User - Audit

[mike-webster]

Description

Go through the user functionality and take down what works and what doesn't.

Technical Details

• Check for bugs
• Compile list of features to implement
  • Write up cards

[mike-webster]

No test coverage - at this point, we don't have much to unit test.

[mike-webster]

Settings page in the nav goes to new_pet_path because the settings page hasn't actually been implemented yet.

Settings page requirements:

Updates:

• first name
• last name
• email
• password
• timezone

Delete account functionality - erase all user data.

[mike-webster]

Forgot password flow

[mike-webster]

Implement sharing with social media? Super low priority - let's try to make something people want to share before building the ability to do it.

[mike-webster]

Implement user tracking: Add tracking table to the database to track where users came to from.

[mike-webster]

Bad sign-in blocker - only allow a user x attempts to sign in before their account gets locked.

In order to get unlocked, they just need to interact with an email.

Requirements:

• User from the same IP address submits invalid credentials for the same user X times within 15 minutes, the account gets blocked from signing in for 1 hour.
• When the account gets blocked, an email is sent to the user with a link in case they need to access their account sooner.
• Set up a route to use with the email
  • When the route is requested, we unblock the user's account and send them to the login page.