vocdoni / saas-backend

63%

main: 63%

LAST BUILD ON BRANCH bug/fix-resend-verification-code

branch: bug/fix-resend-verification-code

CHANGE BRANCH

x

Reset

• bug/fix-resend-verification-code
• 219-fix-duplicate-members-warning-for-census-creation
• adding-census-participant-after-census-created
• api-test-refactor
• b/docker-minor-issues
• b/public-addresses
• b/swagger
• bi
• bug/add-auth-2fa-json-unmarshalling
• c/docker-compose-watch
• c/promo-codes
• cascade-member-update-to-censuses
• debug-mongodb-death-race
• drop-dead-code
• enforce-unique-login-hashes
• f/101_org_participants_groups
• f/106_handle_org_member
• f/110_organization_meta
• f/117_expose_memberid
• f/126_resend_member_inivation
• f/137-improve-members-crud
• f/144-census-creation
• f/146-email-clear-text
• f/148-bis-rename-cenus-membership
• f/148-memberID-not-unique
• f/149-update-members-columns
• f/150-members-filtering
• f/227-2fa-warnings
• f/244_national-id-validation
• f/276-remove-deleted-members-from-groups
• f/279-montly-subscriptions
• f/370-endpoint-voter-weight
• f/372-improve-csp-verification-msg
• f/add-census-size
• f/better-telephone-parsing
• f/birthdate
• f/bulk-members-ops
• f/bulk_org_members_validation_errors
• f/cascade-delete
• f/ci-fix-golangci-lint
• f/complete-census-creation-flow
• f/complete-census-creation-flow-followup
• f/csp-refactor
• f/csp-refactor-fixes
• f/csp-remove-membernumber
• f/custom-plan-field
• f/do-not-limit-processes-small-census
• f/drat-delete
• f/drop-unused-sendsms
• f/empty-census-hotfixes
• f/fix-2fa-mail-or-phone-login
• f/fix-roles
• f/fix-verification-template
• f/fix_census_creation_flow
• f/granular-write-access
• f/hotfix-census-participant
• f/lang-param
• f/leave-empty-groups
• f/list-org-member-group-pagination-bug
• f/mongodb-migrations
• f/move-stripe-webhook
• f/multiple-oauth-providers-286
• f/oauth-specific-error-286
• f/pending-user-invitation-fixes
• f/persistent-errors
• f/qt-haslen
• f/remove-price-tiers
• f/rename-all
• f/rename-org-members
• f/rename-org-participants
• f/review-more-hex
• f/send-email-when-import-finished
• f/sets_constant_max_vote_overwrite
• f/small-lint
• f/stripe-custom-checkout
• f/stripe-declutter
• f/stripe-rewrite
• f/stripe-upgrade-v82
• f/unify-pagination
• f/update-process-flow
• feat/100_org_participants_api
• feat/105_support_email
• feat/111_stripe_phoneSupport
• feat/285-add-org-member-weight
• feat/347-add-weight-to-census-csp
• feat/358-csp-sign-return-weight
• feat/asserts-always-commentf
• feat/cc-support-email-to-user
• feat/cline-rules
• feat/coverage
• feat/csp-use-db-package
• feat/draft-process
• feat/drop-unused-code
• feat/enforce-draft-limits
• feat/extend-members-job-to-report-errors
• feat/more-db-refactors
• feat/noop-refactors
• feat/refactor-CheckGroupMembersFields
• fix/add-invalid-login-error
• fix/add-members-errors
• fix/api-camelcase
• fix/api-error-codes
• fix/check-matched-count
• fix/ci-api-retries
• fix/ci-testCreateUser
• fix/csp-lastcspauth-race
• fix/errors-on-async-job
• fix/leftover-renames
• fix/make-swagger
• fix/memberbase-partial-match
• fix/orgaddress-is-now-a-common-address
• fix/race-condition-org-users-counter
• fix/remove-email-on-member-edit
• fix/remove-redundant-birdhdate-parsing
• fix/sanitize-hex-addresses
• fix/test-max-users-reached
• fix/verifation_flow
• hotfix-0005_rename_verifications_code
• hotfix-TestDecryptTokenFromHexErrors
• hotfix-add-members-job
• hotfix-migration-verifications-code
• hotfix-weight-pointer
• hotfix/2fa-field-phone
• hotfix/bson-omitempty
• hotfix/missing-return
• hotfix/orgMembersByIDs
• hotfix/orgmembers
• hotfix/phone-normalization-bug
• hotfix/wrong-error-voter-login
• i/extend_errors
• main
• r/upgrade-testcontainers
• revert-hotfix
• small-cleanup
• small-fixes-in-census-handlers
• stage
• templates
• test-helper-funcs

Build # 19764174252

Build Type

Pull #331

github

Committed by altergui

Commit Message

refactor(auth): replace hashing with encryption for verification codes

Replace one-way hashing with reversible encryption for verification code
storage and validation. This change enables the system to decrypt stored
codes back to their original values for verification purposes.

Changes:
- Replace HashVerificationCode with SealToken when generating codes
- Replace hash comparison with OpenToken when validating codes
- Add error handling for encryption/decryption operations
- Update tests to validate encrypted code format and length constraints
- Apply changes across user verification, password reset, and code resend flows

This improves the verification flow by allowing bidirectional code
transformation while maintaining security through encryption with
user-specific secrets.

Pull Request Pull Request #331: refactor(auth): replace hashing with encryption for verification codes

Run Details

114 of 152 new or added lines in 5 files covered. (75.0%)

4 existing lines in 2 files now uncovered.

6708 of 10675 relevant lines covered (62.84%)

39.9 hits per line