotation are not expired

sastels commented 1 year ago

Priority TBD. Would be good to do this by end of summer perhaps.

jimleroyer commented 1 year ago

Closed as this is duplicate of #113