OHID-504 Prevent enrollee with Identity Insurance Level lower than 3 to enroll

prime-angular-frontend/src/app/app-routing.module.ts

@@ -6,7 +6,6 @@ import { AccessDeniedComponent } from '@lib/modules/root-routes/components/acces
 import { MaintenanceComponent } from '@lib/modules/root-routes/components/maintenance/maintenance.component';
 import { PageNotFoundComponent } from '@lib/modules/root-routes/components/page-not-found/page-not-found.component';
 import { HelpComponent } from '@lib/modules/root-routes/components/help/help.component';
-import { UnderagedComponent } from '@lib/modules/root-routes/components/underaged/underaged.component';
 
 import { AuthRoutes } from '@auth/auth.routes';
 import { EnrolmentRoutes } from '@enrolment/enrolment.routes';
@@ -19,6 +18,7 @@ import { SatEformsRoutes } from '@sat/sat-eforms.routes';
 import { GisEnrolmentRoutes } from '@gis/gis-enrolment.routes';
 import { HealthAuthSiteRegRoutes } from '@health-auth/health-auth-site-reg.routes';
 import { PaperEnrolmentRoutes } from '@paper-enrolment/paper-enrolment.routes';
+import { NotEligibleComponent } from '@lib/modules/root-routes/components/not-eligible/not-eligible.component';
 
 const routes: Routes = [
   {
@@ -70,11 +70,18 @@ const routes: Routes = [
   },
   {
     path: AppRoutes.UNDERAGED,
-    component: UnderagedComponent,
+    component: NotEligibleComponent,
     data: {
       title: 'Underaged'
     }
   },
+  {
+    path: AppRoutes.IDENTITY_INSURANCE_LEVEL,
+    component: NotEligibleComponent,
+    data: {
+      title: 'Identity Insurance Level Not Met'
+    }
+  },
   {
     path: AppRoutes.MAINTENANCE,
     component: MaintenanceComponent,
@@ -110,4 +117,4 @@ const routes: Routes = [
   imports: [RouterModule.forRoot(routes, { enableTracing: false })],
   exports: [RouterModule]
 })
-export class AppRoutingModule {}
+export class AppRoutingModule { }

prime-angular-frontend/src/app/app.routes.ts

@@ -1,6 +1,7 @@
 export class AppRoutes {
   public static DENIED = 'denied';
   public static UNDERAGED = 'underaged';
+  public static IDENTITY_INSURANCE_LEVEL = 'identity-insurance-level';
   public static MAINTENANCE = 'maintenance';
   public static PAGE_NOT_FOUND = 'page-not-found';
   public static HELP = 'help';

prime-angular-frontend/src/app/core/guards/identity-insurance-level.guard.spec.ts

@@ -0,0 +1,17 @@
+import { TestBed } from '@angular/core/testing';
+import { CanActivateFn } from '@angular/router';
+
+import { IdentityInsuranceLevelGuard } from './identity-insurance-level.guard';
+
+describe('IdentityInsuranceLevelGuard', () => {
+  const executeGuard: CanActivateFn = (...guardParameters) =>
+    TestBed.runInInjectionContext(() => IdentityInsuranceLevelGuard(...guardParameters));
+
+  beforeEach(() => {
+    TestBed.configureTestingModule({});
+  });
+
+  it('should be created', () => {
+    expect(executeGuard).toBeTruthy();
+  });
+});

prime-angular-frontend/src/app/core/guards/identity-insurance-level.guard.ts

@@ -0,0 +1,52 @@
+import { Injectable } from '@angular/core';
+import { Route, UrlSegment, ActivatedRouteSnapshot, RouterStateSnapshot, UrlTree, Router } from '@angular/router';
+
+import { Observable } from 'rxjs';
+import { map } from 'rxjs/operators';
+import { AppRoutes } from 'app/app.routes';
+import { AuthService } from '@auth/shared/services/auth.service';
+import { BcscUser } from '@auth/shared/models/bcsc-user.model';
+
+@Injectable({
+  providedIn: 'root'
+})
+export class IdentityInsuranceLevelGuard {
+  constructor(
+    private router: Router,
+    private authService: AuthService
+  ) { }
+
+  public canActivate(
+    next: ActivatedRouteSnapshot,
+    state: RouterStateSnapshot): Observable<boolean | UrlTree> | Promise<boolean | UrlTree> | boolean | UrlTree {
+    return this.checkIdentityInsuranceLevel();
+  }
+
+  public canActivateChild(
+    next: ActivatedRouteSnapshot,
+    state: RouterStateSnapshot): Observable<boolean | UrlTree> | Promise<boolean | UrlTree> | boolean | UrlTree {
+    return this.canActivate(next, state);
+  }
+
+  public canLoad(
+    route: Route,
+    segments: UrlSegment[]): Observable<boolean> | Promise<boolean> | boolean {
+    return this.checkIdentityInsuranceLevel();
+  }
+
+  private checkIdentityInsuranceLevel(): Observable<boolean> | Promise<boolean> | boolean {
+    return this.authService.getUser$()
+      .pipe(
+        map((user: BcscUser) => user.identityInsuranceLevel),
+        map((identityInsuranceLevel: number) => identityInsuranceLevel < 3),
+        map((unauthorized: boolean) => {
+          if (unauthorized) {
+            this.router.navigate([AppRoutes.IDENTITY_INSURANCE_LEVEL]);
+            return false;
+          }
+
+          return true;
+        })
+      );
+  }
+}

prime-angular-frontend/src/app/core/guards/underaged.guard.spec.ts

@@ -3,40 +3,40 @@ import { TestBed } from '@angular/core/testing';
 import { RouterTestingModule } from '@angular/router/testing';
 import { AuthService } from '@auth/shared/services/auth.service';
 import { AppRoutes } from 'app/app.routes';
-import { UnderagedComponent } from '@lib/modules/root-routes/components/underaged/underaged.component';
 import { KeycloakService } from 'keycloak-angular';
 import { MockAuthService } from 'test/mocks/mock-auth.service';
 
 
 import { UnderagedGuard } from './underaged.guard';
 import { provideHttpClient, withInterceptorsFromDi } from '@angular/common/http';
+import { NonEligibleComponent } from '@lib/modules/root-routes/components/not-eligible/not-eligible.component';
 
 
 describe('UnderagedGuard', () => {
-  let guard: UnderagedGuard;
+    let guard: UnderagedGuard;
 
-  beforeEach(() => {
-    TestBed.configureTestingModule({
-    imports: [RouterTestingModule.withRoutes([
-            {
-                path: AppRoutes.UNDERAGED,
-                component: UnderagedComponent
-            }
-        ])],
-    providers: [
-        {
-            provide: AuthService,
-            useClass: MockAuthService
-        },
-        KeycloakService,
-        provideHttpClient(withInterceptorsFromDi()),
-        provideHttpClientTesting()
-    ]
-});
-    guard = TestBed.inject(UnderagedGuard);
-  });
+    beforeEach(() => {
+        TestBed.configureTestingModule({
+            imports: [RouterTestingModule.withRoutes([
+                {
+                    path: AppRoutes.UNDERAGED,
+                    component: NonEligibleComponent
+                }
+            ])],
+            providers: [
+                {
+                    provide: AuthService,
+                    useClass: MockAuthService
+                },
+                KeycloakService,
+                provideHttpClient(withInterceptorsFromDi()),
+                provideHttpClientTesting()
+            ]
+        });
+        guard = TestBed.inject(UnderagedGuard);
+    });
 
-  it('should be created', () => {
-    expect(guard).toBeTruthy();
-  });
+    it('should be created', () => {
+        expect(guard).toBeTruthy();
+    });
 });

prime-angular-frontend/src/app/lib/modules/root-routes/components/underaged/underaged.component.html → prime-angular-frontend/src/app/lib/modules/root-routes/components/not-eligible/not-eligible.component.html

@@ -2,8 +2,8 @@
   <div class="row justify-content-center">
     <div class="col-sm-12 col-md-8 col-lg-6 text-center">
       <p class="mb-5">
-        You are not eligible to enrol in PRIME. If you believe you have received this page in error, please call
-        <app-prime-phone></app-prime-phone> or email <app-prime-email></app-prime-email>
+        You are not eligible to enrol in PRIME. If you believe you have received this page in error, please
+        email <app-prime-email></app-prime-email>
       </p>
     </div>
   </div>

prime-angular-frontend/src/app/lib/modules/root-routes/components/underaged/underaged.component.spec.ts → prime-angular-frontend/src/app/lib/modules/root-routes/components/not-eligible/not-eligible.component.spec.ts

@@ -1,22 +1,22 @@
 import { CUSTOM_ELEMENTS_SCHEMA } from '@angular/core';
 import { waitForAsync, ComponentFixture, TestBed } from '@angular/core/testing';
 
-import { UnderagedComponent } from './underaged.component';
+import { NotEligibleComponent } from './not-eligible.component';
 
-describe('UnderagedComponent', () => {
-  let component: UnderagedComponent;
-  let fixture: ComponentFixture<UnderagedComponent>;
+describe('NotEligibleComponent', () => {
+  let component: NotEligibleComponent;
+  let fixture: ComponentFixture<NotEligibleComponent>;
 
   beforeEach(waitForAsync(() => {
     TestBed.configureTestingModule({
-      declarations: [UnderagedComponent],
+      declarations: [NotEligibleComponent],
       schemas: [CUSTOM_ELEMENTS_SCHEMA]
     })
       .compileComponents();
   }));
 
   beforeEach(() => {
-    fixture = TestBed.createComponent(UnderagedComponent);
+    fixture = TestBed.createComponent(NotEligibleComponent);
     component = fixture.componentInstance;
     fixture.detectChanges();
   });

prime-angular-frontend/src/app/lib/modules/root-routes/components/not-eligible/not-eligible.component.ts

@@ -0,0 +1,13 @@
+import { Component, OnInit } from '@angular/core';
+
+@Component({
+  selector: 'app-not-eligible',
+  templateUrl: './not-eligible.component.html',
+  styleUrls: ['./not-eligible.component.scss'],
+  standalone: false
+})
+export class NotEligibleComponent implements OnInit {
+  constructor() { }
+
+  public ngOnInit(): void { }
+}

prime-angular-frontend/src/app/lib/modules/root-routes/root-routes.module.ts

@@ -7,7 +7,7 @@ import { PageNotFoundComponent } from './components/page-not-found/page-not-foun
 import { MaintenanceComponent } from './components/maintenance/maintenance.component';
 import { PageSimpleComponent } from './components/page-simple/page-simple.component';
 import { HelpComponent } from './components/help/help.component';
-import { UnderagedComponent } from './components/underaged/underaged.component';
+import { NotEligibleComponent } from './components/not-eligible/not-eligible.component';
 
 @NgModule({
   imports: [
@@ -19,15 +19,15 @@ import { UnderagedComponent } from './components/underaged/underaged.component';
     PageNotFoundComponent,
     MaintenanceComponent,
     HelpComponent,
-    UnderagedComponent
+    NotEligibleComponent,
   ],
   exports: [
     PageSimpleComponent,
     AccessDeniedComponent,
     PageNotFoundComponent,
     MaintenanceComponent,
     HelpComponent,
-    UnderagedComponent
+    NotEligibleComponent,
   ]
 })
 export class RootRoutesModule { }

prime-angular-frontend/src/app/modules/adjudication/pages/enrollee-access-term-enrolment/enrollee-access-term-enrolment.component.ts

@@ -97,6 +97,7 @@ export class EnrolleeAccessTermEnrolmentComponent extends AbstractComponent impl
       phone,
       phoneExtension,
       enrolleeCareSettings,
+      identityInsuranceLevel,
       ...remainder
     } = enrollee;
 
@@ -119,7 +120,8 @@ export class EnrolleeAccessTermEnrolmentComponent extends AbstractComponent impl
         email,
         smsPhone,
         phone,
-        phoneExtension
+        phoneExtension,
+        identityInsuranceLevel
       },
       // Provide the default and allow it to be overridden
       collectionNoticeAccepted: false,

prime-angular-frontend/src/app/modules/adjudication/pages/enrollee-overview/enrollee-overview.component.ts

@@ -27,10 +27,10 @@ import { EnrolleeAbsence } from '@shared/models/enrollee-absence.model';
 import { AdjudicationRoutes } from '@adjudication/adjudication.routes';
 
 @Component({
-    selector: 'app-enrollee-overview',
-    templateUrl: './enrollee-overview.component.html',
-    styleUrls: ['./enrollee-overview.component.scss'],
-    standalone: false
+  selector: 'app-enrollee-overview',
+  templateUrl: './enrollee-overview.component.html',
+  styleUrls: ['./enrollee-overview.component.scss'],
+  standalone: false
 })
 export class EnrolleeOverviewComponent extends AdjudicationContainerComponent implements OnInit {
   public enrollee: HttpEnrollee;
@@ -144,6 +144,7 @@ export class EnrolleeOverviewComponent extends AdjudicationContainerComponent im
       phone,
       phoneExtension,
       userProvidedGpid,
+      identityInsuranceLevel,
       ...remainder
     } = enrollee;
 
@@ -168,7 +169,8 @@ export class EnrolleeOverviewComponent extends AdjudicationContainerComponent im
         smsPhone,
         phone,
         phoneExtension,
-        userProvidedGpid
+        userProvidedGpid,
+        identityInsuranceLevel
       },
       // Provide the default and allow it to be overridden
       collectionNoticeAccepted: false,

prime-angular-frontend/src/app/modules/adjudication/pages/enrolment/enrolment.component.ts

@@ -12,10 +12,10 @@ import { HttpEnrollee, Enrolment } from '@shared/models/enrolment.model';
 import { AdjudicationRoutes } from '@adjudication/adjudication.routes';
 
 @Component({
-    selector: 'app-enrolment',
-    templateUrl: './enrolment.component.html',
-    styleUrls: ['./enrolment.component.scss'],
-    standalone: false
+  selector: 'app-enrolment',
+  templateUrl: './enrolment.component.html',
+  styleUrls: ['./enrolment.component.scss'],
+  standalone: false
 })
 export class EnrolmentComponent extends AbstractComponent implements OnInit {
   public busy: Subscription;
@@ -76,6 +76,7 @@ export class EnrolmentComponent extends AbstractComponent implements OnInit {
       smsPhone,
       phone,
       phoneExtension,
+      identityInsuranceLevel,
       ...remainder
     } = enrollee;
 
@@ -100,7 +101,8 @@ export class EnrolmentComponent extends AbstractComponent implements OnInit {
         email,
         smsPhone,
         phone,
-        phoneExtension
+        phoneExtension,
+        identityInsuranceLevel
       },
       // Provide the default and allow it to be overridden
       collectionNoticeAccepted: false,

prime-angular-frontend/src/app/modules/auth/shared/models/bcsc-user.model.ts

@@ -8,4 +8,5 @@ export interface BcscUser extends User {
   givenNames: string;
   dateOfBirth: string;
   verifiedAddress: Address;
+  identityInsuranceLevel: number;
 }

prime-angular-frontend/src/app/modules/auth/shared/services/auth.service.ts

@@ -106,6 +106,7 @@ export class AuthService implements IAuthService {
     const city = token?.address?.locality;
     const postal = token?.address?.postal_code;
     const givenNames = token?.given_names;
+    const identityInsuranceLevel = token?.identity_assurance_level;
 
     const userId = token?.sub;
     const username = token?.preferred_username;  // Expecting e.g. gtcochh2vajdtodkby27kspv554dn4is@bcsc
@@ -133,6 +134,7 @@ export class AuthService implements IAuthService {
       dateOfBirth,
       verifiedAddress,
       email,
+      identityInsuranceLevel,
       ...claims
     } as BcscUser;
   }