Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 6 Next »

Architecture AS-IS

OTP Sign In

Proposal

Solution 1 - Add isBlocked field in User DynamoDB item

Workflow:

Support agent blocks the user

Blocked user attempts login

User is blocked while logged in WL

Task breakdown

Changes in intl-notifications-service

Changes in intl-users-service

  1. Create block user endpoint

 intl-user-service

  • Endpoint: POST /api/v1/users/block-user/{cognitoId}

  • Add isBlocked field to user details base interface

  • Use UpdateService to set is blocked to true

  1. Create unblock user endpoint

 intl-user-service

  • Endpoint: POST /api/v1/users/unblock-user/{cognitoId}

  • Use UpdateService to set is blocked to false

  1. Prevent blocked users from signing in

 intl-user-service

  • Create UserBlockedError apollo error (ex:)

  • Add isBlocked validation in the listed resolvers:

    • createOTP

    • createLoginOTP

    • signInJWT

    • socialLogin

  • User not found validation for reference

Changes in intl-whitelable-graphql

  1. Add isBlocked to userDetails type

Changes in intl-whitelable-app

Solution 2 - Disable user in cognito

  • No labels