circuitnederland / registrationform

0 stars 0 forks source link

Add security question to registration form #16

Open sandrab opened 6 years ago

sandrab commented 6 years ago

(From GDrive document 7.5 point 10). Add the security question to the registration form and pass the given answer in the createUser process to Cyclos.

The api/users/data-for-new returns the possible security questions for the given group. So use these to add a dropdown to the registrationform where the user can choose which security question he wants to answer and a textfield where the user can enter his answer. In the POST to /api/users add the internal name of the chosen security question as "securityQuestion" and the given answer as "securityAnswer". The 'Status beveiligingsvraag' of the user in Cyclos will change from 'In Behandeling' to 'Actief' if the user has filled in the security question and answer. Test if the login screen indeed uses this security question and answer if you click the forgot-password link.

The security question and answer in the registration form are not required fields. If the user does not fill in the security question and answer in the registration form, he sees a message on the Cyclos Home screen where he can do so.

Note: I am not sure if the user can change their security question and answer - it is not visible on the user profile screen, but this may be configurable.