Skip to content

add whitelist phone to test #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
lemanh-ipification wants to merge 1 commit into
base: master
Choose a base branch
from
Open

add whitelist phone to test #5

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
97 changes: 87 additions & 10 deletions policies/PhoneExtensions.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,15 @@
<ClaimType Id="ipification_id_token_login_hint">
<DataType>string</DataType>
</ClaimType>
<ClaimType Id="stringWhiteListNumber">
<DisplayName>stringWhiteListNumber</DisplayName>
<DataType>string</DataType>
</ClaimType>

<ClaimType Id="whiteListNumber">
<DisplayName>whiteListNumber</DisplayName>
<DataType>stringCollection</DataType>
</ClaimType>
</ClaimsSchema>

<ClaimsTransformations>
Expand All @@ -57,6 +66,41 @@
<OutputClaim ClaimTypeReferenceId="ipification_msisdn" TransformationClaimType="outputClaim" />
</OutputClaims>
</ClaimsTransformation>

<ClaimsTransformation Id="CreateStringWhiteListNumber" TransformationMethod="CreateStringClaim">
<InputParameters>
<InputParameter Id="value" DataType="string" Value="{Settings:IPificationWhiteListNumber}" />
</InputParameters>
<OutputClaims>
<OutputClaim ClaimTypeReferenceId="stringWhiteListNumber" TransformationClaimType="createdClaim" />
</OutputClaims>
</ClaimsTransformation>

<ClaimsTransformation Id="ConvertWhiteListNumberToStringCollection" TransformationMethod="StringSplit">
<InputClaims>
<InputClaim ClaimTypeReferenceId="stringWhiteListNumber" TransformationClaimType="inputClaim" />
</InputClaims>
<InputParameters>
<InputParameter DataType="string" Id="delimiter" Value="," />
</InputParameters>
<OutputClaims>
<OutputClaim ClaimTypeReferenceId="whiteListNumber" TransformationClaimType="outputClaim" />
</OutputClaims>
</ClaimsTransformation>

<ClaimsTransformation Id="CheckCoverageWhiteListNumber" TransformationMethod="StringCollectionContainsClaim">
<InputClaims>
<InputClaim ClaimTypeReferenceId="whiteListNumber" TransformationClaimType="collection" />
<InputClaim ClaimTypeReferenceId="phoneNumber" TransformationClaimType="item" />
</InputClaims>
<InputParameters>
<InputParameter Id="ignoreCase" DataType="string" Value="true" />
</InputParameters>
<OutputClaims>
<OutputClaim ClaimTypeReferenceId="ipification_api_coverage_available" TransformationClaimType="outputClaim" />
</OutputClaims>
</ClaimsTransformation>

</ClaimsTransformations>
</BuildingBlocks>

Expand Down Expand Up @@ -207,6 +251,23 @@
<OutputClaim ClaimTypeReferenceId="ipification_phone_verified" PartnerClaimType="phone_number_verified"/>
</OutputClaims>
</TechnicalProfile>

<!-- IPification-CheckPhoneInWhiteList -->

<TechnicalProfile Id="IPification-CheckPhoneInWhiteList">
<DisplayName>Pass coverage if phone include in whitelist</DisplayName>
<Protocol Name="Proprietary" Handler="Web.TPEngine.Providers.ClaimsTransformationProtocolProvider, Web.TPEngine, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null" />
<OutputClaims>
<OutputClaim ClaimTypeReferenceId="ipification_api_coverage_available" />
</OutputClaims>
<OutputClaimsTransformations>
<OutputClaimsTransformation ReferenceId="CreateStringWhiteListNumber" />
<OutputClaimsTransformation ReferenceId="ConvertWhiteListNumberToStringCollection" />
<OutputClaimsTransformation ReferenceId="CheckCoverageWhiteListNumber" />
</OutputClaimsTransformations>
<UseTechnicalProfileForSessionManagement ReferenceId="SM-Noop" />
</TechnicalProfile>

</TechnicalProfiles>
</ClaimsProvider>
</ClaimsProviders>
Expand Down Expand Up @@ -274,7 +335,23 @@
<ClaimsExchange Id="LocalAccountSigninPhoneExchange" TechnicalProfileReferenceId="SelfAsserted-LocalAccountSignin-Phone-Only" />
</ClaimsExchanges>
</OrchestrationStep>

<!-- check whitelist phone pass coverage -->
<OrchestrationStep Order="5" Type="ClaimsExchange">
<Preconditions>
<Precondition Type="ClaimEquals" ExecuteActionsIf="true">
<Value>ipification_api_coverage_available</Value>
<Value>True</Value>
<Action>SkipThisOrchestrationStep</Action>
</Precondition>
</Preconditions>
<ClaimsExchanges>
<ClaimsExchange Id="IPification-CheckPhoneInWhiteList" TechnicalProfileReferenceId="IPification-CheckPhoneInWhiteList" />
</ClaimsExchanges>
</OrchestrationStep>


<OrchestrationStep Order="6" Type="ClaimsExchange">
<Preconditions>
<Precondition Type="ClaimEquals" ExecuteActionsIf="true">
<Value>ipification_api_coverage_available</Value>
Expand All @@ -293,7 +370,7 @@


<!-- For sign IN, if IPification coverage available, collect phone without sending Azure SMS -->
<OrchestrationStep Order="6" Type="ClaimsExchange">
<OrchestrationStep Order="7" Type="ClaimsExchange">
<Preconditions>
<Precondition Type="ClaimEquals" ExecuteActionsIf="true">
<Value>ipification_api_coverage_available</Value>
Expand All @@ -310,9 +387,8 @@
</ClaimsExchanges>
</OrchestrationStep>


<!-- For sign UP or IN, if IPification coverage available, perform the IPification flow -->
<OrchestrationStep Order="7" Type="ClaimsExchange">
<OrchestrationStep Order="8" Type="ClaimsExchange">
<Preconditions>
<Precondition Type="ClaimEquals" ExecuteActionsIf="true">
<Value>ipification_api_coverage_available</Value>
Expand All @@ -325,7 +401,7 @@
</ClaimsExchanges>
</OrchestrationStep>
<!-- For sign UP or IN, IF IPification ran but could not verify, send Azure SMS and verify -->
<OrchestrationStep Order="8" Type="ClaimsExchange">
<OrchestrationStep Order="9" Type="ClaimsExchange">
<Preconditions>
<Precondition Type="ClaimEquals" ExecuteActionsIf="true">
<Value>ipification_api_coverage_available</Value>
Expand All @@ -342,7 +418,8 @@
<ClaimsExchange Id="IPification-AzureMfa-SendSms" TechnicalProfileReferenceId="AzureMfa-SendSms" />
</ClaimsExchanges>
</OrchestrationStep>
<OrchestrationStep Order="9" Type="ClaimsExchange">

<OrchestrationStep Order="10" Type="ClaimsExchange">
<Preconditions>
<Precondition Type="ClaimEquals" ExecuteActionsIf="true">
<Value>ipification_api_coverage_available</Value>
Expand All @@ -361,7 +438,7 @@
</OrchestrationStep>

<!-- For sign IN, if NO IPification coverage available, collect the phone and send Azure SMS-->
<OrchestrationStep Order="10" Type="ClaimsExchange">
<OrchestrationStep Order="11" Type="ClaimsExchange">
<Preconditions>
<Precondition Type="ClaimEquals" ExecuteActionsIf="true">
<Value>ipification_api_coverage_available</Value>
Expand All @@ -377,7 +454,7 @@
<ClaimsExchange Id="PhoneVerificationExchangePart1" TechnicalProfileReferenceId="PhoneVerificationPage1" />
</ClaimsExchanges>
</OrchestrationStep>
<OrchestrationStep Order="11" Type="ClaimsExchange">
<OrchestrationStep Order="12" Type="ClaimsExchange">
<Preconditions>
<Precondition Type="ClaimEquals" ExecuteActionsIf="true">
<Value>ipification_api_coverage_available</Value>
Expand All @@ -395,7 +472,7 @@
</OrchestrationStep>

<!-- For sign UP, always collect email as backup -->
<OrchestrationStep Order="12" Type="ClaimsExchange">
<OrchestrationStep Order="13" Type="ClaimsExchange">
<Preconditions>
<Precondition Type="ClaimsExist" ExecuteActionsIf="true">
<Value>isLocalAccountSignIn</Value>
Expand All @@ -407,7 +484,7 @@
</ClaimsExchanges>
</OrchestrationStep>

<OrchestrationStep Order="13" Type="ClaimsExchange">
<OrchestrationStep Order="14" Type="ClaimsExchange">
<Preconditions>
<Precondition Type="ClaimsExist" ExecuteActionsIf="true">
<Value>hasFullProfile</Value>
Expand All @@ -418,7 +495,7 @@
<ClaimsExchange Id="AADUserReadWithObjectId" TechnicalProfileReferenceId="AAD-UserReadUsingObjectId" />
</ClaimsExchanges>
</OrchestrationStep>
<OrchestrationStep Order="14" Type="SendClaims" CpimIssuerTechnicalProfileReferenceId="JwtIssuer" />
<OrchestrationStep Order="15" Type="SendClaims" CpimIssuerTechnicalProfileReferenceId="JwtIssuer" />
</OrchestrationSteps>
<ClientDefinition ReferenceId="DefaultWeb" />
</UserJourney>
Expand Down
1 change: 1 addition & 0 deletions policies/appsettings.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@
"IPificationOidcMetadataUrl": "https://stage.ipification.com/auth/realms/ipification/.well-known/openid-configuration",
"IPificationOidcClientId": "810b4dfcf9b246abae0665fa445bdd60",
"IPificationOidcClientSecretKeyContainer": "B2C_1A_IPificationClientSecret",
"IPificationWhiteListNumber": "+381123456789,381123456789,123456789",

"IPificationTokenEndpoint": "https://stage.ipification.com/auth/realms/ipification/protocol/openid-connect/token",
"IPificationApiGetCoverageEndpoint": "https://stage.ipification.com/auth/realms/ipification/coverage"
Expand Down